Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
File: jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json)
Hash identifier: kNwe+fN4dNqQR94/FX7H4CwcnBAZ4LxIMg0U1XAOd2E=
Subject key identifier: 1F:1A:41:39:10:53:C4:C3:28:BE:CA:9D:2A:69:14:E9:DE:81:8F:0D
Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
Certificate issuer: /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Certificate serial: 01974666D7CEB3FF4A0EA0593ED6C4F081D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
Manifest number: 0135
Signing time: Fri 06 Jun 2025 18:00:34 +0000
Manifest this update: Fri 06 Jun 2025 18:00:34 +0000
Manifest next update: Sat 07 Jun 2025 18:00:34 +0000
Files and hashes: 1: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: 9qCGi6KHDfAYlac0sz58M5acbsQewAVJiadZyaZkNtg=)
2: zXewAjWGvMnM0TC9WYL-KIwYeTc.roa (hash: lBVP9+96UyCRaPNC0pu5UG19WbXzwH4ZL/S+8Cro2UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:d7:ce:b3:ff:4a:0e:a0:59:3e:d6:c4:f0:81:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Validity
Not Before: Jun 6 18:00:34 2025 GMT
Not After : Jun 7 18:00:34 2025 GMT
Subject: CN=1f1a41391053c4c328beca9d2a6914e9de818f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:c5:69:41:a4:21:72:9f:0c:78:e7:4c:75:
f2:38:5a:24:f7:d8:d3:b4:c1:90:40:9f:8a:dc:33:
c7:f0:9e:af:e3:c9:5f:ce:bf:a3:86:a4:34:08:c2:
69:8d:75:03:96:5b:42:3d:6e:e8:0e:98:45:dc:cd:
55:ed:ea:85:a9:9d:da:86:c0:8e:dd:91:37:31:6e:
4d:d4:37:59:d8:b7:9f:16:8e:16:ed:3c:de:43:b3:
9d:c8:4d:34:74:5f:0d:7d:69:0f:9b:c8:01:08:ac:
05:bf:a3:7b:12:e8:78:28:c6:7d:ee:63:2e:fd:88:
0d:c1:df:eb:f0:9c:ba:8a:dc:97:49:2d:68:46:bf:
4a:2c:93:7f:16:be:d4:5e:b8:9d:40:8b:50:ca:4f:
3a:f9:59:61:48:13:e6:42:fa:7a:2d:aa:4e:13:09:
b3:77:43:39:4e:e7:cf:ab:1d:e0:13:ea:53:c8:1b:
6e:f7:95:17:68:76:ff:0a:93:a6:89:1d:08:76:8d:
a1:7a:f2:1e:63:a2:b3:8a:42:d1:26:52:13:81:48:
6f:1a:4a:93:3b:e7:80:87:19:a8:6c:36:ad:f7:d5:
21:d9:a6:4e:99:d9:40:3e:e8:50:b7:f3:af:5a:81:
63:20:6c:07:b8:f8:c2:6d:84:38:f7:85:ae:74:e3:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1A:41:39:10:53:C4:C3:28:BE:CA:9D:2A:69:14:E9:DE:81:8F:0D
X509v3 Authority Key Identifier:
keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3f:20:1c:88:25:1a:08:fb:f9:95:f2:b1:2f:ad:22:66:8f:
df:e3:d1:72:59:31:a7:3a:9a:18:c7:e2:23:f5:c1:15:52:21:
1e:f9:32:29:22:a3:09:42:55:fd:08:f3:23:d4:34:4d:28:16:
a9:38:c9:96:1a:1f:8b:72:d7:55:5b:b9:37:f0:54:07:3f:bd:
17:32:d3:a9:d3:f5:49:61:73:95:03:15:40:72:e4:2b:20:e4:
c9:f6:c0:b9:5d:b5:91:c7:7b:31:37:d2:00:41:4f:fb:12:cf:
18:2a:da:e5:ab:4e:f6:d2:13:be:74:e1:b7:58:d2:09:c2:50:
07:de:07:91:0d:ac:fa:cb:91:5a:e5:45:af:e2:80:47:31:22:
4a:0f:5b:48:d7:5a:37:12:67:c3:07:05:a8:6f:cc:cf:03:d7:
6f:b3:c9:7c:b7:f0:f6:5b:ff:15:7d:a4:c1:1d:2c:0e:2e:6f:
27:c6:32:98:93:28:87:a8:ef:6f:d8:4f:34:11:d0:17:8e:d8:
f1:18:81:75:3d:30:5d:cd:da:b8:69:3a:ab:d3:52:b7:ea:cc:
bb:97:31:80:6c:c8:95:14:72:fa:d0:d9:dc:cb:70:9c:73:ad:
f7:69:17:27:24:4d:90:7c:6e:ef:de:f4:5b:36:31:31:b5:81:
44:31:a4:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZtfOs/9KDqBZPtbE8IHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkY2Q3ZDM5OGZjNDY2ZTEyMWJjNDVmYWY1MGRkODdjMzZi
YmM5NmQwHhcNMjUwNjA2MTgwMDM0WhcNMjUwNjA3MTgwMDM0WjAzMTEwLwYDVQQD
EygxZjFhNDEzOTEwNTNjNGMzMjhiZWNhOWQyYTY5MTRlOWRlODE4ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4TFaUGkIXKfDHjnTHXyOFok99jT
tMGQQJ+K3DPH8J6v48lfzr+jhqQ0CMJpjXUDlltCPW7oDphF3M1V7eqFqZ3ahsCO
3ZE3MW5N1DdZ2LefFo4W7TzeQ7OdyE00dF8NfWkPm8gBCKwFv6N7Euh4KMZ97mMu
/YgNwd/r8Jy6ityXSS1oRr9KLJN/Fr7UXridQItQyk86+VlhSBPmQvp6LapOEwmz
d0M5TufPqx3gE+pTyBtu95UXaHb/CpOmiR0Ido2hevIeY6KzikLRJlITgUhvGkqT
O+eAhxmobDat99Uh2aZOmdlAPuhQt/OvWoFjIGwHuPjCbYQ494WudOPMMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8aQTkQU8TDKL7KnSppFOnegY8NMB8GA1UdIwQY
MBaAFI3NfTmPxGbhIbxF+vUN2Hw2u8ltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMt
MTIxNjQ1ZDk4ZTk0LzEvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMtMTIxNjQ1ZDk4ZTk0
LzEvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOT8gHIgl
Ggj7+ZXysS+tImaP3+PRclkxpzqaGMfiI/XBFVIhHvkyKSKjCUJV/QjzI9Q0TSgW
qTjJlhofi3LXVVu5N/BUBz+9FzLTqdP1SWFzlQMVQHLkKyDkyfbAuV21kcd7MTfS
AEFP+xLPGCra5atO9tITvnTht1jSCcJQB94HkQ2s+suRWuVFr+KARzEiSg9bSNda
NxJnwwcFqG/MzwPXb7PJfLfw9lv/FX2kwR0sDi5vJ8YymJMoh6jvb9hPNBHQF47Y
8RiBdT0wXc3auGk6q9NSt+rMu5cxgGzIlRRy+tDZ3MtwnHOt92kXJyRNkHxu7970
WzYxMbWBRDGkJw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:24 2025 by rpki-client