Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier: y6hef8pB0jXzhcSB4ecqjSY23qmfUxHUjkfD1PMK38A=
Subject key identifier: 6A:F1:58:27:B7:62:C0:5B:B7:88:16:0E:09:8D:4E:B8:8A:50:AE:46
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 01987AC03B8437CCB9ACE33CD57E5B3F942F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 15:01:15 +0000
Manifest this update: Tue 05 Aug 2025 15:01:15 +0000
Manifest next update: Wed 06 Aug 2025 15:01:15 +0000
Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: 2kNx50exdxdypXDDh541ko8x3AnVS2lsIC2N//RH5W8=)
2: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (hash: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:3b:84:37:cc:b9:ac:e3:3c:d5:7e:5b:3f:94:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Aug 5 15:01:15 2025 GMT
Not After : Aug 6 15:01:15 2025 GMT
Subject: CN=6af15827b762c05bb788160e098d4eb88a50ae46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:1f:6a:de:25:ed:0e:6b:ac:90:49:ff:ff:
63:cf:bd:28:05:a4:24:cd:b0:77:ac:bb:85:66:1e:
a0:72:fe:3f:df:12:93:3e:e8:07:67:13:28:2b:d4:
4b:63:88:08:ed:af:d3:43:c8:b1:11:20:41:e6:f3:
ae:4a:11:72:2a:e5:be:d9:c1:3a:c4:7a:72:ad:fa:
02:df:06:da:f1:24:0d:ba:cc:ab:1b:94:69:79:09:
60:7e:6a:f9:f2:ac:a1:f6:03:ff:66:ea:b6:40:48:
65:e1:88:78:43:8c:1c:ea:4a:cc:40:b5:9d:7a:48:
f3:f1:62:19:13:f2:4e:bb:3c:2b:2b:b9:83:18:fb:
07:99:eb:46:c0:eb:e1:19:cb:92:c9:47:11:d0:b7:
d5:fe:37:79:23:03:01:7d:af:b3:2e:80:d5:18:e7:
2c:6f:64:3b:ec:49:f7:c0:ae:a8:32:be:1c:9f:67:
55:74:3f:95:16:75:d2:94:22:3b:8c:eb:c3:c7:fe:
48:5d:d7:2f:a8:9b:c1:a5:1f:63:3c:44:d2:3b:8b:
b1:d1:40:69:d9:03:99:6e:e6:87:db:4a:25:1c:e5:
cc:22:c4:01:1a:21:ae:85:8a:29:d2:e4:e8:49:76:
5d:f6:50:6d:44:36:b4:59:80:39:c3:b7:85:f8:8f:
5c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F1:58:27:B7:62:C0:5B:B7:88:16:0E:09:8D:4E:B8:8A:50:AE:46
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b4:93:64:76:b0:21:42:fc:11:a5:2a:a3:80:18:a7:af:ff:
9c:e5:37:c3:d4:12:15:8b:18:57:a9:06:25:2d:e8:ae:58:46:
b0:38:23:44:14:76:4e:69:e4:8f:0b:ae:63:36:f9:4e:79:d8:
85:f8:f7:69:72:4e:cd:fa:0e:3a:94:08:63:7e:50:fe:82:d1:
bc:4e:43:71:d3:b0:8a:9a:62:6c:15:2f:13:5c:5a:ab:e7:56:
65:44:f3:a0:83:59:95:24:02:25:8f:b8:9e:19:d9:10:fc:3b:
af:95:bb:65:8a:be:6c:0e:3e:fc:5c:b9:f7:bc:24:b5:ea:78:
e2:ce:10:26:0b:b4:90:0c:e5:18:90:40:01:c3:ec:8c:d1:c3:
00:99:67:76:5b:af:a4:29:bc:a6:8f:3d:c7:a8:83:a5:76:1d:
03:d0:cf:be:5f:83:ba:e7:5c:5a:1e:c4:50:90:b8:bf:13:90:
a9:43:f5:f0:76:62:5c:ee:99:34:69:b5:cd:22:cb:c1:48:c4:
b0:b1:4e:9d:c1:30:58:ec:c4:b6:33:01:04:c3:4f:d9:9d:18:
71:15:66:58:70:1f:36:33:cb:0f:20:ce:74:45:c5:68:0f:71:
30:f9:d7:27:95:b9:98:3b:0a:d9:19:12:1f:b2:a4:7c:a5:15:
9a:fc:c7:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6wDuEN8y5rOM81X5bP5QvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZWNkMTNhZTAyN2YzN2YwMzg2Mjc0OTM0NzA0NGEyNjIw
MjhlYjAwHhcNMjUwODA1MTUwMTE1WhcNMjUwODA2MTUwMTE1WjAzMTEwLwYDVQQD
Eyg2YWYxNTgyN2I3NjJjMDViYjc4ODE2MGUwOThkNGViODhhNTBhZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg0fat4l7Q5rrJBJ//9jz70oBaQk
zbB3rLuFZh6gcv4/3xKTPugHZxMoK9RLY4gI7a/TQ8ixESBB5vOuShFyKuW+2cE6
xHpyrfoC3wba8SQNusyrG5RpeQlgfmr58qyh9gP/Zuq2QEhl4Yh4Q4wc6krMQLWd
ekjz8WIZE/JOuzwrK7mDGPsHmetGwOvhGcuSyUcR0LfV/jd5IwMBfa+zLoDVGOcs
b2Q77En3wK6oMr4cn2dVdD+VFnXSlCI7jOvDx/5IXdcvqJvBpR9jPETSO4ux0UBp
2QOZbuaH20olHOXMIsQBGiGuhYop0uToSXZd9lBtRDa0WYA5w7eF+I9cdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrxWCe3YsBbt4gWDgmNTriKUK5GMB8GA1UdIwQY
MBaAFCTs0TrgJ/N/A4YnSTRwRKJiAo6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mYmNiZjctZmZjMC00MzkyLTgyMDMt
OWMwYTllOGI3OGUxLzEvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9mYmNiZjctZmZjMC00MzkyLTgyMDMtOWMwYTllOGI3OGUx
LzEvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrSTZHaw
IUL8EaUqo4AYp6//nOU3w9QSFYsYV6kGJS3orlhGsDgjRBR2TmnkjwuuYzb5TnnY
hfj3aXJOzfoOOpQIY35Q/oLRvE5DcdOwippibBUvE1xaq+dWZUTzoINZlSQCJY+4
nhnZEPw7r5W7ZYq+bA4+/Fy597wktep44s4QJgu0kAzlGJBAAcPsjNHDAJlndluv
pCm8po89x6iDpXYdA9DPvl+DuudcWh7EUJC4vxOQqUP18HZiXO6ZNGm1zSLLwUjE
sLFOncEwWOzEtjMBBMNP2Z0YcRVmWHAfNjPLDyDOdEXFaA9xMPnXJ5W5mDsK2RkS
H7KkfKUVmvzHfA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:05:33 2025 by rpki-client