Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier: 2iKs9Ljj2i05bJXknALSPH6Gn3ZVQ/5ui0DYcXgC9VY=
Subject key identifier: 7B:51:1F:43:01:4A:D5:FE:A4:F2:72:67:62:0E:5F:D9:DE:73:AA:35
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial: 0197481E96364D7B6C760DF75E271B18D725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number: 070C
Signing time: Sat 07 Jun 2025 02:00:53 +0000
Manifest this update: Sat 07 Jun 2025 02:00:53 +0000
Manifest next update: Sun 08 Jun 2025 02:00:53 +0000
Files and hashes: 1: 1714kp0cfca_poPK5-VjFlBE8Bk.roa (hash: j4eVSfOj5HVSdHjC10lxDRGeLnqFO2C+nkquqN7eUhM=)
2: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: VXcoUeOkao/qxFZRInHDZ2YggpXJtkl4ubdJcSroFEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:96:36:4d:7b:6c:76:0d:f7:5e:27:1b:18:d7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Validity
Not Before: Jun 7 02:00:53 2025 GMT
Not After : Jun 8 02:00:53 2025 GMT
Subject: CN=7b511f43014ad5fea4f27267620e5fd9de73aa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5e:83:50:4a:e3:91:74:f2:d3:1b:b8:c1:81:
1e:cd:f4:aa:e9:af:18:1f:7b:cf:f1:a8:54:e4:55:
ca:f4:aa:aa:4b:bc:b9:e0:0e:b8:45:36:4d:21:75:
f3:96:54:6b:1e:3e:94:fe:d1:a3:da:f9:12:9d:27:
f9:f7:10:1d:4c:49:d6:d2:21:ea:9e:98:34:dc:5d:
49:94:0f:6e:54:d4:67:85:fe:00:7f:38:b3:c6:cd:
8a:f5:92:05:85:cc:80:08:c4:0f:4b:d4:c2:7e:8a:
cf:58:c5:a7:fa:c7:8b:f5:5a:0a:9c:d0:d8:cb:ff:
c3:3f:0b:9e:63:e6:e9:29:f1:b9:e0:54:ff:4d:2e:
5a:6d:b4:fd:59:0c:93:7a:15:21:82:b7:8f:5f:b4:
7e:85:96:fb:d1:68:4d:17:99:27:2e:12:f1:34:e2:
ad:8b:1f:fe:03:66:d9:0c:03:20:ba:de:3b:3b:f8:
33:70:e2:d1:63:e6:ea:71:90:9a:eb:0b:f2:2e:1f:
43:c6:fe:40:b5:cd:02:cc:56:23:de:9a:67:31:d6:
1b:2e:60:4a:b1:2a:a6:4d:c4:01:39:7f:d4:44:11:
e4:90:0b:a3:0c:13:e6:4e:61:ba:5a:d5:0a:ae:6f:
07:77:1c:da:d3:ed:8a:61:8e:c9:7a:ef:bd:27:4c:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:51:1F:43:01:4A:D5:FE:A4:F2:72:67:62:0E:5F:D9:DE:73:AA:35
X509v3 Authority Key Identifier:
keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3d:94:bd:91:45:aa:14:8a:4c:93:06:96:c3:f4:80:90:58:
0b:80:71:78:03:39:06:93:09:4f:47:dd:ed:39:73:ef:24:ff:
14:e9:98:90:2e:8d:bf:cd:7c:a5:f3:de:dd:a7:19:cc:d0:fd:
85:3d:a0:20:fe:d8:9c:e3:85:83:ea:56:96:69:25:70:73:1e:
82:c7:da:87:a4:a3:ae:87:9e:0a:3a:8b:bf:46:ae:88:55:ab:
e1:7c:99:5e:d0:62:6f:aa:f8:bf:5d:40:d2:6f:c0:a8:c0:4f:
aa:78:5a:98:92:9b:96:57:ce:10:dd:68:c0:f8:c9:aa:60:94:
3e:e5:16:df:9b:67:75:85:85:d4:eb:e7:5e:80:c5:e5:51:81:
87:96:6c:9b:1d:0a:18:10:93:51:0a:3f:db:01:f2:ed:b9:7b:
ce:34:89:4a:1d:ca:1d:43:7c:1c:69:94:88:83:5f:00:88:bb:
e5:38:72:4e:bf:d2:52:f3:68:b6:13:85:64:0f:4d:f2:61:dd:
a2:bc:06:e8:c3:ac:40:78:6b:98:82:25:39:bd:c0:6b:09:43:
88:19:b7:10:7d:0d:4d:0e:93:35:ff:46:8c:55:43:1e:10:62:
16:07:4b:8d:68:8b:39:b7:e9:49:ce:81:fc:25:bb:3b:01:d2:
e6:aa:44:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHpY2TXtsdg33XicbGNclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NmY5YmU3ODNkNzNkOTVhYjhhYTU0NjE5ZTYwZjkwMTFj
MDRkNjcwHhcNMjUwNjA3MDIwMDUzWhcNMjUwNjA4MDIwMDUzWjAzMTEwLwYDVQQD
Eyg3YjUxMWY0MzAxNGFkNWZlYTRmMjcyNjc2MjBlNWZkOWRlNzNhYTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA116DUErjkXTy0xu4wYEezfSq6a8Y
H3vP8ahU5FXK9KqqS7y54A64RTZNIXXzllRrHj6U/tGj2vkSnSf59xAdTEnW0iHq
npg03F1JlA9uVNRnhf4Afzizxs2K9ZIFhcyACMQPS9TCforPWMWn+seL9VoKnNDY
y//DPwueY+bpKfG54FT/TS5abbT9WQyTehUhgrePX7R+hZb70WhNF5knLhLxNOKt
ix/+A2bZDAMgut47O/gzcOLRY+bqcZCa6wvyLh9Dxv5Atc0CzFYj3ppnMdYbLmBK
sSqmTcQBOX/URBHkkAujDBPmTmG6WtUKrm8Hdxza0+2KYY7Jeu+9J0yJGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtRH0MBStX+pPJyZ2IOX9nec6o1MB8GA1UdIwQY
MBaAFCRvm+eD1z2Vq4qlRhnmD5ARwE1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWIt
Y2JiZDAxZjJiOTFjLzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWItY2JiZDAxZjJiOTFj
LzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATj2UvZFF
qhSKTJMGlsP0gJBYC4BxeAM5BpMJT0fd7Tlz7yT/FOmYkC6Nv818pfPe3acZzND9
hT2gIP7YnOOFg+pWlmklcHMegsfah6SjroeeCjqLv0auiFWr4XyZXtBib6r4v11A
0m/AqMBPqnhamJKbllfOEN1owPjJqmCUPuUW35tndYWF1OvnXoDF5VGBh5Zsmx0K
GBCTUQo/2wHy7bl7zjSJSh3KHUN8HGmUiINfAIi75ThyTr/SUvNothOFZA9N8mHd
orwG6MOsQHhrmIIlOb3AawlDiBm3EH0NTQ6TNf9GjFVDHhBiFgdLjWiLObfpSc6B
/CW7OwHS5qpEpA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:32 2025 by rpki-client