Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: +U/z39v7uAUAHMvATiHIHl+4zKCnti8fujLaxDacONs=
Subject key identifier: DB:28:D4:EF:5D:99:80:54:71:7E:56:0E:48:2D:6B:1F:09:22:65:0A
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 01974EFC64C6C3FA38540E9BF3CF3F137D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 1510
Signing time: Sun 08 Jun 2025 10:00:52 +0000
Manifest this update: Sun 08 Jun 2025 10:00:52 +0000
Manifest next update: Mon 09 Jun 2025 10:00:52 +0000
Files and hashes: 1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: fLDG+NZFeHy9u/IJ7om3vamTWppZAna5g58RHk2SpEQ=)
2: LkSjEtNw7y8FvIXezhAzO7bql6w.roa (hash: XWnh2LDRuVnV3zQSeTuxulNsHgB6C0TJ9AfUsOOpruk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:64:c6:c3:fa:38:54:0e:9b:f3:cf:3f:13:7d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Jun 8 10:00:52 2025 GMT
Not After : Jun 9 10:00:52 2025 GMT
Subject: CN=db28d4ef5d998054717e560e482d6b1f0922650a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:d7:6a:6d:65:82:da:de:4a:fc:f5:10:d7:
dc:d9:ba:a4:2e:24:81:13:bf:ab:65:d5:f2:6e:e2:
67:9a:cd:de:0b:b6:cd:b0:9a:2e:90:1e:7a:6b:ed:
79:d1:f1:d2:24:93:cc:15:06:db:a3:0a:be:a2:75:
48:95:e3:64:4a:8c:c6:94:8c:72:9b:14:96:8a:a1:
f3:b2:dd:38:ec:8f:a7:68:58:5d:06:52:c3:ca:43:
f0:c8:85:4e:e3:4f:18:24:9f:53:4b:2d:eb:58:b5:
70:d1:c3:e9:6f:5f:b0:57:0b:0f:f7:4c:5c:84:aa:
31:64:f5:1a:1f:f8:10:97:89:6b:e0:d2:72:5e:e5:
04:4e:51:a1:38:7f:ac:e1:b1:91:3b:b4:9f:50:43:
d1:5d:ac:ac:d8:e3:9e:cb:2f:ac:44:8a:e5:6a:b7:
91:65:8b:70:c5:87:da:96:d4:26:6e:5e:2c:2d:96:
4d:00:8e:dd:23:e4:bc:97:3d:c9:f7:e5:9a:83:34:
21:02:a4:52:2b:94:33:21:20:77:14:53:44:61:48:
75:f0:9c:70:17:84:b1:0d:3b:06:15:2f:d4:0e:89:
9c:5f:e5:3f:2c:1b:2f:1c:72:b9:ea:fe:37:cf:4f:
44:47:00:15:13:0d:be:07:dd:8c:1c:5b:08:22:05:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:28:D4:EF:5D:99:80:54:71:7E:56:0E:48:2D:6B:1F:09:22:65:0A
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a1:5c:d5:47:ef:75:f2:b1:e2:c4:20:92:9c:f6:12:3a:6c:
cd:06:bf:d3:3d:16:52:b0:1a:f7:be:2d:22:bb:76:18:98:79:
18:bf:3e:64:d4:45:89:7e:73:14:84:d4:99:1f:78:6d:b6:a5:
6d:0c:a0:8d:c4:3a:0d:4f:95:57:0f:d8:6e:6a:d7:0d:14:7f:
a8:71:50:f3:1a:ac:61:86:28:8d:be:86:42:8a:72:dc:4e:fc:
c5:07:8f:f7:da:d0:f8:92:3f:15:e9:a3:bf:d7:01:94:fe:18:
1c:45:3e:a6:43:de:fa:f3:9e:58:22:04:fc:2a:ab:7c:e8:a1:
a8:d7:5c:44:41:6c:ab:46:59:02:ea:ff:f2:7c:2d:37:73:23:
68:b0:d7:bb:b2:db:28:82:82:d4:98:82:2b:15:f3:ba:82:b7:
32:90:31:78:1d:26:4c:af:a3:ed:2f:73:d3:e2:9c:7f:08:9e:
d8:35:ee:fd:4c:f6:d5:b8:0a:a0:cd:75:82:69:22:a9:91:4d:
64:f7:24:e1:11:60:75:c7:f6:fa:87:8e:7b:46:29:4a:34:a0:
00:9d:e5:69:c8:fd:d1:17:c7:a0:48:2e:fd:e9:c1:40:31:2d:
a8:d0:2f:9f:fc:6b:b7:a5:80:cf:bc:81:ca:97:ee:30:cc:bc:
1a:03:1f:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO/GTGw/o4VA6b888/E31cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGU3NTk0YWFlMjRhNGZkNmMzODU1NDUxN2Q4YjlkNmZh
ZTA2MGQwHhcNMjUwNjA4MTAwMDUyWhcNMjUwNjA5MTAwMDUyWjAzMTEwLwYDVQQD
EyhkYjI4ZDRlZjVkOTk4MDU0NzE3ZTU2MGU0ODJkNmIxZjA5MjI2NTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRvXam1lgtreSvz1ENfc2bqkLiSB
E7+rZdXybuJnms3eC7bNsJoukB56a+150fHSJJPMFQbbowq+onVIleNkSozGlIxy
mxSWiqHzst047I+naFhdBlLDykPwyIVO408YJJ9TSy3rWLVw0cPpb1+wVwsP90xc
hKoxZPUaH/gQl4lr4NJyXuUETlGhOH+s4bGRO7SfUEPRXays2OOeyy+sRIrlareR
ZYtwxYfaltQmbl4sLZZNAI7dI+S8lz3J9+WagzQhAqRSK5QzISB3FFNEYUh18Jxw
F4SxDTsGFS/UDomcX+U/LBsvHHK56v43z09ERwAVEw2+B92MHFsIIgVOrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNso1O9dmYBUcX5WDkgtax8JImUKMB8GA1UdIwQY
MBaAFCQOdZSq4kpP1sOFVFF9i51vrgYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81YTI2MGUtYWVjMC00ZTRhLWFhODUt
NGI4ZGYwOTg0OTZkLzEvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81YTI2MGUtYWVjMC00ZTRhLWFhODUtNGI4ZGYwOTg0OTZk
LzEvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqFc1Ufv
dfKx4sQgkpz2EjpszQa/0z0WUrAa974tIrt2GJh5GL8+ZNRFiX5zFITUmR94bbal
bQygjcQ6DU+VVw/YbmrXDRR/qHFQ8xqsYYYojb6GQopy3E78xQeP99rQ+JI/Femj
v9cBlP4YHEU+pkPe+vOeWCIE/CqrfOihqNdcREFsq0ZZAur/8nwtN3MjaLDXu7Lb
KIKC1JiCKxXzuoK3MpAxeB0mTK+j7S9z0+Kcfwie2DXu/Uz21bgKoM11gmkiqZFN
ZPck4RFgdcf2+oeOe0YpSjSgAJ3lacj90RfHoEgu/enBQDEtqNAvn/xrt6WAz7yB
ypfuMMy8GgMfVA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:52:03 2025 by rpki-client