Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
File: J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft (raw, json)
Hash identifier: m0Z9+ajqz4c0KNo3QrNHseGR/ceMFgrtQsm0pJa6Gf0=
Subject key identifier: 1C:FB:70:1D:C9:18:94:B6:82:6B:57:ED:01:0B:C7:0A:FB:C9:CA:E6
Authority key identifier: 27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF
Certificate issuer: /CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
Certificate serial: 01976BF4A2F50AB442B2B4492B1FF8D4B764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
Manifest number: 03F0
Signing time: Sat 14 Jun 2025 01:01:23 +0000
Manifest this update: Sat 14 Jun 2025 01:01:23 +0000
Manifest next update: Sun 15 Jun 2025 01:01:23 +0000
Files and hashes: 1: J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl (hash: 4X4w92RYMW07igcW+bJRxj1GBg2DUrtBi70dv7PxDH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:a2:f5:0a:b4:42:b2:b4:49:2b:1f:f8:d4:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
Validity
Not Before: Jun 14 01:01:23 2025 GMT
Not After : Jun 15 01:01:23 2025 GMT
Subject: CN=1cfb701dc91894b6826b57ed010bc70afbc9cae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:46:e4:7f:6b:bb:2d:5b:f6:01:e9:11:da:
15:b6:de:32:6a:aa:b6:8b:6d:83:68:a2:93:03:a7:
4b:e7:7e:6c:31:56:10:e3:10:02:a7:a5:56:52:a2:
13:a9:39:f0:b4:2e:23:ad:43:52:67:3d:71:9e:89:
0f:c5:f2:a3:50:14:cc:16:dd:78:c4:83:ef:6b:72:
ca:2c:9c:ba:d3:9b:e9:f6:ab:ae:e9:95:52:0e:57:
0a:8c:9d:9d:b0:09:ef:09:8a:bc:c4:08:89:4f:93:
4e:4d:fe:23:b9:c1:79:44:45:15:d0:7f:1c:18:fe:
b9:59:f0:72:3a:9e:0c:91:62:6c:00:93:7f:23:aa:
7c:6f:a5:23:1f:72:8a:8c:30:84:d8:b4:87:f6:ac:
9d:d6:6c:f2:ed:d8:5a:55:66:bd:9c:ec:63:79:2f:
47:aa:c9:e5:b8:0c:6c:a5:3c:46:e8:f9:a1:d3:f0:
41:b4:d2:bf:dc:86:ee:5d:df:d7:ea:59:23:21:95:
cf:72:d7:1c:de:0b:46:7e:01:15:78:6a:94:81:7f:
c4:ce:c9:31:4b:27:57:cd:3b:e9:b4:67:08:02:2d:
1b:3a:29:d7:17:a0:e8:44:0c:3d:4f:77:d9:eb:2d:
54:a0:b5:93:a1:51:58:f1:05:a1:1c:ae:d7:cd:48:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FB:70:1D:C9:18:94:B6:82:6B:57:ED:01:0B:C7:0A:FB:C9:CA:E6
X509v3 Authority Key Identifier:
keyid:27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c9:12:b5:a2:32:d8:a2:d8:e6:1c:9a:0d:d2:90:f0:95:c4:
4d:e6:81:cb:ea:cd:69:07:ff:ca:50:1b:03:78:f7:30:ca:23:
29:58:c4:e7:84:e9:f4:c5:d7:2b:04:8d:df:d9:9b:23:96:98:
b5:04:34:4a:6a:6a:d0:d3:2f:a6:c9:85:7b:c2:79:00:63:b3:
56:70:fb:90:72:17:76:d9:5f:79:7a:40:db:41:77:8c:86:5f:
d5:0d:e9:cc:00:0d:62:ed:1e:2b:7c:9c:1b:e7:45:bf:f0:75:
da:d1:43:8b:39:58:cb:fd:a0:49:21:82:61:08:16:ef:29:66:
41:ab:7c:36:ac:24:e5:24:07:3a:20:51:4f:f2:c7:bb:a6:4a:
10:e9:bb:ae:30:ed:4f:07:df:5c:fd:85:e6:4a:1f:5c:c8:59:
52:80:14:e5:06:b7:d2:5c:40:d4:cb:75:13:bd:75:9e:d4:79:
97:df:c0:ea:6c:55:ef:d7:97:62:98:07:8f:68:a6:d5:b5:b6:
06:31:09:c3:04:81:bf:75:40:71:1e:25:a7:db:b8:81:5c:08:
1c:ae:7e:d4:5e:a0:af:27:4a:2b:f5:25:6a:62:1b:3e:2d:5e:
a1:38:48:d4:56:96:9d:18:50:75:f0:dd:ae:3c:8a:74:3f:ec:
b9:ee:b5:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr9KL1CrRCsrRJKx/41LdkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZWE2MmY2ZjIzMTljYWQyMmQzZjk0YmUzYWZiMmE0NTY3
ODA1ZmYwHhcNMjUwNjE0MDEwMTIzWhcNMjUwNjE1MDEwMTIzWjAzMTEwLwYDVQQD
EygxY2ZiNzAxZGM5MTg5NGI2ODI2YjU3ZWQwMTBiYzcwYWZiYzljYWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy1G5H9ruy1b9gHpEdoVtt4yaqq2
i22DaKKTA6dL535sMVYQ4xACp6VWUqITqTnwtC4jrUNSZz1xnokPxfKjUBTMFt14
xIPva3LKLJy605vp9quu6ZVSDlcKjJ2dsAnvCYq8xAiJT5NOTf4jucF5REUV0H8c
GP65WfByOp4MkWJsAJN/I6p8b6UjH3KKjDCE2LSH9qyd1mzy7dhaVWa9nOxjeS9H
qsnluAxspTxG6Pmh0/BBtNK/3IbuXd/X6lkjIZXPctcc3gtGfgEVeGqUgX/Ezskx
SydXzTvptGcIAi0bOinXF6DoRAw9T3fZ6y1UoLWToVFY8QWhHK7XzUhTIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz7cB3JGJS2gmtX7QELxwr7ycrmMB8GA1UdIwQY
MBaAFCfqYvbyMZytItP5S+OvsqRWeAX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1waTl2SXhuSzBpMF9sTDQ2LXlwRlo0QmY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDBmNzQtYWYwMi00MDRjLTg0MWYt
ZjcxMzc2NGY5MDNkLzEvSi1waTl2SXhuSzBpMF9sTDQ2LXlwRlo0QmY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDBmNzQtYWYwMi00MDRjLTg0MWYtZjcxMzc2NGY5MDNk
LzEvSi1waTl2SXhuSzBpMF9sTDQ2LXlwRlo0QmY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjskStaIy
2KLY5hyaDdKQ8JXETeaBy+rNaQf/ylAbA3j3MMojKVjE54Tp9MXXKwSN39mbI5aY
tQQ0Smpq0NMvpsmFe8J5AGOzVnD7kHIXdtlfeXpA20F3jIZf1Q3pzAANYu0eK3yc
G+dFv/B12tFDizlYy/2gSSGCYQgW7ylmQat8Nqwk5SQHOiBRT/LHu6ZKEOm7rjDt
TwffXP2F5kofXMhZUoAU5Qa30lxA1Mt1E711ntR5l9/A6mxV79eXYpgHj2im1bW2
BjEJwwSBv3VAcR4lp9u4gVwIHK5+1F6grydKK/UlamIbPi1eoThI1FaWnRhQdfDd
rjyKdD/sue61Hw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:38 2025 by rpki-client