Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json)
Hash identifier: us3mNiZJ1B2LMFVqruAtl9qUvZtEkAs+WOjJIO5ivmc=
Subject key identifier: 52:E5:61:71:4F:BA:71:CD:4C:FC:5F:B1:9D:D7:AC:F7:A1:A6:22:A9
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 019750457E0EFC60A7C3AB2B82D32E0089EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
Manifest number: 0354
Signing time: Sun 08 Jun 2025 16:00:20 +0000
Manifest this update: Sun 08 Jun 2025 16:00:20 +0000
Manifest next update: Mon 09 Jun 2025 16:00:20 +0000
Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: tvKeOAnvTjuh48O3WMeVDv4K1W6y0wnjWuw/hamCbIs=)
2: K6bM5601EY4aWoYwlB_yWaSAYWg.roa (hash: q1/+kZ6yqPL4e9VCBVnSxVBfdHwsRb33uiurUpP8SWw=)
3: Qp56EhXo02rtbXG9bpMugv8X2n0.roa (hash: TyqFIVR8sVZ/spucHhOleEaJbMKaFD4U+qZbekh1SEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:7e:0e:fc:60:a7:c3:ab:2b:82:d3:2e:00:89:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Jun 8 16:00:20 2025 GMT
Not After : Jun 9 16:00:20 2025 GMT
Subject: CN=52e561714fba71cd4cfc5fb19dd7acf7a1a622a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:b8:e7:5c:47:b3:23:64:ed:61:5a:5d:56:
83:df:8a:fd:10:1d:7f:96:b0:b2:32:98:fb:d3:3a:
3b:cc:22:7f:c4:11:e2:75:c4:4e:fe:d5:45:34:16:
3f:0f:84:4b:6b:2c:6b:ed:be:bc:7a:a0:78:2b:10:
9c:b2:26:65:c7:26:5d:3e:09:81:3c:3a:c7:b3:59:
9b:17:30:48:9b:ea:f6:86:7f:5c:7e:60:8b:41:c3:
7b:76:2e:b3:74:3e:1a:cd:83:67:4b:96:de:0e:06:
5b:a7:b6:90:94:32:03:67:5d:e1:52:8f:a5:f8:57:
a9:47:b0:e8:f1:55:2c:7c:21:40:67:53:9e:e3:57:
8d:32:f7:2f:4f:8e:e1:c5:c1:ec:6c:89:c9:b0:85:
0a:41:ff:7f:59:e3:c0:70:0c:ac:4c:23:5c:98:a7:
f4:26:04:4e:e1:19:13:83:17:f1:cc:46:fc:be:a5:
2a:f0:50:eb:a1:ee:8b:bf:33:ff:50:c9:4b:a5:1e:
d7:94:da:41:d1:99:d9:40:d4:dc:b5:93:ff:d0:b9:
05:25:68:3b:e4:1d:97:62:89:7f:6b:6c:2c:b7:78:
ac:22:86:ae:e1:48:95:5f:6a:a5:a8:e3:b8:9a:34:
11:a1:74:5c:e4:a8:75:77:80:0e:1c:6a:ae:c3:ea:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E5:61:71:4F:BA:71:CD:4C:FC:5F:B1:9D:D7:AC:F7:A1:A6:22:A9
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:21:8f:e7:36:93:b8:78:eb:10:29:1e:92:4a:76:7b:71:21:
29:2f:71:5d:5b:df:9b:fc:50:17:13:f6:db:64:c6:26:2d:84:
5b:43:b8:3d:5a:fc:d8:ea:bc:3d:71:e4:80:bf:c1:ac:34:da:
6c:d8:ac:01:15:04:c3:3e:98:0e:1c:6c:42:5c:37:ba:23:4b:
42:78:c7:36:33:17:e8:0f:27:96:75:40:51:30:b5:0b:a6:e7:
c9:22:7f:a3:77:8b:d8:38:4e:07:0f:7b:a5:b5:1e:2d:e8:35:
32:ac:43:93:6c:db:9e:f5:56:65:37:21:b0:be:50:29:54:91:
4f:71:18:64:de:b7:71:2a:37:90:95:7d:c7:a5:6e:83:b5:b9:
2d:08:c9:f7:cc:68:87:ea:e7:75:3b:ee:91:a4:1b:d0:50:73:
9d:a4:f3:9d:d9:15:33:4c:0f:cb:c9:65:8b:f6:af:81:e5:b3:
a0:65:92:f6:4e:9f:10:f0:00:9e:d9:4c:fa:8a:1c:90:76:eb:
0b:61:2f:19:01:6a:81:53:2e:fa:20:6b:bf:05:ca:ce:c6:af:
da:94:4a:84:74:09:07:98:85:74:66:45:e9:6d:03:27:c6:16:
df:14:90:ec:a2:a7:e6:58:d4:72:e4:45:fe:23:92:4f:f2:82:
45:59:bd:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRX4O/GCnw6srgtMuAInuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzUyNjg3YTVmZjE2MWQyZWRhYmM5ZjhlM2E0ODc2YzRh
ZDhkYTIwHhcNMjUwNjA4MTYwMDIwWhcNMjUwNjA5MTYwMDIwWjAzMTEwLwYDVQQD
Eyg1MmU1NjE3MTRmYmE3MWNkNGNmYzVmYjE5ZGQ3YWNmN2ExYTYyMmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7m451xHsyNk7WFaXVaD34r9EB1/
lrCyMpj70zo7zCJ/xBHidcRO/tVFNBY/D4RLayxr7b68eqB4KxCcsiZlxyZdPgmB
PDrHs1mbFzBIm+r2hn9cfmCLQcN7di6zdD4azYNnS5beDgZbp7aQlDIDZ13hUo+l
+FepR7Do8VUsfCFAZ1Oe41eNMvcvT47hxcHsbInJsIUKQf9/WePAcAysTCNcmKf0
JgRO4RkTgxfxzEb8vqUq8FDroe6LvzP/UMlLpR7XlNpB0ZnZQNTctZP/0LkFJWg7
5B2XYol/a2wst3isIoau4UiVX2qlqOO4mjQRoXRc5Kh1d4AOHGquw+p8owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLlYXFPunHNTPxfsZ3XrPehpiKpMB8GA1UdIwQY
MBaAFCXFJoel/xYdLtq8n446SHbErY2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAt
NzVkYWU1ZGRmZWQzLzEvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAtNzVkYWU1ZGRmZWQz
LzEvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiGP5zaT
uHjrECkekkp2e3EhKS9xXVvfm/xQFxP222TGJi2EW0O4PVr82Oq8PXHkgL/BrDTa
bNisARUEwz6YDhxsQlw3uiNLQnjHNjMX6A8nlnVAUTC1C6bnySJ/o3eL2DhOBw97
pbUeLeg1MqxDk2zbnvVWZTchsL5QKVSRT3EYZN63cSo3kJV9x6Vug7W5LQjJ98xo
h+rndTvukaQb0FBznaTzndkVM0wPy8lli/avgeWzoGWS9k6fEPAAntlM+oockHbr
C2EvGQFqgVMu+iBrvwXKzsav2pRKhHQJB5iFdGZF6W0DJ8YW3xSQ7KKn5ljUcuRF
/iOST/KCRVm9fQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:14:43 2025 by rpki-client