Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
File: JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json)
Hash identifier: qxECJNmpQ4IeB3zwdXQhHLuk8ndQHqhKRMR+k7c8RNg=
Subject key identifier: EC:DF:68:53:08:47:49:20:3F:AD:58:2C:58:31:F2:B4:82:D6:65:2B
Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
Certificate issuer: /CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Certificate serial: 01976D3D5828214CFBC58E0B70950F7EC16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 07:00:26 +0000
Manifest this update: Sat 14 Jun 2025 07:00:26 +0000
Manifest next update: Sun 15 Jun 2025 07:00:26 +0000
Files and hashes: 1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: 2JdcsrDI+f5PkpRhKz3Qbgv7XKI/WXs9ddc8OiH6J4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:58:28:21:4c:fb:c5:8e:0b:70:95:0f:7e:c1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Validity
Not Before: Jun 14 07:00:26 2025 GMT
Not After : Jun 15 07:00:26 2025 GMT
Subject: CN=ecdf6853084749203fad582c5831f2b482d6652b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:ae:01:ef:d0:ef:53:4d:75:36:45:9d:a2:
92:6e:05:86:07:26:d5:fa:f4:e1:2b:cb:ed:8f:43:
1c:d1:de:ca:66:c7:5f:c4:f8:31:fc:e7:77:e6:e9:
e0:a7:21:04:23:94:38:81:c0:a2:1a:84:d9:fd:0b:
9f:be:df:88:bd:2e:83:73:a8:52:83:a3:6c:16:e7:
35:7e:55:f0:6c:7f:7c:f0:47:70:1a:5a:ba:75:d1:
92:ff:31:4b:9b:26:62:e3:ba:16:bc:5e:eb:c9:8b:
29:f2:83:f9:a6:6d:2c:79:0e:7c:c5:9b:e2:0e:04:
b3:ba:2d:66:a3:9c:ba:8f:52:8e:d6:91:12:28:55:
60:0b:49:2b:26:c9:5f:81:e2:d4:93:16:d5:3b:1b:
d1:ee:ce:2d:8e:69:b6:2b:75:66:63:55:f4:fd:82:
51:d5:2e:3a:67:f0:41:20:74:92:8b:ba:66:e6:90:
be:8b:f2:16:63:54:e7:c7:f0:f5:0b:0e:81:4c:74:
66:44:17:f7:3e:63:ea:3b:24:22:97:17:b9:81:d8:
cd:06:85:70:0b:40:57:5a:df:89:c6:6a:c8:23:2f:
9f:0f:fa:38:43:24:ac:b5:1e:88:0d:40:89:c3:e5:
7f:ac:29:28:d8:25:dd:ef:94:e3:04:ae:5a:12:49:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DF:68:53:08:47:49:20:3F:AD:58:2C:58:31:F2:B4:82:D6:65:2B
X509v3 Authority Key Identifier:
keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7e:86:ea:87:cb:09:18:86:8e:35:36:a0:e8:4b:75:89:51:
95:d1:1f:54:66:46:f8:2c:3a:f2:ee:40:c6:a0:5f:aa:61:fd:
71:9c:37:c8:e5:6f:b8:1a:b8:be:f7:8d:24:49:7f:bd:38:18:
5d:87:e7:55:ce:7e:57:6e:d0:cc:29:e6:bc:91:31:fa:a4:5c:
24:d4:25:1c:74:70:df:5e:e0:cb:e3:96:2e:be:57:be:13:c2:
94:a5:d1:62:ea:67:89:fa:65:ed:65:b6:0d:71:28:51:5f:9a:
aa:70:65:09:0e:35:42:e6:b8:45:24:9c:52:84:11:75:0f:5d:
6a:94:46:8b:82:70:78:28:da:b3:a8:b7:42:c8:0a:6e:24:c5:
ac:77:ae:4e:f3:39:1b:70:07:90:6f:05:a0:ec:fe:62:2c:fa:
05:9b:b2:ea:80:b4:c7:d3:80:13:f9:0a:28:93:67:97:63:2e:
17:73:26:8b:63:fe:1e:8b:e4:4f:1d:41:4b:46:dc:17:9b:5f:
f0:1a:26:df:a0:48:ef:9a:1f:98:6a:31:7f:7f:55:d6:f3:10:
01:63:11:71:86:a3:43:0a:33:4f:28:cd:d5:95:5d:91:8f:84:
48:8e:b5:43:b0:5c:b6:1f:34:fc:f8:c6:1c:c4:ce:7d:32:11:
e5:0d:4a:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPVgoIUz7xY4LcJUPfsFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MmIwNGMzMTk5YjFlYjk2OTNkNDMyMGY3YmQzNjFlZDYx
NzA1MzAwHhcNMjUwNjE0MDcwMDI2WhcNMjUwNjE1MDcwMDI2WjAzMTEwLwYDVQQD
EyhlY2RmNjg1MzA4NDc0OTIwM2ZhZDU4MmM1ODMxZjJiNDgyZDY2NTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsauAe/Q71NNdTZFnaKSbgWGBybV
+vThK8vtj0Mc0d7KZsdfxPgx/Od35ungpyEEI5Q4gcCiGoTZ/Qufvt+IvS6Dc6hS
g6NsFuc1flXwbH988EdwGlq6ddGS/zFLmyZi47oWvF7ryYsp8oP5pm0seQ58xZvi
DgSzui1mo5y6j1KO1pESKFVgC0krJslfgeLUkxbVOxvR7s4tjmm2K3VmY1X0/YJR
1S46Z/BBIHSSi7pm5pC+i/IWY1Tnx/D1Cw6BTHRmRBf3PmPqOyQilxe5gdjNBoVw
C0BXWt+JxmrIIy+fD/o4QySstR6IDUCJw+V/rCko2CXd75TjBK5aEkkJBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzfaFMIR0kgP61YLFgx8rSC1mUrMB8GA1UdIwQY
MBaAFCQrBMMZmx65aT1DIPe9Nh7WFwUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkNzRXd4bWJIcmxwUFVNZzk3MDJIdFlYQlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wYzAyYzAtNTY5Yy00NWVhLWIwNWIt
NjZiNjdlMjFhODJiLzEvSkNzRXd4bWJIcmxwUFVNZzk3MDJIdFlYQlRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wYzAyYzAtNTY5Yy00NWVhLWIwNWItNjZiNjdlMjFhODJi
LzEvSkNzRXd4bWJIcmxwUFVNZzk3MDJIdFlYQlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqX6G6ofL
CRiGjjU2oOhLdYlRldEfVGZG+Cw68u5AxqBfqmH9cZw3yOVvuBq4vveNJEl/vTgY
XYfnVc5+V27QzCnmvJEx+qRcJNQlHHRw317gy+OWLr5XvhPClKXRYupnifpl7WW2
DXEoUV+aqnBlCQ41Qua4RSScUoQRdQ9dapRGi4JweCjas6i3QsgKbiTFrHeuTvM5
G3AHkG8FoOz+Yiz6BZuy6oC0x9OAE/kKKJNnl2MuF3Mmi2P+HovkTx1BS0bcF5tf
8Bom36BI75ofmGoxf39V1vMQAWMRcYajQwozTyjN1ZVdkY+ESI61Q7Bcth80/PjG
HMTOfTIR5Q1KCw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:14:49 2025 by rpki-client