Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
File: j35CW5mA3j5tTVVraau_8SVIZ7E.mft (raw, json)
Hash identifier: ESEWPy2DqjjuA1fMNs4Y9kctmWvZGWbzjhlNF2+p2+E=
Subject key identifier: B3:34:B2:A5:3B:C9:03:10:91:DA:B2:CD:E3:F7:2F:74:54:0B:9D:73
Authority key identifier: 8F:7E:42:5B:99:80:DE:3E:6D:4D:55:6B:69:AB:BF:F1:25:48:67:B1
Certificate issuer: /CN=8f7e425b9980de3e6d4d556b69abbff1254867b1
Certificate serial: 01975EA5DEBFDD7C818EF28A7CC8800609E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
Manifest number: AA
Signing time: Wed 11 Jun 2025 11:00:17 +0000
Manifest this update: Wed 11 Jun 2025 11:00:17 +0000
Manifest next update: Thu 12 Jun 2025 11:00:17 +0000
Files and hashes: 1: FsU8rSGyQb0kGFvbxmQ4nDDUBg4.roa (hash: xmWHpgYL9RCJue+qrtt+Eau987wbwxVuh1gIf8HMA3I=)
2: j35CW5mA3j5tTVVraau_8SVIZ7E.crl (hash: VsjCzc/W7MqYkld0TOA0ZJibc/FSaWAspHeL6rQMgvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:a5:de:bf:dd:7c:81:8e:f2:8a:7c:c8:80:06:09:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7e425b9980de3e6d4d556b69abbff1254867b1
Validity
Not Before: Jun 11 11:00:17 2025 GMT
Not After : Jun 12 11:00:17 2025 GMT
Subject: CN=b334b2a53bc9031091dab2cde3f72f74540b9d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:69:85:51:63:fe:0c:9c:09:3e:d6:25:a7:
4f:29:43:9a:78:5f:77:9d:f6:63:8e:f3:00:fd:12:
b0:59:c1:e2:44:5f:7c:f0:7a:5c:96:df:2f:1f:cd:
31:14:c1:db:5b:85:f8:df:84:0a:e6:f2:b2:82:98:
a9:b6:1b:6a:c5:86:83:b8:f3:7a:4c:94:b9:cd:88:
4f:fe:dc:60:88:2d:49:61:65:cb:18:37:54:e3:29:
b4:8c:db:f5:cf:46:cb:64:04:a4:72:d8:0f:c6:60:
6e:f8:17:05:24:24:22:54:35:e7:66:47:08:b4:db:
d1:f6:26:11:e7:0c:16:fe:0e:58:eb:61:51:22:5c:
6b:e7:f9:91:26:3e:35:2d:ad:b5:6b:53:48:58:78:
bf:d6:b0:56:4d:2a:07:11:bd:92:9a:05:ef:72:62:
ef:be:af:b3:89:9f:64:41:3e:8a:db:7d:a1:40:40:
ac:3c:c5:ce:3b:03:be:56:25:fc:d8:9d:ea:a3:b9:
ca:34:28:4d:40:f3:a3:f3:c6:79:c9:72:98:60:1e:
57:2f:ab:a5:cc:49:89:e0:02:cb:a6:12:a2:c1:8e:
10:be:77:2b:1d:d7:6d:b1:1c:56:ca:49:3f:3f:79:
5f:7c:d1:e7:28:12:20:f6:11:a0:75:de:93:34:ba:
ea:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:34:B2:A5:3B:C9:03:10:91:DA:B2:CD:E3:F7:2F:74:54:0B:9D:73
X509v3 Authority Key Identifier:
keyid:8F:7E:42:5B:99:80:DE:3E:6D:4D:55:6B:69:AB:BF:F1:25:48:67:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2b:2f:b2:96:e7:c2:70:a3:a7:f7:8c:57:1c:8d:36:96:1a:
