Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
File: JVnpvh-9HmkJoL6akLOA-CT6saU.mft (raw, json)
Hash identifier: xcdJRENrUYGusmGdXsaBOnFHkQaV4OJkidIBPi2DLBg=
Subject key identifier: BA:04:00:3C:4F:A5:6B:17:FE:11:35:B5:FF:C9:37:90:12:4C:FB:CD
Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
Certificate issuer: /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Certificate serial: 01974AE8EA33ECABF13108636A88E35854D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:01:07 +0000
Manifest this update: Sat 07 Jun 2025 15:01:07 +0000
Manifest next update: Sun 08 Jun 2025 15:01:07 +0000
Files and hashes: 1: 04EXo_aa8R-wCVS1fC9fkSKHbQk.roa (hash: D39mfhIOXghwegUx11UFZTXpnVcMRyxswgHcx5Y2hRA=)
2: BlZm0sYSiIU1jZrNYK3L2v3x4VM.roa (hash: czqqE6msCgy8fH0iDys1D75RKoCAAvAyOHtekUZuaxc=)
3: JVnpvh-9HmkJoL6akLOA-CT6saU.crl (hash: X3gcTTFlSiITanoBIRqB9EcAV4PWaxoFySae9DwM7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:ea:33:ec:ab:f1:31:08:63:6a:88:e3:58:54:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Validity
Not Before: Jun 7 15:01:07 2025 GMT
Not After : Jun 8 15:01:07 2025 GMT
Subject: CN=ba04003c4fa56b17fe1135b5ffc93790124cfbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:d4:3e:ae:ea:18:1c:5c:47:81:8e:1d:b1:
74:b1:27:14:5e:4c:e1:79:2b:22:33:e7:71:c3:3d:
40:a4:07:ef:c5:a7:ba:17:c9:a9:26:b5:f9:8f:54:
72:e1:30:27:a1:ba:7e:8f:da:3d:f3:84:b9:65:5c:
32:43:97:4e:bd:36:7a:67:d6:db:4f:7e:2b:cc:0c:
12:57:f5:21:9c:91:8c:34:d9:98:f7:9f:6f:e7:6f:
da:71:1b:22:43:c2:9e:df:d1:42:63:5d:bc:bb:b2:
6a:5a:7a:eb:58:40:3a:13:9f:17:32:3b:c2:91:9d:
cf:8b:f9:70:63:dd:fe:d4:39:ef:35:20:99:76:5b:
72:0b:6c:9e:75:20:5d:c8:7d:4a:f4:7f:d0:5b:4c:
42:ec:39:28:2c:2a:5e:9c:f7:5b:8d:8b:41:0b:76:
9e:9e:af:ac:a7:72:03:03:c7:a4:96:28:a1:b6:2c:
a4:1f:c4:0d:e7:c6:33:a3:d3:67:82:f1:5d:64:0b:
c3:ea:eb:f0:36:a3:ee:f9:4e:fb:cb:2f:7f:a5:65:
5b:ef:ec:ee:f6:0e:d3:7a:ea:f8:fb:0a:f7:42:63:
64:3d:9a:bf:d4:94:57:e1:39:b1:93:9c:8a:25:3a:
b8:d3:c5:b4:84:0a:70:39:4e:75:cd:ee:5b:77:72:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:04:00:3C:4F:A5:6B:17:FE:11:35:B5:FF:C9:37:90:12:4C:FB:CD
X509v3 Authority Key Identifier:
keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9b:bb:18:ab:60:33:bd:46:cb:55:af:92:f7:7a:d6:cd:86:
79:30:2e:6d:42:a5:11:0c:97:d0:e4:5f:bf:f2:03:3b:3a:16:
