Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: VLMROfHqjD0WYdsAPIju9LJKCTrpPY/qeIia83F1Lfk=
Subject key identifier: 1F:DC:24:55:61:85:F5:9D:E1:1E:2D:FB:FE:FC:70:31:03:2F:38:A5
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 0197488CFB435B12CE5D5835E4CA0DDF852B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 04:01:28 +0000
Manifest this update: Sat 07 Jun 2025 04:01:28 +0000
Manifest next update: Sun 08 Jun 2025 04:01:28 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: 1mGPq27VvIja+pbFUkRw0BK+Ke803EVA/S67+N4umZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:fb:43:5b:12:ce:5d:58:35:e4:ca:0d:df:85:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Jun 7 04:01:28 2025 GMT
Not After : Jun 8 04:01:28 2025 GMT
Subject: CN=1fdc24556185f59de11e2dfbfefc7031032f38a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:a3:f8:b0:ef:f2:b8:a7:9f:bd:c9:99:18:
09:6e:29:11:d7:79:9a:a0:58:5c:5d:0a:7e:a6:1e:
04:7f:39:7d:f4:61:1e:ed:04:7d:af:0d:55:6d:4a:
bf:4d:e7:2a:ba:2c:bf:a1:03:8b:ee:3a:25:20:ac:
57:69:27:6e:37:40:a8:4d:fa:31:45:5a:a6:d8:dc:
29:4f:dc:49:e6:4d:75:ed:2c:1a:61:89:0c:b1:47:
9c:95:1c:93:84:18:1b:f8:96:84:36:41:7e:7b:97:
aa:fe:58:ca:f0:63:2d:b4:fa:2c:60:08:6d:f3:7f:
6b:d5:db:1a:4a:f5:12:b0:e4:6e:0c:fa:75:ac:e3:
0a:f0:26:b4:49:4f:7c:f7:7e:c2:d9:20:f4:84:aa:
e4:d7:7a:17:41:53:3b:f3:ef:e5:cd:26:b8:b4:8f:
00:43:3f:e5:bc:99:bb:53:e9:c2:3d:a3:07:d4:dc:
18:44:fb:24:fe:ac:3f:86:a4:90:4e:8d:7c:05:40:
eb:4a:46:8c:46:92:ae:4d:fa:3b:fc:07:ac:1c:2f:
43:32:36:53:89:95:b8:01:8c:2e:65:f0:60:f6:66:
e5:1f:4f:28:12:a9:59:aa:ad:0b:10:fe:f8:f8:70:
b3:de:5f:3a:3e:0d:2e:4e:62:22:69:a6:12:f3:b0:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DC:24:55:61:85:F5:9D:E1:1E:2D:FB:FE:FC:70:31:03:2F:38:A5
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:12:87:c3:98:4b:3a:f8:71:9d:2e:14:ba:ab:ad:af:97:54:
a8:48:f9:47:2d:e0:94:f6:d4:14:c6:1b:e0:1c:b6:35:dd:70:
78:5b:64:6e:6a:27:dc:00:e2:3f:0b:c2:e3:5c:12:4f:67:94:
a1:7e:c0:89:2a:cf:f4:47:00:f6:4c:02:58:5f:c5:a9:4d:50:
76:84:3d:e8:55:c6:62:33:8a:44:26:31:37:3b:f4:02:33:7d:
64:0a:3f:dd:d5:45:98:0c:9b:d3:a8:a4:70:1f:f4:ad:74:76:
b6:48:9c:00:a0:93:f0:22:72:1d:42:1b:13:25:69:f7:94:5e:
4d:60:21:22:12:ca:80:9b:7f:22:0c:68:48:8e:14:32:f2:a8:
17:ce:eb:20:b4:f9:a4:07:ee:d1:b2:fa:7f:ac:ec:57:cb:6a:
85:12:a8:b6:4c:a4:0f:05:7d:90:7b:c3:02:c1:86:87:b8:31:
c2:8d:16:21:38:99:6d:fe:6a:7e:a1:2f:74:1e:cc:1c:fe:1a:
3b:6d:ef:8a:de:e1:cd:74:73:65:d8:b9:6b:8b:36:de:7d:7f:
ea:5d:e3:26:38:72:b2:9e:9e:a4:64:91:96:7b:4b:dc:45:43:
9f:56:c3:d7:b9:1b:6b:bd:d2:1c:2e:da:a0:55:58:5f:75:b7:
f3:03:32:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjPtDWxLOXVg15MoN34UrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI2YWRiNDRmNTRiMDk5MmM3NTNlYjE3YmFiZTgxMmIw
NzQ4NjMwHhcNMjUwNjA3MDQwMTI4WhcNMjUwNjA4MDQwMTI4WjAzMTEwLwYDVQQD
EygxZmRjMjQ1NTYxODVmNTlkZTExZTJkZmJmZWZjNzAzMTAzMmYzOGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Kmj+LDv8rinn73JmRgJbikR13ma
oFhcXQp+ph4Efzl99GEe7QR9rw1VbUq/Tecquiy/oQOL7jolIKxXaSduN0CoTfox
RVqm2NwpT9xJ5k117SwaYYkMsUeclRyThBgb+JaENkF+e5eq/ljK8GMttPosYAht
839r1dsaSvUSsORuDPp1rOMK8Ca0SU98937C2SD0hKrk13oXQVM78+/lzSa4tI8A
Qz/lvJm7U+nCPaMH1NwYRPsk/qw/hqSQTo18BUDrSkaMRpKuTfo7/AesHC9DMjZT
iZW4AYwuZfBg9mblH08oEqlZqq0LEP74+HCz3l86Pg0uTmIiaaYS87DrswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/cJFVhhfWd4R4t+/78cDEDLzilMB8GA1UdIwQY
MBaAFAjSattE9UsJksdT6xe6voErB0hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMt
Y2NlNDlhOTMxYzllLzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMtY2NlNDlhOTMxYzll
LzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRKHw5hL
OvhxnS4Uuqutr5dUqEj5Ry3glPbUFMYb4By2Nd1weFtkbmon3ADiPwvC41wST2eU
oX7AiSrP9EcA9kwCWF/FqU1QdoQ96FXGYjOKRCYxNzv0AjN9ZAo/3dVFmAyb06ik
cB/0rXR2tkicAKCT8CJyHUIbEyVp95ReTWAhIhLKgJt/IgxoSI4UMvKoF87rILT5
pAfu0bL6f6zsV8tqhRKotkykDwV9kHvDAsGGh7gxwo0WITiZbf5qfqEvdB7MHP4a
O23vit7hzXRzZdi5a4s23n1/6l3jJjhysp6epGSRlntL3EVDn1bD17kba73SHC7a
oFVYX3W38wMyhg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:13 2025 by rpki-client