Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
File: jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json)
Hash identifier: xyW/QmtJMn7ZN5NYBAmudbNZIBXf06aoqZBxYdId0FM=
Subject key identifier: 67:5E:8F:EB:2D:3A:B6:58:41:15:74:93:1A:4E:CD:3F:0F:D9:5D:CD
Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
Certificate issuer: /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Certificate serial: 01977CB1A36AC4A9F3FE08A301FFBC923EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
Manifest number: 1401
Signing time: Tue 17 Jun 2025 07:01:45 +0000
Manifest this update: Tue 17 Jun 2025 07:01:45 +0000
Manifest next update: Wed 18 Jun 2025 07:01:45 +0000
Files and hashes: 1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: Grh8L9btctlYScT88b35Kpk33RJbv31X8qMBSnF5Evg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b1:a3:6a:c4:a9:f3:fe:08:a3:01:ff:bc:92:3e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Validity
Not Before: Jun 17 07:01:45 2025 GMT
Not After : Jun 18 07:01:45 2025 GMT
Subject: CN=675e8feb2d3ab658411574931a4ecd3f0fd95dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:dc:51:ed:91:d1:a2:0d:e1:9e:b4:7c:bf:
ea:04:70:93:ce:21:5f:8e:ef:6e:3a:50:61:e7:3c:
44:83:88:ff:bb:a1:cb:c0:e5:a7:07:f8:79:ee:98:
4c:cf:07:54:00:16:f3:72:69:85:0c:16:aa:18:50:
ef:90:d2:20:4f:af:a4:07:45:27:19:fd:07:45:58:
9d:67:42:1b:33:25:70:af:1d:aa:8f:90:8b:09:97:
c4:ce:4e:27:5e:c2:a3:21:78:ba:a2:2c:3d:b1:d2:
5c:a0:d2:26:68:d3:d4:ab:05:94:d0:b7:56:66:db:
a4:55:00:5c:eb:49:13:14:37:f2:b4:fe:a2:22:32:
61:74:f4:2a:02:de:77:ba:df:ad:cf:7c:b2:d7:3b:
f8:70:17:56:4d:43:66:8d:94:c2:d5:16:92:3e:97:
37:b2:13:ed:41:59:01:33:22:1c:91:2f:4e:ac:de:
6e:3c:89:32:85:8b:d0:4e:dc:24:05:2a:6f:69:bf:
2a:1f:85:4d:bc:af:2f:8a:42:9d:7d:20:9f:15:16:
2f:6a:c8:95:f8:b4:18:f4:23:64:95:ce:7f:ce:5a:
cf:40:ac:f7:ec:5f:2b:1f:2f:7a:d2:c6:f6:77:55:
e0:c3:3d:5c:ca:35:06:78:96:df:c6:a0:cc:27:07:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5E:8F:EB:2D:3A:B6:58:41:15:74:93:1A:4E:CD:3F:0F:D9:5D:CD
X509v3 Authority Key Identifier:
keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1b:d7:41:b4:13:05:df:65:78:13:ef:a5:2f:be:c1:c6:6c:
01:51:f2:f2:f5:00:15:f2:2f:49:e1:2a:cc:46:67:4b:51:34:
52:ce:8d:62:bd:14:ee:da:85:6a:c3:ee:13:9e:61:a2:64:43:
cc:05:8b:8d:00:22:6e:80:c8:ee:2f:13:0d:e1:de:4d:01:50:
db:25:05:b5:18:c3:cc:21:79:8f:0a:72:73:2e:42:fe:c8:e0:
3c:da:f3:41:8d:d6:52:68:e0:6a:12:3b:16:c0:81:ad:cc:ef:
b2:c0:fc:8f:1a:00:d8:b6:8e:73:be:d6:23:79:90:5a:b8:dd:
cc:f8:ef:ce:cd:c5:58:3e:16:68:d5:17:52:47:ab:f6:21:19:
45:fd:47:ed:31:75:3e:72:87:64:ed:b0:9a:a3:af:53:1f:f0:
f6:aa:69:b1:5f:9f:56:3b:83:d7:4f:7c:0f:9e:c9:f8:bc:57:
8f:30:c3:f5:d5:8c:09:06:50:78:0b:89:68:fd:9a:87:36:e5:
f1:c1:0e:06:d4:7c:da:2c:33:ae:f1:16:ee:17:0f:72:a2:49:
48:f9:be:40:39:cd:1c:d0:60:6d:7d:4a:b2:01:1b:24:e7:1c:
ed:d7:b8:e2:19:dd:5e:77:00:88:b5:11:71:34:c5:f0:5f:b7:
0c:b1:72:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8saNqxKnz/gijAf+8kj6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjljZDFlYWQwMzhlODViZDlkMzMyY2MxOGFjMzA5ZTA2
MjBjNTEwHhcNMjUwNjE3MDcwMTQ1WhcNMjUwNjE4MDcwMTQ1WjAzMTEwLwYDVQQD
Eyg2NzVlOGZlYjJkM2FiNjU4NDExNTc0OTMxYTRlY2QzZjBmZDk1ZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaLcUe2R0aIN4Z60fL/qBHCTziFf
ju9uOlBh5zxEg4j/u6HLwOWnB/h57phMzwdUABbzcmmFDBaqGFDvkNIgT6+kB0Un
Gf0HRVidZ0IbMyVwrx2qj5CLCZfEzk4nXsKjIXi6oiw9sdJcoNImaNPUqwWU0LdW
ZtukVQBc60kTFDfytP6iIjJhdPQqAt53ut+tz3yy1zv4cBdWTUNmjZTC1RaSPpc3
shPtQVkBMyIckS9OrN5uPIkyhYvQTtwkBSpvab8qH4VNvK8vikKdfSCfFRYvasiV
+LQY9CNklc5/zlrPQKz37F8rHy960sb2d1Xgwz1cyjUGeJbfxqDMJwdq2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdej+stOrZYQRV0kxpOzT8P2V3NMB8GA1UdIwQY
MBaAFI8pzR6tA46FvZ0zLMGKwwngYgxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2Et
NmQwNzU0NmY3YTVhLzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2EtNmQwNzU0NmY3YTVh
LzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBvXQbQT
Bd9leBPvpS++wcZsAVHy8vUAFfIvSeEqzEZnS1E0Us6NYr0U7tqFasPuE55homRD
zAWLjQAiboDI7i8TDeHeTQFQ2yUFtRjDzCF5jwpycy5C/sjgPNrzQY3WUmjgahI7
FsCBrczvssD8jxoA2LaOc77WI3mQWrjdzPjvzs3FWD4WaNUXUker9iEZRf1H7TF1
PnKHZO2wmqOvUx/w9qppsV+fVjuD1098D57J+LxXjzDD9dWMCQZQeAuJaP2ahzbl
8cEOBtR82iwzrvEW7hcPcqJJSPm+QDnNHNBgbX1KsgEbJOcc7de44hndXncAiLUR
cTTF8F+3DLFyuA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 15:58:24 2025 by rpki-client