Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json)
Hash identifier: yvGQZKbWOlUjVRsorHn4h5cOkuCubKLzsZPNcHv/22A=
Subject key identifier: 1B:2D:A2:73:26:57:8C:98:4E:68:1A:EE:B1:1C:DC:05:C2:C1:3C:56
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial: 0197499F6489A6545B1EB7D9028B10BDA924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
Manifest number: 0425
Signing time: Sat 07 Jun 2025 09:01:12 +0000
Manifest this update: Sat 07 Jun 2025 09:01:12 +0000
Manifest next update: Sun 08 Jun 2025 09:01:12 +0000
Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: YvgZJvUAPBHk0DptZVtEHyqC4UCe/5lJagVmNO9aXEM=)
2: MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa (hash: gbTLg78j8QXaXHSAXv6UFJxOI7JnWlqhBTReKaDFIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:64:89:a6:54:5b:1e:b7:d9:02:8b:10:bd:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Validity
Not Before: Jun 7 09:01:12 2025 GMT
Not After : Jun 8 09:01:12 2025 GMT
Subject: CN=1b2da27326578c984e681aeeb11cdc05c2c13c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:10:11:9e:8a:33:de:d5:b3:ce:79:a9:b6:8b:
b9:d8:ad:7d:f9:d9:01:f3:81:2a:a6:0f:76:7b:87:
60:e4:99:fe:1b:66:8d:4f:be:17:a9:8a:76:e3:71:
53:7b:78:ba:61:bd:ec:39:e1:7d:3a:95:36:76:37:
84:70:52:09:43:61:33:e1:b2:c4:af:92:cf:ec:20:
6e:95:88:e5:a2:0d:37:c4:82:9c:e0:9c:eb:d5:5c:
f8:7e:29:02:10:80:20:30:25:9d:86:31:93:fd:1a:
f1:06:29:72:9c:0c:6c:bc:a2:d8:05:fa:9b:df:44:
ee:cc:5f:ee:87:10:23:70:49:38:00:e4:15:e7:c5:
7e:58:ab:59:a4:36:49:68:31:18:05:c6:03:f2:49:
58:0e:e9:94:5d:26:40:f1:30:a8:83:e4:ac:f5:44:
84:f4:d9:0d:19:4e:90:2f:0b:b5:b0:1e:51:93:7e:
53:54:61:1f:4b:e7:65:fd:78:b5:22:78:2f:2b:57:
43:b4:42:f6:af:4c:a9:cb:b6:39:60:3f:4d:e5:7a:
9a:4d:d4:7e:c5:34:92:e1:f6:1d:a8:73:bd:dd:09:
bb:55:59:49:6c:c5:de:b6:6a:ca:39:1e:bb:61:a3:
2f:40:99:04:12:6a:6d:75:02:b2:93:27:3f:13:a5:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2D:A2:73:26:57:8C:98:4E:68:1A:EE:B1:1C:DC:05:C2:C1:3C:56
X509v3 Authority Key Identifier:
keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:dc:9c:91:1e:d4:95:7c:7b:25:d1:d9:71:dc:50:97:b3:37:
73:47:1a:6c:13:c6:8a:2b:43:b0:9f:d2:46:db:47:1f:b5:9e:
32:e2:ba:12:f4:d3:30:0a:99:bc:20:d5:7f:4b:f4:94:91:d2:
8f:f4:1e:d8:24:fe:1e:81:00:9c:b0:98:44:e2:63:56:7c:7b:
b2:76:db:0e:ff:47:51:e8:58:d4:48:52:da:70:a4:07:ca:b0:
d1:56:2f:af:23:e0:b7:10:6b:86:bc:69:b5:09:dc:62:ff:20:
d8:7f:8b:47:2b:f1:16:e8:31:08:99:20:32:ff:c3:cb:5a:66:
22:08:be:9c:36:3b:12:75:ef:4c:2d:c8:74:58:2d:eb:af:6e:
7e:80:94:68:70:66:c9:18:d4:56:9e:11:0e:57:9d:09:d6:11:
a0:a6:b3:19:c2:1b:4c:91:99:05:22:c1:d0:02:0a:02:46:93:
80:9d:79:5c:b3:e8:ad:21:44:93:3e:e2:66:75:d7:2c:af:22:
59:d5:b8:7a:c6:28:00:30:3d:1c:62:e4:53:da:56:4f:4b:9d:
48:76:df:9e:a0:7a:e4:65:b1:34:f4:09:47:43:80:63:fd:6a:
35:54:7a:b4:f4:74:d3:b7:81:fb:58:20:d0:14:2a:29:52:8f:
20:38:ab:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn2SJplRbHrfZAosQvakkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZWE5NzQ3YmQwMWE0NTdmYTJiYjAyZmNjMGFjODIzMTQw
YjUxOGYwHhcNMjUwNjA3MDkwMTEyWhcNMjUwNjA4MDkwMTEyWjAzMTEwLwYDVQQD
EygxYjJkYTI3MzI2NTc4Yzk4NGU2ODFhZWViMTFjZGMwNWMyYzEzYzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhARnooz3tWzznmptou52K19+dkB
84Eqpg92e4dg5Jn+G2aNT74XqYp243FTe3i6Yb3sOeF9OpU2djeEcFIJQ2Ez4bLE
r5LP7CBulYjlog03xIKc4Jzr1Vz4fikCEIAgMCWdhjGT/RrxBilynAxsvKLYBfqb
30TuzF/uhxAjcEk4AOQV58V+WKtZpDZJaDEYBcYD8klYDumUXSZA8TCog+Ss9USE
9NkNGU6QLwu1sB5Rk35TVGEfS+dl/Xi1IngvK1dDtEL2r0ypy7Y5YD9N5XqaTdR+
xTSS4fYdqHO93Qm7VVlJbMXetmrKOR67YaMvQJkEEmptdQKykyc/E6XBjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBstonMmV4yYTmga7rEc3AXCwTxWMB8GA1UdIwQY
MBaAFCXql0e9AaRX+iuwL8wKyCMUC1GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjIt
MDE2ZDZkY2ZhZDgxLzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjItMDE2ZDZkY2ZhZDgx
LzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtyckR7U
lXx7JdHZcdxQl7M3c0cabBPGiitDsJ/SRttHH7WeMuK6EvTTMAqZvCDVf0v0lJHS
j/Qe2CT+HoEAnLCYROJjVnx7snbbDv9HUehY1EhS2nCkB8qw0VYvryPgtxBrhrxp
tQncYv8g2H+LRyvxFugxCJkgMv/Dy1pmIgi+nDY7EnXvTC3IdFgt669ufoCUaHBm
yRjUVp4RDledCdYRoKazGcIbTJGZBSLB0AIKAkaTgJ15XLPorSFEkz7iZnXXLK8i
WdW4esYoADA9HGLkU9pWT0udSHbfnqB65GWxNPQJR0OAY/1qNVR6tPR007eB+1gg
0BQqKVKPIDirtQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:36:13 2025 by rpki-client