Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
File: J8XzZBPnr0coE_46cU4uzaoh8ug.mft (raw, json)
Hash identifier: 8gjIDYBSNrpUCU1uZILJ6lNrBND/d/HRmHI/6YMMfRo=
Subject key identifier: 4D:E6:A4:08:11:9A:64:D1:9C:90:2E:51:E9:EB:61:B4:29:B6:B5:DC
Authority key identifier: 27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
Certificate issuer: /CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Certificate serial: 01976C2AEA5F30AB7F1B3A4AE90E685F5B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
Manifest number: 0615
Signing time: Sat 14 Jun 2025 02:00:41 +0000
Manifest this update: Sat 14 Jun 2025 02:00:41 +0000
Manifest next update: Sun 15 Jun 2025 02:00:41 +0000
Files and hashes: 1: EOZUjXctaYMkRcyyMQLguIWxilg.roa (hash: jYlCwqtOgmrWCQocWJbTWD5UljGXFXvAjEpukVvKrrM=)
2: J8XzZBPnr0coE_46cU4uzaoh8ug.crl (hash: +umvBKj3kfnKoKgm/KYvCXtcQmPSgQB7WhfnM0NEzzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:ea:5f:30:ab:7f:1b:3a:4a:e9:0e:68:5f:5b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Validity
Not Before: Jun 14 02:00:41 2025 GMT
Not After : Jun 15 02:00:41 2025 GMT
Subject: CN=4de6a408119a64d19c902e51e9eb61b429b6b5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:df:f2:ba:06:ea:ad:b9:88:a6:e7:96:f1:
f3:18:ec:70:af:7d:06:01:5c:b2:f7:43:bf:92:90:
27:ba:fc:b4:80:a5:3c:60:55:b5:53:2d:7f:6a:19:
ce:1f:c4:da:02:d1:57:1b:67:89:ca:3f:57:94:d4:
0e:93:db:51:fb:01:9c:2f:78:e1:5c:df:27:12:02:
52:6b:15:63:73:05:91:b5:9e:9f:c0:51:e1:d1:1f:
52:bb:87:f9:45:66:81:ae:77:5b:8c:9f:32:0c:77:
b7:9b:40:93:29:39:80:71:97:d9:e3:9c:b0:60:b5:
94:97:bd:aa:4c:68:aa:98:a6:b8:28:79:0c:0d:68:
f7:d6:83:b8:b6:a5:d7:54:9e:3d:b1:5f:32:90:c5:
7b:41:88:69:b5:31:27:05:6d:0a:23:03:ce:2e:be:
de:86:93:9f:b6:a7:05:e3:d4:ef:8c:a6:ac:c5:d9:
ea:a6:83:60:8b:ac:c1:ec:ef:7e:d1:ef:b0:74:19:
2c:54:c4:18:8e:32:73:74:ca:77:8a:42:0d:2b:d0:
e8:39:ce:13:4c:5e:41:c7:36:98:e6:37:1c:a5:74:
e9:f3:d5:fa:85:34:ad:95:9c:88:a1:34:72:c9:0d:
e5:7d:ff:38:49:64:11:5a:5f:1c:d8:60:b1:5d:c2:
1a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E6:A4:08:11:9A:64:D1:9C:90:2E:51:E9:EB:61:B4:29:B6:B5:DC
X509v3 Authority Key Identifier:
keyid:27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2a:19:9f:ab:03:c0:d2:a6:e9:f1:61:da:62:5c:84:99:41:
