Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier: ZuIbKaULUl4475kcvQ7IUxT2E100DORRgDOAVmm2+/c=
Subject key identifier: 12:14:E4:AA:AE:A0:2F:6F:7C:47:91:C8:F8:0B:65:46:23:0C:D1:EE
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 01974B56757215B0379420AEA4D036FD4907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number: 0304
Signing time: Sat 07 Jun 2025 17:00:46 +0000
Manifest this update: Sat 07 Jun 2025 17:00:46 +0000
Manifest next update: Sun 08 Jun 2025 17:00:46 +0000
Files and hashes: 1: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: r12VBgDAZVBoSlXrO3sV7F+vkqVi0gw5u8hmoiwzjjE=)
2: cNr_HYvpiGioRSQRxwB1USCGS48.roa (hash: +noL2GpravnsNJo9M6TMNUj+1J6YWZz/J8eJw0GPGmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:75:72:15:b0:37:94:20:ae:a4:d0:36:fd:49:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: Jun 7 17:00:46 2025 GMT
Not After : Jun 8 17:00:46 2025 GMT
Subject: CN=1214e4aaaea02f6f7c4791c8f80b6546230cd1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:71:fa:97:96:40:f0:29:dc:38:81:07:07:
2d:6f:d0:5a:f3:af:52:a8:50:a9:d5:8c:0b:d7:85:
00:65:66:8a:c3:13:38:85:47:b8:0f:ae:6c:e2:8a:
b5:7a:25:fd:77:a6:bb:0a:97:85:1f:bc:4c:28:69:
ad:b4:4a:ac:c3:c2:9e:cd:bf:c3:25:1a:5a:aa:61:
21:7a:97:2b:77:0f:2f:02:22:b4:fd:f8:79:cd:17:
ea:00:fc:2f:7c:04:98:87:69:29:c7:83:08:b3:36:
ef:a4:31:e6:b8:33:dd:4d:f4:13:7c:d0:43:c9:b5:
8b:58:6c:1f:90:8b:32:81:08:42:fc:ab:dd:21:f1:
e9:57:95:4e:63:b0:73:2d:0a:4a:db:bb:33:57:60:
20:8c:fd:14:fa:67:d0:61:f6:39:a4:04:61:2f:fe:
b7:50:bf:4f:f7:be:dc:6b:d0:ea:fb:b2:aa:58:15:
a1:4d:01:11:5f:b0:92:2d:b1:ed:61:d5:59:19:16:
10:79:24:b7:6f:cf:75:17:2e:f1:0e:fc:11:46:fc:
1f:9d:b8:70:b6:0a:5c:15:1e:b2:d7:c3:34:2b:2d:
ac:39:94:3b:a9:62:5e:a1:b9:bc:60:9a:aa:2b:3e:
c3:36:1b:2c:28:b9:9a:84:bb:15:83:f1:31:8f:8d:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:14:E4:AA:AE:A0:2F:6F:7C:47:91:C8:F8:0B:65:46:23:0C:D1:EE
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0a:f4:3b:83:2d:c0:45:d5:47:98:d4:39:67:9c:62:37:5f:
38:34:55:e2:de:bc:b7:ec:c9:8c:16:09:b7:6a:84:79:7b:c1:
59:e0:31:29:b2:2b:fa:cc:a8:a6:2d:c8:8e:a9:ed:d6:fe:8f:
d5:73:f9:78:f8:6c:04:bc:94:d0:99:76:87:63:1b:86:46:04:
d7:00:a1:89:c0:4a:56:5e:37:77:bd:0d:3d:f5:46:73:76:67:
b7:71:72:53:f8:ac:39:66:ed:e4:2a:59:2e:c3:98:5e:2a:da:
a9:7d:97:f2:4b:14:df:62:2c:5e:1b:8f:e7:f7:4b:e9:32:c3:
65:a5:19:39:a1:8b:ff:54:98:c1:d6:ab:50:60:01:d6:07:e1:
49:1b:24:39:08:c1:e3:9d:4d:89:e8:d2:80:70:06:db:cd:17:
e1:14:8b:d3:52:e5:3a:54:ed:7c:c7:f7:50:2e:07:e6:19:13:
b4:6f:c8:d4:d6:ac:ec:a1:29:49:c3:37:8f:81:34:a6:8d:1c:
74:e0:6a:9f:dc:d5:6a:76:83:b0:4b:46:08:bb:46:6f:e2:99:
6c:6e:04:40:9e:3f:bb:63:ce:71:f9:e4:ff:9e:95:4c:b9:59:
b1:b6:5c:ca:4e:fc:69:cb:b5:41:23:20:92:03:bc:12:1e:4c:
db:ea:d5:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLVnVyFbA3lCCupNA2/UkHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZjRiOWY0ODU2NDIwODlmMzZiMTc0ZDk2NDJkYzQ4Mzdm
ZjRkMjQwHhcNMjUwNjA3MTcwMDQ2WhcNMjUwNjA4MTcwMDQ2WjAzMTEwLwYDVQQD
EygxMjE0ZTRhYWFlYTAyZjZmN2M0NzkxYzhmODBiNjU0NjIzMGNkMWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAhx+peWQPAp3DiBBwctb9Ba869S
qFCp1YwL14UAZWaKwxM4hUe4D65s4oq1eiX9d6a7CpeFH7xMKGmttEqsw8Kezb/D
JRpaqmEhepcrdw8vAiK0/fh5zRfqAPwvfASYh2kpx4MIszbvpDHmuDPdTfQTfNBD
ybWLWGwfkIsygQhC/KvdIfHpV5VOY7BzLQpK27szV2AgjP0U+mfQYfY5pARhL/63
UL9P977ca9Dq+7KqWBWhTQERX7CSLbHtYdVZGRYQeSS3b891Fy7xDvwRRvwfnbhw
tgpcFR6y18M0Ky2sOZQ7qWJeobm8YJqqKz7DNhssKLmahLsVg/Exj43wUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIU5KquoC9vfEeRyPgLZUYjDNHuMB8GA1UdIwQY
MBaAFCT0ufSFZCCJ82sXTZZC3Eg3/00kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jNDdlOTAtMGYwOC00NjNiLTg4MTAt
YzA3Yjk4ZjZlNzY1LzEvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jNDdlOTAtMGYwOC00NjNiLTg4MTAtYzA3Yjk4ZjZlNzY1
LzEvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAr0O4Mt
wEXVR5jUOWecYjdfODRV4t68t+zJjBYJt2qEeXvBWeAxKbIr+syopi3Ijqnt1v6P
1XP5ePhsBLyU0Jl2h2MbhkYE1wChicBKVl43d70NPfVGc3Znt3FyU/isOWbt5CpZ
LsOYXiraqX2X8ksU32IsXhuP5/dL6TLDZaUZOaGL/1SYwdarUGAB1gfhSRskOQjB
451NiejSgHAG280X4RSL01LlOlTtfMf3UC4H5hkTtG/I1Nas7KEpScM3j4E0po0c
dOBqn9zVanaDsEtGCLtGb+KZbG4EQJ4/u2POcfnk/56VTLlZsbZcyk78acu1QSMg
kgO8Eh5M2+rVyw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:26:40 2025 by rpki-client