10:bd:ae:d2:8b:34:80:2c:1d:b7:e3:f4:a0:71:1d:77:e0:0f:
12:cd:65:77:ad:35:be:7e:35:97:79:21:42:f0:99:bb:37:04:
2d:14:46:13:27:5b:54:49:1b:ea:85:7d:a9:23:cb:e8:0c:1e:
c8:09:18:4d:09:0b:56:3e:1b:dc:a8:9c:19:e3:48:c6:93:36:
df:34:91:5e:e2:9e:3d:04:1a:b7:0c:e9:2e:ad:7b:4d:2e:0d:
52:cb:d5:26:d6:4e:34:21:10:76:7c:ac:98:2e:fb:81:68:33:
94:ee:18:7b:fc:2d:55:52:45:40:20:fa:26:c5:ad:4d:14:63:
fc:11:01:88:e7:4d:eb:df:d7:11:1d:de:b8:3c:01:83:7e:56:
07:91:fe:57:23:47:5a:d8:1a:45:73:56:50:0c:cf:c9:76:2b:
d8:3f:89:2f:98:cb:45:f9:39:98:13:68:f4:aa:41:25:d2:08:
3c:be:09:dc:a2:4a:38:ff:46:7c:e0:71:85:8f:89:41:3b:14:
28:ed:44:e1:ff:fd:fb:5e:7d:3a:4a:8a:02:00:8c:29:89:7e:
a0:f8:77:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6Ooz7KvxMQhjaojjWFTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NTllOWJlMWZiZDFlNjkwOWEwYmU5YTkwYjM4MGY4MjRm
YWIxYTUwHhcNMjUwNjA3MTUwMTA3WhcNMjUwNjA4MTUwMTA3WjAzMTEwLwYDVQQD
EyhiYTA0MDAzYzRmYTU2YjE3ZmUxMTM1YjVmZmM5Mzc5MDEyNGNmYmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmXUPq7qGBxcR4GOHbF0sScUXkzh
eSsiM+dxwz1ApAfvxae6F8mpJrX5j1Ry4TAnobp+j9o984S5ZVwyQ5dOvTZ6Z9bb
T34rzAwSV/UhnJGMNNmY959v52/acRsiQ8Ke39FCY128u7JqWnrrWEA6E58XMjvC
kZ3Pi/lwY93+1DnvNSCZdltyC2yedSBdyH1K9H/QW0xC7DkoLCpenPdbjYtBC3ae
nq+sp3IDA8ekliihtiykH8QN58Yzo9NngvFdZAvD6uvwNqPu+U77yy9/pWVb7+zu
9g7Teur4+wr3QmNkPZq/1JRX4Tmxk5yKJTq408W0hApwOU51ze5bd3KYlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoEADxPpWsX/hE1tf/JN5ASTPvNMB8GA1UdIwQY
MBaAFCVZ6b4fvR5pCaC+mpCzgPgk+rGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZucHZoLTlIbWtKb0w2YWtMT0EtQ1Q2c2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81ZWRkNmYtMmM2NS00NDdkLWJjYWQt
NGFhYWRhNjVkNzFjLzEvSlZucHZoLTlIbWtKb0w2YWtMT0EtQ1Q2c2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81ZWRkNmYtMmM2NS00NDdkLWJjYWQtNGFhYWRhNjVkNzFj
LzEvSlZucHZoLTlIbWtKb0w2YWtMT0EtQ1Q2c2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZu7GKtg
M71Gy1Wvkvd61s2GeTAubUKlEQyX0ORfv/IDOzoWEL2u0os0gCwdt+P0oHEdd+AP
Es1ld601vn41l3khQvCZuzcELRRGEydbVEkb6oV9qSPL6AweyAkYTQkLVj4b3Kic
GeNIxpM23zSRXuKePQQatwzpLq17TS4NUsvVJtZONCEQdnysmC77gWgzlO4Ye/wt
VVJFQCD6JsWtTRRj/BEBiOdN69/XER3euDwBg35WB5H+VyNHWtgaRXNWUAzPyXYr
2D+JL5jLRfk5mBNo9KpBJdIIPL4J3KJKOP9GfOBxhY+JQTsUKO1E4f/9+159OkqK
AgCMKYl+oPh3Gw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:20 2025 by rpki-client