Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: oXd9BY28t+zHoLHFGBliIFBrNxObV4QaJHl4SkYBe3M=
Subject key identifier: A2:B9:DB:09:DB:C7:66:CE:A1:6D:B8:F5:AA:9F:F4:05:59:B6:93:F1
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 0197808E494CA01D9766747BEC5B5903D8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 1595
Signing time: Wed 18 Jun 2025 01:01:37 +0000
Manifest this update: Wed 18 Jun 2025 01:01:37 +0000
Manifest next update: Thu 19 Jun 2025 01:01:37 +0000
Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: Z0GpCEUzrwOwXNx98jknmH/i3YfnhF2MkqADubxFYEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8e:49:4c:a0:1d:97:66:74:7b:ec:5b:59:03:d8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Jun 18 01:01:37 2025 GMT
Not After : Jun 19 01:01:37 2025 GMT
Subject: CN=a2b9db09dbc766cea16db8f5aa9ff40559b693f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:2f:ee:1a:20:e8:7b:ee:30:f1:4d:4b:e4:
5e:4b:da:f1:00:ef:d7:ab:b1:98:d9:ba:f0:5f:52:
7c:57:7c:41:39:c4:7f:db:8e:f3:0d:7a:62:cd:8e:
3a:a1:4f:e4:a0:bf:6d:be:04:ea:fa:93:2f:90:df:
78:4a:cf:f6:ae:3c:fa:cf:d6:32:c5:f7:a4:e9:a1:
d4:8e:4a:f8:7e:d5:d3:f7:97:6a:a2:12:08:90:2c:
8b:74:a9:bf:d8:19:b5:50:ac:43:70:1c:b1:27:2f:
1c:eb:b6:a8:0b:82:f8:e6:a8:55:53:ae:4e:93:81:
0a:a5:30:e3:96:a3:0f:6a:9d:27:88:5a:ca:5f:33:
b5:67:c4:67:4f:3a:e7:e7:d9:bd:3d:d9:b2:af:35:
d4:84:16:70:67:93:ee:7d:52:c6:0d:b7:fd:2e:cf:
fb:73:2e:8b:ad:36:9f:33:21:dd:d5:4e:e5:0d:93:
b7:e0:1d:a3:f7:23:d9:e6:12:5b:93:87:b2:8f:5f:
ac:c8:74:8a:26:84:42:ce:80:65:c8:b6:20:4b:97:
04:1d:84:0b:46:ce:9b:f9:94:1d:81:31:4d:42:54:
d8:7c:7d:4e:8f:e6:d1:bf:3c:b7:cd:3c:4b:b1:1c:
95:51:8b:bd:95:88:7c:89:e3:e6:ec:de:f0:48:49:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B9:DB:09:DB:C7:66:CE:A1:6D:B8:F5:AA:9F:F4:05:59:B6:93:F1
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:18:f9:35:c3:87:90:a8:a0:da:c5:38:9b:53:95:39:41:40:
27:f6:14:8c:6d:26:7d:03:0a:fd:1b:1a:b1:2c:3c:63:c3:6a:
03:26:12:35:8b:f1:79:f9:7d:d9:6f:94:90:ee:05:5d:bc:03:
b0:6e:02:b8:cc:50:c2:1e:19:75:02:df:f9:10:f1:c7:f1:43:
d8:7b:35:3d:ac:d0:b8:81:71:61:9b:65:2f:db:ad:d0:b6:1d:
c7:4f:0f:b6:30:a6:d1:92:14:8d:bb:13:62:c0:c6:6e:72:9b:
58:59:c6:c0:45:33:cd:e0:b6:f7:73:7c:0b:80:3e:01:3d:df:
84:f4:ad:01:54:71:22:58:1d:6c:33:35:02:81:e9:05:92:3d:
a8:d4:bf:eb:10:99:67:1a:33:6b:c5:e2:07:11:0b:d2:d7:ab:
89:86:57:0a:91:9a:a9:74:d0:20:13:be:b8:8e:27:f0:3d:5e:
20:cf:62:94:bd:90:31:d8:35:ea:6b:6f:bc:17:50:b6:fb:48:
0b:fb:dc:4f:15:03:46:9a:af:e1:4a:2f:65:a1:ee:77:45:3c:
e2:8e:35:a7:a8:11:62:f0:bb:19:73:59:34:f5:27:b5:bd:c0:
77:9d:fb:ff:64:b7:48:01:d8:2e:0c:95:9a:e5:85:5c:36:f0:
b8:ed:26:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAjklMoB2XZnR77FtZA9iuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0
OGFkNTAwHhcNMjUwNjE4MDEwMTM3WhcNMjUwNjE5MDEwMTM3WjAzMTEwLwYDVQQD
EyhhMmI5ZGIwOWRiYzc2NmNlYTE2ZGI4ZjVhYTlmZjQwNTU5YjY5M2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUcv7hog6HvuMPFNS+ReS9rxAO/X
q7GY2brwX1J8V3xBOcR/247zDXpizY46oU/koL9tvgTq+pMvkN94Ss/2rjz6z9Yy
xfek6aHUjkr4ftXT95dqohIIkCyLdKm/2Bm1UKxDcByxJy8c67aoC4L45qhVU65O
k4EKpTDjlqMPap0niFrKXzO1Z8RnTzrn59m9PdmyrzXUhBZwZ5PufVLGDbf9Ls/7
cy6LrTafMyHd1U7lDZO34B2j9yPZ5hJbk4eyj1+syHSKJoRCzoBlyLYgS5cEHYQL
Rs6b+ZQdgTFNQlTYfH1Oj+bRvzy3zTxLsRyVUYu9lYh8iePm7N7wSElcIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKK52wnbx2bOoW249aqf9AVZtpPxMB8GA1UdIwQY
MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt
ZjI2YmZmOGI0OTk0LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0
LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxj5NcOH
kKig2sU4m1OVOUFAJ/YUjG0mfQMK/RsasSw8Y8NqAyYSNYvxefl92W+UkO4FXbwD
sG4CuMxQwh4ZdQLf+RDxx/FD2Hs1PazQuIFxYZtlL9ut0LYdx08PtjCm0ZIUjbsT
YsDGbnKbWFnGwEUzzeC293N8C4A+AT3fhPStAVRxIlgdbDM1AoHpBZI9qNS/6xCZ
Zxoza8XiBxEL0teriYZXCpGaqXTQIBO+uI4n8D1eIM9ilL2QMdg16mtvvBdQtvtI
C/vcTxUDRpqv4UovZaHud0U84o41p6gRYvC7GXNZNPUntb3Ad537/2S3SAHYLgyV
muWFXDbwuO0muQ==
-----END CERTIFICATE-----
Generated at Wed Jun 18 04:56:27 2025 by rpki-client