05:ba:d3:37:63:b8:1a:ac:9c:c4:3a:a0:ab:fc:4c:fe:e2:8f:
34:d9:04:24:e9:2f:a8:b7:27:1a:5f:21:85:71:d3:d2:25:28:
f2:cc:79:21:12:60:53:f5:e6:4a:04:cf:25:63:e1:7b:95:c7:
a4:5e:6b:9e:5e:60:d5:59:1e:c9:bf:72:d5:23:dc:bc:75:11:
35:f7:10:1b:b1:ac:5d:ff:0f:55:6d:ff:cc:a2:a5:f1:38:4e:
8e:47:db:eb:70:9f:0b:b8:87:e9:7a:c5:be:70:fe:0c:e8:01:
77:f2:8d:d4:f3:b0:4f:ab:13:84:2e:d2:c0:3e:00:fd:6d:e9:
d2:1c:5a:01:24:eb:74:cb:38:3c:58:17:0d:b1:09:c3:09:34:
79:98:b3:f4:11:84:f1:99:62:72:b5:80:e2:f2:7f:20:46:97:
b3:b1:9e:71:9f:b2:c1:fa:29:f2:46:43:84:39:1a:b9:24:04:
00:8e:e2:71:7c:75:1f:2d:49:3b:01:d2:ab:31:ea:51:02:28:
e1:8e:02:84:e6:0c:42:e2:9c:01:06:e1:1f:b3:a5:e1:cc:02:
ba:20:aa:c0:7b:29:4d:80:e0:76:96:ba:a9:57:38:8f:46:ef:
f0:6e:62:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKupfMKt/GzpK6Q5oX1s1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzVmMzY0MTNlN2FmNDcyODEzZmUzYTcxNGUyZWNkYWEy
MWYyZTgwHhcNMjUwNjE0MDIwMDQxWhcNMjUwNjE1MDIwMDQxWjAzMTEwLwYDVQQD
Eyg0ZGU2YTQwODExOWE2NGQxOWM5MDJlNTFlOWViNjFiNDI5YjZiNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbHf8roG6q25iKbnlvHzGOxwr30G
AVyy90O/kpAnuvy0gKU8YFW1Uy1/ahnOH8TaAtFXG2eJyj9XlNQOk9tR+wGcL3jh
XN8nEgJSaxVjcwWRtZ6fwFHh0R9Su4f5RWaBrndbjJ8yDHe3m0CTKTmAcZfZ45yw
YLWUl72qTGiqmKa4KHkMDWj31oO4tqXXVJ49sV8ykMV7QYhptTEnBW0KIwPOLr7e
hpOftqcF49TvjKasxdnqpoNgi6zB7O9+0e+wdBksVMQYjjJzdMp3ikINK9DoOc4T
TF5BxzaY5jccpXTp89X6hTStlZyIoTRyyQ3lff84SWQRWl8c2GCxXcIamQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3mpAgRmmTRnJAuUenrYbQptrXcMB8GA1UdIwQY
MBaAFCfF82QT569HKBP+OnFOLs2qIfLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xODhmYzktYjliNS00MDcyLWJjOTMt
NzkxMzI5NDZiNjk5LzEvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8xODhmYzktYjliNS00MDcyLWJjOTMtNzkxMzI5NDZiNjk5
LzEvSjhYelpCUG5yMGNvRV80NmNVNHV6YW9oOHVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCoZn6sD
wNKm6fFh2mJchJlBBbrTN2O4GqycxDqgq/xM/uKPNNkEJOkvqLcnGl8hhXHT0iUo
8sx5IRJgU/XmSgTPJWPhe5XHpF5rnl5g1Vkeyb9y1SPcvHURNfcQG7GsXf8PVW3/
zKKl8ThOjkfb63CfC7iH6XrFvnD+DOgBd/KN1POwT6sThC7SwD4A/W3p0hxaASTr
dMs4PFgXDbEJwwk0eZiz9BGE8ZlicrWA4vJ/IEaXs7GecZ+ywfop8kZDhDkauSQE
AI7icXx1Hy1JOwHSqzHqUQIo4Y4ChOYMQuKcAQbhH7Ol4cwCuiCqwHspTYDgdpa6
qVc4j0bv8G5iPg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:22:02 2025 by rpki-client