Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: TnNwWAzu/oBNwzrmHjtg8JzEdRdOGlI0VsPKxXF8BEg=
Subject key identifier: 9D:42:99:96:81:30:59:DD:C1:0C:97:78:01:22:0B:7B:93:63:4B:1B
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 01974C9FF3FDFF675CAA01A626533FC38933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 025C
Signing time: Sat 07 Jun 2025 23:00:40 +0000
Manifest this update: Sat 07 Jun 2025 23:00:40 +0000
Manifest next update: Sun 08 Jun 2025 23:00:40 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: 9jljt2zi5ALYbZhLxHX4xNyarjNb1tSpgM0I8om0oLY=)
2: Np4SGefOBCZiVQwVOhlw43OZIsc.roa (hash: 4LHgzyDtN1tlOUmbwRr7JMfVVPaWldi7uvsqlFbuzcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:f3:fd:ff:67:5c:aa:01:a6:26:53:3f:c3:89:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Jun 7 23:00:40 2025 GMT
Not After : Jun 8 23:00:40 2025 GMT
Subject: CN=9d429996813059ddc10c977801220b7b93634b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:21:02:99:40:1a:64:fe:71:9c:33:f2:d4:
64:63:71:42:ea:d3:81:bc:aa:b2:ef:38:5f:51:18:
4b:ad:62:66:b2:15:1f:67:1a:73:48:09:40:48:aa:
39:2a:59:07:61:95:5c:44:8f:df:88:0d:04:d7:1c:
15:1f:fd:68:3c:d8:7f:ef:82:29:13:7a:4d:ae:8e:
a2:46:43:15:7a:6f:f6:0f:04:4b:b9:94:a8:64:9c:
dd:2f:29:7c:6c:0a:ad:de:91:89:79:cf:90:c3:34:
12:e4:6e:de:49:02:e6:f8:59:48:25:4f:b6:ec:84:
c8:15:b9:3d:c8:de:4b:22:83:7f:0b:80:3e:d3:89:
40:89:55:72:4b:ad:ae:b9:75:a7:a1:5a:c4:db:75:
12:36:3a:8d:9a:e2:03:6f:a9:f8:af:96:ca:3a:59:
11:9c:d1:a4:fa:ff:9e:83:57:ed:8d:a6:c9:ca:a6:
d4:5d:12:8c:d0:32:ad:98:f2:ae:b7:4d:f7:b6:98:
9f:39:aa:c9:6a:4b:be:b9:10:cf:91:6e:13:6d:f4:
dd:f9:de:15:32:f2:80:fb:dc:37:63:eb:60:89:25:
47:27:36:75:1e:fe:cb:4b:d2:80:93:2d:df:71:ed:
94:09:8c:b5:d6:3e:e2:de:08:68:d3:72:f7:a6:70:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:42:99:96:81:30:59:DD:C1:0C:97:78:01:22:0B:7B:93:63:4B:1B
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c0:5e:b7:cb:1c:44:2f:fe:bb:1d:83:8c:c4:c1:e3:48:89:
86:53:5d:26:59:55:59:d0:43:f0:52:0e:9e:1c:8f:9c:fe:69:
64:17:8a:bf:88:78:75:76:78:e7:b2:ac:0b:dc:04:71:ad:75:
0c:de:bf:b3:58:7f:38:02:7b:5a:d7:f9:27:6d:b0:36:b7:8e:
cb:d0:c1:c3:84:6a:fe:3d:7a:a6:c4:69:cf:a8:ec:99:6e:1d:
e2:34:0f:db:1d:43:ef:d5:98:6f:57:30:f9:b7:33:28:25:a0:
de:82:81:94:92:21:fd:78:67:18:d6:74:32:1b:cf:a0:44:16:
a1:0d:31:12:92:1e:03:6b:c3:e3:ad:73:1b:47:a2:14:9a:fb:
ac:dd:01:6e:33:b4:f1:2f:4e:2f:20:6d:55:1d:4a:05:8b:1b:
2a:cd:6e:83:4f:a4:d1:e0:d5:70:4f:6c:f6:3a:82:68:d7:08:
0c:1f:09:83:7d:ca:8e:78:f3:f7:61:e4:00:3d:71:4e:04:ec:
e3:64:17:5d:8c:c9:f2:4e:fb:90:79:03:fe:7d:f3:02:5e:be:
42:62:f8:f9:c0:b2:d3:cc:bb:68:80:74:1c:92:82:4e:02:66:
18:f3:fe:81:08:11:da:8d:06:fd:be:3a:50:d8:4c:8b:a1:85:
36:a0:48:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMn/P9/2dcqgGmJlM/w4kzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YWZlYWU4M2QyZDVlMmVhNzdhYzYxNDdmNzU4MzdiMjdm
NzQzNDkwHhcNMjUwNjA3MjMwMDQwWhcNMjUwNjA4MjMwMDQwWjAzMTEwLwYDVQQD
Eyg5ZDQyOTk5NjgxMzA1OWRkYzEwYzk3NzgwMTIyMGI3YjkzNjM0YjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFkhAplAGmT+cZwz8tRkY3FC6tOB
vKqy7zhfURhLrWJmshUfZxpzSAlASKo5KlkHYZVcRI/fiA0E1xwVH/1oPNh/74Ip
E3pNro6iRkMVem/2DwRLuZSoZJzdLyl8bAqt3pGJec+QwzQS5G7eSQLm+FlIJU+2
7ITIFbk9yN5LIoN/C4A+04lAiVVyS62uuXWnoVrE23USNjqNmuIDb6n4r5bKOlkR
nNGk+v+eg1ftjabJyqbUXRKM0DKtmPKut033tpifOarJaku+uRDPkW4TbfTd+d4V
MvKA+9w3Y+tgiSVHJzZ1Hv7LS9KAky3fce2UCYy11j7i3gho03L3pnDWzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1CmZaBMFndwQyXeAEiC3uTY0sbMB8GA1UdIwQY
MBaAFCSv6ug9LV4up3rGFH91g3sn90NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgt
NTNjNTcyMGNmYmViLzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgtNTNjNTcyMGNmYmVi
LzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8Bet8sc
RC/+ux2DjMTB40iJhlNdJllVWdBD8FIOnhyPnP5pZBeKv4h4dXZ457KsC9wEca11
DN6/s1h/OAJ7Wtf5J22wNreOy9DBw4Rq/j16psRpz6jsmW4d4jQP2x1D79WYb1cw
+bczKCWg3oKBlJIh/XhnGNZ0MhvPoEQWoQ0xEpIeA2vD461zG0eiFJr7rN0BbjO0
8S9OLyBtVR1KBYsbKs1ug0+k0eDVcE9s9jqCaNcIDB8Jg33Kjnjz92HkAD1xTgTs
42QXXYzJ8k77kHkD/n3zAl6+QmL4+cCy08y7aIB0HJKCTgJmGPP+gQgR2o0G/b46
UNhMi6GFNqBIJg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:19 2025 by rpki-client