Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
File: JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json)
Hash identifier: 4pKRLNWCusD7bdZYdspQTTVajw7LempE9qcMFwOOK84=
Subject key identifier: 4A:B5:49:E3:AB:8B:4D:8E:21:68:2E:AB:8A:48:19:68:8A:0A:CF:19
Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
Certificate issuer: /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Certificate serial: 01974A7B5B16BCE5F10AF5C6804BBF98A52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 13:01:27 +0000
Manifest this update: Sat 07 Jun 2025 13:01:27 +0000
Manifest next update: Sun 08 Jun 2025 13:01:27 +0000
Files and hashes: 1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: c46caExal/Znx5C6tBo5aUf2bsLchjh63vCK2OdxclE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:5b:16:bc:e5:f1:0a:f5:c6:80:4b:bf:98:a5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Validity
Not Before: Jun 7 13:01:27 2025 GMT
Not After : Jun 8 13:01:27 2025 GMT
Subject: CN=4ab549e3ab8b4d8e21682eab8a4819688a0acf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:a9:e2:c1:4d:20:5d:d4:64:6b:40:7a:ca:
29:70:a0:f1:4b:51:18:e5:df:c2:4c:07:fb:eb:21:
a4:66:5a:c1:ef:c6:b0:25:48:87:92:a1:06:eb:da:
31:ef:40:ed:49:32:d8:c0:be:07:a1:a1:52:b9:fa:
97:e0:cb:cf:29:b9:f8:f5:03:5c:f5:47:4a:b6:39:
08:62:1f:c0:70:d6:a4:31:57:f4:8e:90:d3:12:7d:
d6:84:55:51:9c:97:04:c6:46:ce:d1:52:ff:ca:6a:
8b:5c:27:bf:4e:a2:eb:32:05:4f:1e:92:44:7f:85:
90:dd:85:77:3c:7e:60:c4:f1:99:cf:95:24:1f:3b:
04:ec:07:0a:65:3e:dd:8b:50:5f:0f:ec:6c:0d:81:
d3:ec:b1:fa:36:9a:4b:9e:f3:13:39:c7:b3:20:6d:
c8:c5:3f:06:9a:01:f5:c9:c4:29:8a:af:b1:66:bc:
7d:5e:d5:fa:a9:ae:e3:fd:2e:c0:33:b6:d0:25:e8:
1e:af:00:a8:98:eb:b7:51:bb:f0:fa:a2:98:3f:80:
b2:f3:10:b2:31:b0:14:ca:66:c2:ac:dc:4d:94:1a:
64:3c:33:d7:51:d7:33:fd:31:d4:af:2b:74:52:a9:
76:2d:f5:dd:15:b5:19:f5:d9:c3:c9:fb:5b:f4:af:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B5:49:E3:AB:8B:4D:8E:21:68:2E:AB:8A:48:19:68:8A:0A:CF:19
X509v3 Authority Key Identifier:
keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bb:a4:1c:7e:23:51:cd:ef:ef:44:2f:88:d3:19:df:c7:44:
63:bf:33:f9:b1:fc:9b:55:ec:ac:82:9d:9f:eb:72:ab:14:17:
e6:e8:a5:db:32:de:2b:4a:b7:c9:3f:de:1c:11:f9:0b:e9:03:
77:74:38:09:28:f7:d4:29:87:de:c0:13:a0:68:b2:41:93:2a:
cb:72:8b:6d:d0:39:e6:eb:b3:23:f2:1f:8c:52:10:6b:89:80:
ef:8a:f1:62:6c:a0:1c:06:c9:4c:2e:b0:6f:30:16:e4:2b:aa:
8f:31:36:78:cf:46:0e:ec:be:30:d5:c6:30:b2:46:30:63:d2:
da:c6:b4:29:24:b5:38:6d:45:ad:f6:70:81:33:cb:62:74:7e:
4b:6a:07:2f:68:cc:46:4d:70:f9:1b:e7:78:a7:25:9a:1e:f9:
6b:89:12:bb:ef:af:56:fd:bc:92:7c:d5:f6:28:4e:d1:37:3b:
11:14:02:01:ce:a3:0a:ac:29:9b:42:aa:5c:d5:a4:78:73:a4:
fd:0e:41:62:20:cc:c7:0c:90:cd:69:5d:f9:0f:00:24:86:1e:
8a:7f:ae:80:cf:69:a6:10:48:5c:bd:2c:c2:7d:05:47:73:c5:
b0:bd:d5:aa:c5:9e:46:b3:f7:e3:e6:df:dc:7d:80:95:c9:f3:
02:b8:1a:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe1sWvOXxCvXGgEu/mKUrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MWJlMWMwNmFmMTFmM2VlYzFkY2IxOTZiY2E4ZGU3YmYw
OGZiOTgwHhcNMjUwNjA3MTMwMTI3WhcNMjUwNjA4MTMwMTI3WjAzMTEwLwYDVQQD
Eyg0YWI1NDllM2FiOGI0ZDhlMjE2ODJlYWI4YTQ4MTk2ODhhMGFjZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIGp4sFNIF3UZGtAesopcKDxS1EY
5d/CTAf76yGkZlrB78awJUiHkqEG69ox70DtSTLYwL4HoaFSufqX4MvPKbn49QNc
9UdKtjkIYh/AcNakMVf0jpDTEn3WhFVRnJcExkbO0VL/ymqLXCe/TqLrMgVPHpJE
f4WQ3YV3PH5gxPGZz5UkHzsE7AcKZT7di1BfD+xsDYHT7LH6NppLnvMTOcezIG3I
xT8GmgH1ycQpiq+xZrx9XtX6qa7j/S7AM7bQJegerwComOu3Ubvw+qKYP4Cy8xCy
MbAUymbCrNxNlBpkPDPXUdcz/THUryt0Uql2LfXdFbUZ9dnDyftb9K+NTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEq1SeOri02OIWguq4pIGWiKCs8ZMB8GA1UdIwQY
MBaAFCcb4cBq8R8+7B3LGWvKjee/CPuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNDlkNjQtODNjNC00YTdlLWI0YjUt
NDc0MjA3ZGFlZjQzLzEvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xNDlkNjQtODNjNC00YTdlLWI0YjUtNDc0MjA3ZGFlZjQz
LzEvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrukHH4j
Uc3v70QviNMZ38dEY78z+bH8m1XsrIKdn+tyqxQX5uil2zLeK0q3yT/eHBH5C+kD
d3Q4CSj31CmH3sAToGiyQZMqy3KLbdA55uuzI/IfjFIQa4mA74rxYmygHAbJTC6w
bzAW5CuqjzE2eM9GDuy+MNXGMLJGMGPS2sa0KSS1OG1FrfZwgTPLYnR+S2oHL2jM
Rk1w+RvneKclmh75a4kSu++vVv28knzV9ihO0Tc7ERQCAc6jCqwpm0KqXNWkeHOk
/Q5BYiDMxwyQzWld+Q8AJIYein+ugM9pphBIXL0swn0FR3PFsL3VqsWeRrP34+bf
3H2AlcnzArgaGA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:44:27 2025 by rpki-client