Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
File: j3phc572fsR6X9EOVvx6NNy3PHA.mft (raw, json)
Hash identifier: f6hCDHAeERTOdZQq7hu95ymj4oX3XUt9w/V9bN8IJHM=
Subject key identifier: DA:41:F1:13:CD:50:8F:37:A0:4E:BC:82:2B:FB:8D:D3:BF:3C:5F:52
Authority key identifier: 8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
Certificate issuer: /CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Certificate serial: 01976FD107155B0995072B1B14E14FD12C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
Manifest number: 0DE3
Signing time: Sat 14 Jun 2025 19:00:59 +0000
Manifest this update: Sat 14 Jun 2025 19:00:59 +0000
Manifest next update: Sun 15 Jun 2025 19:00:59 +0000
Files and hashes: 1: j3phc572fsR6X9EOVvx6NNy3PHA.crl (hash: Pv7XMSfxhooezhAM6maRCw72T5hAl/aT4CHnp6s8aH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:07:15:5b:09:95:07:2b:1b:14:e1:4f:d1:2c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Validity
Not Before: Jun 14 19:00:59 2025 GMT
Not After : Jun 15 19:00:59 2025 GMT
Subject: CN=da41f113cd508f37a04ebc822bfb8dd3bf3c5f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:bd:d9:2a:3f:37:dd:d9:93:43:dc:01:76:
1d:b3:db:1c:ed:f6:ef:78:a9:07:69:29:ab:81:84:
d0:ad:e3:86:68:5a:d1:50:eb:e8:87:8c:3f:0e:da:
fa:15:e5:73:31:df:b6:9b:44:58:9f:50:ca:b2:07:
69:8d:5b:b7:29:8d:a7:7b:8d:e2:2e:8d:9b:a8:ea:
55:3c:e9:9b:ed:50:31:95:f6:ca:29:1d:97:35:d9:
5b:eb:ca:35:3e:c3:56:ed:bc:02:9e:9f:f4:1d:69:
c3:23:1a:71:22:f5:54:ec:e4:de:aa:c2:42:2b:3d:
ed:49:7f:97:3c:9d:98:13:10:f7:15:cd:10:0c:35:
85:aa:8f:9a:6a:e3:68:ad:43:c4:0a:d8:49:25:d0:
27:1f:f5:62:3f:19:38:31:8e:a7:fd:6a:a3:c8:e5:
7a:b3:1e:02:64:ea:bc:28:dc:a6:a3:64:41:00:20:
94:e7:d8:4c:de:5b:07:0d:34:0d:60:d0:65:3d:0d:
9d:dd:b7:72:2f:59:74:b4:18:c6:a4:b9:c2:d4:e5:
4e:b0:04:95:b8:ee:42:48:38:af:35:2b:4b:c0:42:
70:50:9d:76:36:94:07:b5:77:ab:bc:cf:ed:8f:9b:
b0:9b:99:07:07:51:07:a7:c4:00:84:fd:47:23:bf:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:41:F1:13:CD:50:8F:37:A0:4E:BC:82:2B:FB:8D:D3:BF:3C:5F:52
X509v3 Authority Key Identifier:
keyid:8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:36:78:72:49:16:a3:b6:3e:d8:5f:b0:e1:cb:13:e8:9d:2a:
db:57:83:1d:5f:7a:b7:bd:48:8f:c8:0c:4d:95:4e:ae:ff:80:
84:04:48:90:5b:d8:9a:4e:7b:41:8c:24:73:73:39:b7:a2:7b:
b8:75:e5:20:b0:dd:80:93:54:e6:5e:69:c9:a0:67:d1:38:ae:
3a:0a:25:b8:fb:98:29:8d:c7:7d:77:cf:20:5c:b5:ac:5d:c9:
08:25:bb:77:37:69:e0:d5:45:d5:df:03:41:1a:43:d6:c3:eb:
6f:4d:50:cd:dd:8a:f4:46:de:31:e8:4b:80:e1:da:9d:0e:7c:
f7:42:da:4e:46:33:b6:7b:6a:07:e0:a5:49:cf:a6:98:54:94:
22:63:d2:3c:d3:6d:01:f8:86:6c:ed:b2:07:46:5a:10:2f:16:
b1:f6:85:4b:3b:a5:df:ba:6f:08:e1:34:3d:d4:10:a0:52:9a:
b0:0d:6e:16:f3:7f:bc:1b:d3:51:f4:63:cd:ef:9f:04:9d:8f:
cb:49:85:d4:ef:ec:d7:77:f9:f4:9a:94:14:a1:fa:16:bb:ec:
d9:c4:e3:45:d8:33:a0:fe:0b:a8:26:6b:77:f5:04:32:eb:d1:
5e:9a:8e:10:6e:67:30:af:19:d7:ab:65:00:22:41:e9:0a:c0:
ed:56:42:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0QcVWwmVBysbFOFP0SyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2E2MTczOWVmNjdlYzQ3YTVmZDEwZTU2ZmM3YTM0ZGNi
NzNjNzAwHhcNMjUwNjE0MTkwMDU5WhcNMjUwNjE1MTkwMDU5WjAzMTEwLwYDVQQD
EyhkYTQxZjExM2NkNTA4ZjM3YTA0ZWJjODIyYmZiOGRkM2JmM2M1ZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2K92So/N93Zk0PcAXYds9sc7fbv
eKkHaSmrgYTQreOGaFrRUOvoh4w/Dtr6FeVzMd+2m0RYn1DKsgdpjVu3KY2ne43i
Lo2bqOpVPOmb7VAxlfbKKR2XNdlb68o1PsNW7bwCnp/0HWnDIxpxIvVU7OTeqsJC
Kz3tSX+XPJ2YExD3Fc0QDDWFqo+aauNorUPECthJJdAnH/ViPxk4MY6n/WqjyOV6
sx4CZOq8KNymo2RBACCU59hM3lsHDTQNYNBlPQ2d3bdyL1l0tBjGpLnC1OVOsASV
uO5CSDivNStLwEJwUJ12NpQHtXervM/tj5uwm5kHB1EHp8QAhP1HI79g6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpB8RPNUI83oE68giv7jdO/PF9SMB8GA1UdIwQY
MBaAFI96YXOe9n7Eel/RDlb8ejTctzxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajNwaGM1NzJmc1I2WDlFT1Z2eDZOTnkzUEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mN2MxNGItNDExNS00YTkyLTgxYjUt
NzM4OTQwODEwYWRmLzEvajNwaGM1NzJmc1I2WDlFT1Z2eDZOTnkzUEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mN2MxNGItNDExNS00YTkyLTgxYjUtNzM4OTQwODEwYWRm
LzEvajNwaGM1NzJmc1I2WDlFT1Z2eDZOTnkzUEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDZ4ckkW
o7Y+2F+w4csT6J0q21eDHV96t71Ij8gMTZVOrv+AhARIkFvYmk57QYwkc3M5t6J7
uHXlILDdgJNU5l5pyaBn0TiuOgoluPuYKY3HfXfPIFy1rF3JCCW7dzdp4NVF1d8D
QRpD1sPrb01Qzd2K9EbeMehLgOHanQ5890LaTkYztntqB+ClSc+mmFSUImPSPNNt
AfiGbO2yB0ZaEC8WsfaFSzul37pvCOE0PdQQoFKasA1uFvN/vBvTUfRjze+fBJ2P
y0mF1O/s13f59JqUFKH6Frvs2cTjRdgzoP4LqCZrd/UEMuvRXpqOEG5nMK8Z16tl
ACJB6QrA7VZCDQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:00:30 2025 by rpki-client