Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier: n07AFkV8wbaD91V87+Ff8gjAFDYDL60C+7l+jrM0ao0=
Subject key identifier: 73:97:0E:49:05:D3:5A:56:96:45:04:62:6C:BB:B4:21:E0:31:F2:D3
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial: 01976A05E313762C0F84FB755A1455E9BFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number: 01A7
Signing time: Fri 13 Jun 2025 16:00:59 +0000
Manifest this update: Fri 13 Jun 2025 16:00:59 +0000
Manifest next update: Sat 14 Jun 2025 16:00:59 +0000
Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: jaCN1jv+ip6M2s1DBk9kTgGyaGHXEvs2TLOUxMfAy00=)
2: xCvl2MPRqLFevw92K1xWqEyP8xM.roa (hash: x5lJC5gSbKWJztGnWxiyT9yj/ffbvJ91buVaYTLqpME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:e3:13:76:2c:0f:84:fb:75:5a:14:55:e9:bf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Validity
Not Before: Jun 13 16:00:59 2025 GMT
Not After : Jun 14 16:00:59 2025 GMT
Subject: CN=73970e4905d35a56964504626cbbb421e031f2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:9c:d0:c6:6b:e3:2b:14:a9:c2:3b:0c:f3:
40:33:19:75:9e:07:62:03:24:9a:af:92:41:4a:f3:
a6:b2:ce:39:5e:b0:76:35:63:5d:de:c1:78:94:ff:
0c:a1:43:1b:8f:4f:ce:fa:7d:f5:77:5b:73:3c:ab:
db:5f:02:f5:72:eb:cd:8a:91:70:a7:59:b3:1c:05:
aa:75:eb:5e:38:18:7d:db:c1:47:72:4a:a8:0e:18:
1e:4f:c0:b0:5b:84:b6:b5:6a:48:87:83:95:38:81:
a6:10:e2:ec:d4:01:c5:70:f4:cd:33:95:8e:3d:ed:
51:e6:96:9a:06:24:28:5c:af:c5:e5:6c:ba:09:10:
53:7c:f8:ca:09:12:5e:68:fc:22:fa:97:8d:66:9e:
94:59:05:a2:31:64:3b:4a:02:07:2b:66:05:09:53:
df:37:1a:4c:91:4f:27:ba:11:f7:7c:f5:5e:1b:21:
e0:0d:67:a3:36:01:c1:b2:ef:04:ba:11:7c:82:21:
67:d6:9d:30:93:0b:d5:d7:2a:4c:61:07:ae:97:0d:
c8:c3:a5:72:c9:7e:f0:0e:0c:07:96:3a:a2:95:d5:
1b:5d:80:f7:96:76:01:b4:81:29:ae:f0:ef:5f:58:
e8:b9:63:fe:48:4f:75:a2:5d:ad:9d:0c:ef:f6:da:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:97:0E:49:05:D3:5A:56:96:45:04:62:6C:BB:B4:21:E0:31:F2:D3
X509v3 Authority Key Identifier:
keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:81:d2:20:6a:f6:96:da:c2:f5:1c:f5:c4:44:95:8e:92:9c:
ce:1f:96:6b:a4:fe:9b:d2:8d:5f:80:d3:22:e8:4c:ea:7f:ea:
ef:b8:53:c1:98:d0:9c:d7:d0:56:c6:8c:e2:f4:68:90:5c:f8:
b0:a9:8e:2b:02:1c:05:a0:47:1b:e0:0d:6b:d1:9d:64:c7:6b:
fc:f1:86:32:be:6c:0b:b0:13:a4:1d:32:90:54:2f:09:4d:e5:
86:14:9b:3f:86:fd:7f:2c:71:23:ac:66:f7:c9:2f:8a:ab:c5:
11:9d:d9:60:1a:b5:b8:14:e5:3d:a1:bd:ac:a0:7e:57:06:16:
c9:80:ed:eb:7a:5a:9e:66:63:29:66:32:02:38:26:48:dc:45:
d5:5d:98:aa:80:ef:f5:e0:54:87:a5:3d:1f:51:a6:c3:7b:9a:
a3:37:72:ae:e9:7e:73:d5:e0:04:70:4c:64:90:61:65:d6:33:
3d:00:0f:35:7f:b8:c2:97:b7:7e:e0:c2:b3:c1:a8:6d:c0:ef:
06:ce:f9:02:58:1d:02:b3:aa:8f:60:ad:ab:99:7a:83:8f:d6:
2e:4f:57:16:a7:c2:82:b2:a5:54:34:e7:74:fb:61:f4:b6:dc:
99:92:c6:0c:c8:87:5e:2d:24:09:37:b3:89:3e:87:b5:e8:f0:
42:90:97:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBeMTdiwPhPt1WhRV6b/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzU4ZDZkMzNlMjZkMmFmODQzZDU4MWRjZjY5YzBkMTEw
YTlkZTgwHhcNMjUwNjEzMTYwMDU5WhcNMjUwNjE0MTYwMDU5WjAzMTEwLwYDVQQD
Eyg3Mzk3MGU0OTA1ZDM1YTU2OTY0NTA0NjI2Y2JiYjQyMWUwMzFmMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMKc0MZr4ysUqcI7DPNAMxl1ngdi
AySar5JBSvOmss45XrB2NWNd3sF4lP8MoUMbj0/O+n31d1tzPKvbXwL1cuvNipFw
p1mzHAWqdeteOBh928FHckqoDhgeT8CwW4S2tWpIh4OVOIGmEOLs1AHFcPTNM5WO
Pe1R5paaBiQoXK/F5Wy6CRBTfPjKCRJeaPwi+peNZp6UWQWiMWQ7SgIHK2YFCVPf
NxpMkU8nuhH3fPVeGyHgDWejNgHBsu8EuhF8giFn1p0wkwvV1ypMYQeulw3Iw6Vy
yX7wDgwHljqildUbXYD3lnYBtIEprvDvX1jouWP+SE91ol2tnQzv9tojNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOXDkkF01pWlkUEYmy7tCHgMfLTMB8GA1UdIwQY
MBaAFCc1jW0z4m0q+EPVgdz2nA0RCp3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMt
NDI2ZDlmZjIwN2QxLzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMtNDI2ZDlmZjIwN2Qx
LzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYHSIGr2
ltrC9Rz1xESVjpKczh+Wa6T+m9KNX4DTIuhM6n/q77hTwZjQnNfQVsaM4vRokFz4
sKmOKwIcBaBHG+ANa9GdZMdr/PGGMr5sC7ATpB0ykFQvCU3lhhSbP4b9fyxxI6xm
98kviqvFEZ3ZYBq1uBTlPaG9rKB+VwYWyYDt63panmZjKWYyAjgmSNxF1V2YqoDv
9eBUh6U9H1Gmw3uaozdyrul+c9XgBHBMZJBhZdYzPQAPNX+4wpe3fuDCs8GobcDv
Bs75AlgdArOqj2Ctq5l6g4/WLk9XFqfCgrKlVDTndPth9LbcmZLGDMiHXi0kCTez
iT6HtejwQpCXng==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:54:14 2025 by rpki-client