Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: gpRofwykFywzQTPZEiRPXJSs1Ungg5QMkxo91h/PNCI=
Subject key identifier: D7:3F:FA:17:B4:EA:61:4B:E1:8D:D9:E8:13:9A:6B:81:9B:7F:9A:E1
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019775656B37E27D235339E73FCEFFCC4138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0854
Signing time: Sun 15 Jun 2025 21:01:10 +0000
Manifest this update: Sun 15 Jun 2025 21:01:10 +0000
Manifest next update: Mon 16 Jun 2025 21:01:10 +0000
Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: 8fLZjQ1hTwBvXbuDkqj2g0kCPdqZE10yhTX2LjnoDtE=)
3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:65:6b:37:e2:7d:23:53:39:e7:3f:ce:ff:cc:41:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Jun 15 21:01:10 2025 GMT
Not After : Jun 16 21:01:10 2025 GMT
Subject: CN=d73ffa17b4ea614be18dd9e8139a6b819b7f9ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:57:e8:94:a8:d4:b6:64:2d:b5:1b:c0:9f:
83:a9:92:48:6e:76:df:b2:63:ee:18:41:c4:2f:cb:
28:a8:96:ee:d2:fb:16:c3:63:28:9d:ac:c3:eb:5a:
7c:dc:16:23:11:bf:ed:e3:0d:fe:c0:8d:9f:bf:fd:
7e:27:a6:6a:eb:a3:e3:aa:26:5a:33:4a:6b:88:65:
2d:83:9f:48:45:c3:a7:55:b2:91:cd:ae:8a:0c:d3:
16:70:27:42:7f:99:6e:cb:41:38:19:e1:dd:a5:24:
83:ec:b0:02:99:66:98:e0:ff:a9:b2:02:57:89:7f:
5f:66:a4:53:9c:e7:37:eb:f4:bf:e3:29:18:aa:38:
a9:45:9a:ba:1a:d6:d9:59:e3:38:4a:49:0e:f6:e9:
32:09:58:f6:c4:3d:1d:bb:e4:82:b3:7f:a6:ff:6e:
73:3c:c3:f6:ef:cc:6d:2c:21:23:e9:23:f8:75:12:
43:2e:1c:cd:a0:e0:84:c2:26:a5:05:e1:8b:04:ea:
3c:c8:f6:cb:a4:78:20:59:8f:94:a8:d4:8e:e9:15:
93:dd:17:97:44:29:84:c9:2b:30:57:b4:67:7f:f8:
af:eb:59:f2:af:18:7d:28:3a:03:b9:79:cb:9b:ba:
22:f9:8f:a1:7f:2b:0d:49:7b:f9:8a:90:af:62:8f:
ff:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3F:FA:17:B4:EA:61:4B:E1:8D:D9:E8:13:9A:6B:81:9B:7F:9A:E1
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fd:a5:db:c7:b6:23:dc:93:cf:84:99:27:44:51:8e:50:b0:
a6:ae:e1:76:03:15:5e:9a:1d:ef:09:5f:7b:ed:20:7b:5a:a8:
68:ee:02:4c:7f:8e:93:eb:7a:16:49:af:71:99:d2:92:1a:1c:
b9:23:b4:97:88:f3:b5:7d:b4:7a:cb:1b:9f:7c:79:5d:d1:63:
ab:80:60:4c:55:47:24:0a:99:8a:f6:52:5d:eb:b7:2e:31:ad:
4c:53:22:0c:2d:00:39:13:ca:36:a1:64:77:8f:ec:97:33:1a:
4f:5e:6a:5e:ca:a1:ee:4b:d0:99:12:9f:6d:81:6a:9b:36:8a:
63:09:d6:5e:6e:3f:9b:c7:9f:e5:e6:3c:02:a3:22:11:63:ce:
d5:0f:5d:56:a0:c9:a6:45:86:cc:4d:ea:18:92:15:bf:da:f7:
3d:41:db:bb:3b:b7:97:47:7d:b5:c9:2f:3d:06:96:f9:3c:5a:
ec:4a:99:6d:94:2f:ee:2a:d9:1a:de:3b:de:e8:bc:75:3c:b7:
05:0b:04:54:46:5c:ac:2c:4a:1b:9b:6d:a4:fc:d2:9d:a0:7a:
07:df:f7:27:ee:0c:b5:65:45:05:31:34:60:89:af:2f:77:14:
dc:63:1e:61:a8:65:c2:0d:b7:5f:f0:e2:01:de:af:fb:15:e7:
f5:09:39:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1ZWs34n0jUznnP87/zEE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzY5YzZiYmU4OWU3YzA0NzliNjE3NzQ0YTQ0MjRmNjY2
NzQ5NDQwHhcNMjUwNjE1MjEwMTEwWhcNMjUwNjE2MjEwMTEwWjAzMTEwLwYDVQQD
EyhkNzNmZmExN2I0ZWE2MTRiZTE4ZGQ5ZTgxMzlhNmI4MTliN2Y5YWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLpX6JSo1LZkLbUbwJ+DqZJIbnbf
smPuGEHEL8soqJbu0vsWw2MonazD61p83BYjEb/t4w3+wI2fv/1+J6Zq66PjqiZa
M0priGUtg59IRcOnVbKRza6KDNMWcCdCf5luy0E4GeHdpSSD7LACmWaY4P+psgJX
iX9fZqRTnOc36/S/4ykYqjipRZq6GtbZWeM4SkkO9ukyCVj2xD0du+SCs3+m/25z
PMP278xtLCEj6SP4dRJDLhzNoOCEwialBeGLBOo8yPbLpHggWY+UqNSO6RWT3ReX
RCmEySswV7Rnf/iv61nyrxh9KDoDuXnLm7oi+Y+hfysNSXv5ipCvYo//fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNc/+he06mFL4Y3Z6BOaa4Gbf5rhMB8GA1UdIwQY
MBaAFI3GnGu+iefAR5thd0SkQk9mZ0lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzct
YmI1Y2FhYzJlOTAzLzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzctYmI1Y2FhYzJlOTAz
LzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgv2l28e2
I9yTz4SZJ0RRjlCwpq7hdgMVXpod7wlfe+0ge1qoaO4CTH+Ok+t6FkmvcZnSkhoc
uSO0l4jztX20essbn3x5XdFjq4BgTFVHJAqZivZSXeu3LjGtTFMiDC0AORPKNqFk
d4/slzMaT15qXsqh7kvQmRKfbYFqmzaKYwnWXm4/m8ef5eY8AqMiEWPO1Q9dVqDJ
pkWGzE3qGJIVv9r3PUHbuzu3l0d9tckvPQaW+Txa7EqZbZQv7irZGt473ui8dTy3
BQsEVEZcrCxKG5ttpPzSnaB6B9/3J+4MtWVFBTE0YImvL3cU3GMeYahlwg23X/Di
Ad6v+xXn9Qk59Q==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:40:51 2025 by rpki-client