Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
File: J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft (raw, json)
Hash identifier: RhIOG91JqWZCxTUGbZM4l1ANfZN6AqQ5a/PD1y1A24Y=
Subject key identifier: 0D:0D:78:B5:AD:B8:5D:4C:C4:DF:D7:78:DA:F6:14:11:B7:4A:99:8D
Authority key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
Certificate issuer: /CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Certificate serial: 01975CB84C253C96314FADCF761E59312B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
Manifest number: 0133
Signing time: Wed 11 Jun 2025 02:01:11 +0000
Manifest this update: Wed 11 Jun 2025 02:01:11 +0000
Manifest next update: Thu 12 Jun 2025 02:01:11 +0000
Files and hashes: 1: J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl (hash: xxWNIezbSCoJXPFad46B/nOEh7NDACskKWvDmvY2FD0=)
2: fTfqf3RzH3ibTJ1sVk6qwuCUTso.roa (hash: zZbWW91JqjxpGk5DcSBhXzXRcrXTOVjIQL0IYt57KX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b8:4c:25:3c:96:31:4f:ad:cf:76:1e:59:31:2b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Validity
Not Before: Jun 11 02:01:11 2025 GMT
Not After : Jun 12 02:01:11 2025 GMT
Subject: CN=0d0d78b5adb85d4cc4dfd778daf61411b74a998d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:e8:bf:31:06:b1:09:7e:92:13:bc:a5:08:
6e:e3:8c:7c:d7:97:15:97:16:e8:56:3b:c3:70:6f:
1b:4e:fd:1b:ae:5b:9c:93:15:bd:12:7d:56:55:01:
21:ba:a8:03:8b:e7:28:39:8f:72:66:61:08:04:d2:
c3:f3:09:44:75:a5:93:da:07:e8:88:6f:8a:65:4e:
8d:2d:e2:6e:50:31:10:53:b1:e1:cf:4b:b3:2a:c7:
44:b0:74:c4:52:1b:18:a3:6b:48:07:e9:1e:85:dd:
13:8d:33:37:b1:31:60:b8:4a:c6:9d:32:8e:7a:10:
80:9e:3b:25:60:02:24:e7:b0:b9:e9:5d:80:da:fe:
c9:d2:b7:a1:1c:d5:71:f7:b7:3f:7d:ef:75:3f:93:
64:07:0a:6e:2a:9f:de:87:48:4a:19:dd:b9:ff:c0:
ce:75:18:18:0c:8b:17:53:cc:82:ed:0d:00:20:09:
a4:06:0c:7c:79:91:f4:55:5d:da:93:12:4c:0d:1a:
d5:36:22:3c:6f:d4:c8:74:70:5c:5f:da:3e:d6:f9:
dc:7f:8b:a5:f2:48:64:cb:48:79:5b:43:c9:e7:4c:
e1:90:c5:0f:e8:56:d4:1d:37:d3:f8:00:84:4f:2c:
97:45:4e:90:3c:2f:86:c9:8e:b8:9d:12:b4:f5:d7:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0D:78:B5:AD:B8:5D:4C:C4:DF:D7:78:DA:F6:14:11:B7:4A:99:8D
X509v3 Authority Key Identifier:
keyid:27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8e:ae:c8:f4:70:d9:28:e3:58:9e:f0:90:f2:6a:34:68:15:
8e:28:9e:1a:d4:a1:73:b6:e2:34:51:3f:b4:83:20:59:3d:aa:
14:0e:c1:dd:71:e7:64:83:af:c4:83:9c:d2:e0:18:62:c0:f0:
a2:dd:8b:d8:d6:1d:43:b2:76:9c:16:47:fc:0c:92:cd:0c:51:
29:88:70:f3:40:85:35:bf:5e:4d:e7:58:c7:ab:b5:9b:98:b7:
62:ea:42:d1:a5:fa:7f:62:a6:8b:37:d9:96:17:40:8f:7c:2a:
1d:51:18:13:5d:6d:c3:89:71:4b:e8:e4:b5:15:57:aa:ab:41:
ab:42:b5:8b:aa:98:7b:4c:4a:7a:be:55:39:2c:26:5f:c5:2d:
77:0f:a7:d0:ee:42:35:a7:6f:1d:30:2b:23:44:d0:83:cf:8e:
93:74:91:62:78:16:49:71:bb:ed:78:c8:f7:7b:3b:c5:67:0b:
88:5d:3b:b7:02:32:1c:e1:f3:66:c7:92:a9:b0:7b:88:03:fa:
54:49:be:71:7f:6e:20:1f:30:54:43:0d:6a:e9:c0:42:e9:57:
b4:c3:85:8d:20:b1:f5:fc:cc:87:00:ad:03:04:61:3d:73:dc:
7c:0f:89:f2:61:e7:21:ab:da:a3:4f:42:04:45:1a:51:b2:81:
74:1f:ae:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcuEwlPJYxT63Pdh5ZMStHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDQxNjA1ZmRlYjVkOWMzZGVhYmVlMmY1ZDdjNjY3ZDk2
ZmQ4ZTAwHhcNMjUwNjExMDIwMTExWhcNMjUwNjEyMDIwMTExWjAzMTEwLwYDVQQD
EygwZDBkNzhiNWFkYjg1ZDRjYzRkZmQ3NzhkYWY2MTQxMWI3NGE5OThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3LovzEGsQl+khO8pQhu44x815cV
lxboVjvDcG8bTv0brluckxW9En1WVQEhuqgDi+coOY9yZmEIBNLD8wlEdaWT2gfo
iG+KZU6NLeJuUDEQU7Hhz0uzKsdEsHTEUhsYo2tIB+kehd0TjTM3sTFguErGnTKO
ehCAnjslYAIk57C56V2A2v7J0rehHNVx97c/fe91P5NkBwpuKp/eh0hKGd25/8DO
dRgYDIsXU8yC7Q0AIAmkBgx8eZH0VV3akxJMDRrVNiI8b9TIdHBcX9o+1vncf4ul
8khky0h5W0PJ50zhkMUP6FbUHTfT+ACETyyXRU6QPC+GyY64nRK09ddqHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0NeLWtuF1MxN/XeNr2FBG3SpmNMB8GA1UdIwQY
MBaAFCdEFgX9612cPeq+4vXXxmfZb9jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBRV0JmM3JYWnc5NnI3aTlkZkdaOWx2Mk9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNmRiNTQtYzA0My00NTU0LTg0OTIt
NzUyYzk1YzljZjc5LzEvSjBRV0JmM3JYWnc5NnI3aTlkZkdaOWx2Mk9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zNmRiNTQtYzA0My00NTU0LTg0OTItNzUyYzk1YzljZjc5
LzEvSjBRV0JmM3JYWnc5NnI3aTlkZkdaOWx2Mk9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXY6uyPRw
2SjjWJ7wkPJqNGgVjiieGtShc7biNFE/tIMgWT2qFA7B3XHnZIOvxIOc0uAYYsDw
ot2L2NYdQ7J2nBZH/AySzQxRKYhw80CFNb9eTedYx6u1m5i3YupC0aX6f2KmizfZ
lhdAj3wqHVEYE11tw4lxS+jktRVXqqtBq0K1i6qYe0xKer5VOSwmX8Utdw+n0O5C
NadvHTArI0TQg8+Ok3SRYngWSXG77XjI93s7xWcLiF07twIyHOHzZseSqbB7iAP6
VEm+cX9uIB8wVEMNaunAQulXtMOFjSCx9fzMhwCtAwRhPXPcfA+J8mHnIavao09C
BEUaUbKBdB+ufQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:31:12 2025 by rpki-client