64:43:42:9d:52:2e:fe:eb:13:43:ff:63:af:2a:5a:9f:b7:c5:
71:3e:6d:c4:75:2b:68:61:da:17:4d:63:85:12:f5:7b:f6:e6:
50:b1:d1:ff:7a:be:de:fe:05:9b:3b:3b:6d:d4:92:5c:6c:c1:
47:6d:a9:6a:03:dd:f0:13:99:ea:35:f3:88:14:54:27:27:8d:
99:8c:d8:65:5d:1d:11:65:ea:a7:67:9f:77:cc:4a:98:da:13:
c2:c6:b6:c5:50:ae:31:73:5f:ab:0b:73:ec:a0:7c:42:18:85:
ba:58:ef:b4:90:35:b7:da:3a:9a:d6:9f:ca:c8:6e:8f:13:57:
ed:e4:77:cb:cd:9e:3b:09:ca:18:70:a5:52:14:79:e4:c0:73:
f0:ae:88:54:10:b4:08:72:3b:c1:7c:ea:96:59:f7:84:bd:62:
e9:70:40:8f:4e:60:e5:f6:4e:17:a1:ad:05:6b:fc:b6:c7:7a:
39:3f:1d:44:03:b8:c4:44:74:44:bf:1f:d3:f6:49:12:f5:ea:
17:70:17:bf:cf:e7:f4:e3:83:41:59:fb:a5:a0:4d:a7:79:f4:
1b:13:3c:0b:62:74:2c:d8:d9:e1:95:ef:55:15:cc:fb:16:52:
f6:7f:68:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdepd6/3XyBjvKKfMiABgniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2U0MjViOTk4MGRlM2U2ZDRkNTU2YjY5YWJiZmYxMjU0
ODY3YjEwHhcNMjUwNjExMTEwMDE3WhcNMjUwNjEyMTEwMDE3WjAzMTEwLwYDVQQD
EyhiMzM0YjJhNTNiYzkwMzEwOTFkYWIyY2RlM2Y3MmY3NDU0MGI5ZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT1phVFj/gycCT7WJadPKUOaeF93
nfZjjvMA/RKwWcHiRF988Hpclt8vH80xFMHbW4X434QK5vKygpipthtqxYaDuPN6
TJS5zYhP/txgiC1JYWXLGDdU4ym0jNv1z0bLZASkctgPxmBu+BcFJCQiVDXnZkcI
tNvR9iYR5wwW/g5Y62FRIlxr5/mRJj41La21a1NIWHi/1rBWTSoHEb2SmgXvcmLv
vq+ziZ9kQT6K232hQECsPMXOOwO+ViX82J3qo7nKNChNQPOj88Z5yXKYYB5XL6ul
zEmJ4ALLphKiwY4QvncrHddtsRxWykk/P3lffNHnKBIg9hGgdd6TNLrqdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLM0sqU7yQMQkdqyzeP3L3RUC51zMB8GA1UdIwQY
MBaAFI9+QluZgN4+bU1Va2mrv/ElSGexMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajM1Q1c1bUEzajV0VFZWcmFhdV84U1ZJWjdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82MDhjYjgtMmQyMS00MTc3LTk1YjIt
OTE0NzU0ODA3MzE0LzEvajM1Q1c1bUEzajV0VFZWcmFhdV84U1ZJWjdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82MDhjYjgtMmQyMS00MTc3LTk1YjItOTE0NzU0ODA3MzE0
LzEvajM1Q1c1bUEzajV0VFZWcmFhdV84U1ZJWjdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaysvspbn
wnCjp/eMVxyNNpYaZENCnVIu/usTQ/9jrypan7fFcT5txHUraGHaF01jhRL1e/bm
ULHR/3q+3v4Fmzs7bdSSXGzBR22pagPd8BOZ6jXziBRUJyeNmYzYZV0dEWXqp2ef
d8xKmNoTwsa2xVCuMXNfqwtz7KB8QhiFuljvtJA1t9o6mtafyshujxNX7eR3y82e
OwnKGHClUhR55MBz8K6IVBC0CHI7wXzqlln3hL1i6XBAj05g5fZOF6GtBWv8tsd6
OT8dRAO4xER0RL8f0/ZJEvXqF3AXv8/n9OODQVn7paBNp3n0GxM8C2J0LNjZ4ZXv
VRXM+xZS9n9o5A==
-----END CERTIFICATE-----
Generated at Wed Jun 11 13:50:27 2025 by rpki-client