Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
File: JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json)
Hash identifier: nsw9LCiTsYSpbO62Hi3Xg078lER03Na11BhlyOLE3qg=
Subject key identifier: 84:CF:19:C7:8B:BA:54:67:1E:E3:D9:BD:14:2D:26:43:46:FB:DA:02
Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
Certificate issuer: /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Certificate serial: 0197730988A01434A7249F2931631EC4A742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 10:01:33 +0000
Manifest this update: Sun 15 Jun 2025 10:01:33 +0000
Manifest next update: Mon 16 Jun 2025 10:01:33 +0000
Files and hashes: 1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: gg6ziogV2YYgKWFQsA2Qohltm36bCmQZmbzoK4+embA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:09:88:a0:14:34:a7:24:9f:29:31:63:1e:c4:a7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Validity
Not Before: Jun 15 10:01:33 2025 GMT
Not After : Jun 16 10:01:33 2025 GMT
Subject: CN=84cf19c78bba54671ee3d9bd142d264346fbda02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:96:ff:e5:65:cf:ab:71:f7:d4:c8:55:43:
3e:44:c9:a2:5f:f3:96:12:a2:77:03:c9:cd:39:1e:
26:94:a7:a2:9a:9d:1c:34:9b:06:d4:aa:2b:92:3b:
84:ca:45:3c:f8:9c:ef:af:d6:71:a8:ac:9e:53:f3:
4a:ba:05:00:c3:5f:8d:06:7c:d8:72:f2:e8:85:c4:
99:8d:a1:a3:83:26:d5:6a:dd:8b:b8:5f:bb:dd:b9:
3c:19:b0:c4:ba:99:81:61:30:04:a4:b9:c4:83:3d:
ed:0e:2b:f8:9d:28:5b:58:51:d6:d5:5a:a8:19:b4:
e7:b7:3a:ed:49:50:f4:4f:c8:d0:9a:36:99:53:70:
df:7e:16:9e:8a:24:0d:55:5b:de:d4:00:e3:b7:33:
d6:f9:43:00:3d:b1:30:d3:e8:44:47:1d:11:79:19:
f2:63:f4:72:f0:da:a7:06:06:47:95:24:dd:86:d1:
1b:85:fc:b0:ce:fb:3c:16:d0:16:0d:57:4a:2a:19:
26:f5:6d:92:07:01:a3:32:95:10:85:b3:88:8f:55:
c4:d3:ee:f9:3d:f3:6a:e4:94:64:67:73:df:54:3f:
6e:89:5f:20:9e:62:07:56:0d:7b:80:32:81:69:df:
ce:67:a1:d4:c1:d3:78:03:b7:c4:65:66:85:8f:57:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CF:19:C7:8B:BA:54:67:1E:E3:D9:BD:14:2D:26:43:46:FB:DA:02
X509v3 Authority Key Identifier:
keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0e:5b:05:77:92:ff:a8:5b:65:40:1e:ac:7d:c0:df:36:1d:
1d:18:2f:fd:2e:bd:73:a1:5b:e4:34:d6:d3:c6:e6:a6:6d:38:
04:83:5d:76:f8:49:86:bf:78:b5:c1:73:ff:d3:42:0e:7c:50:
f1:99:ed:8a:9f:b4:2a:a5:2a:10:6c:92:e1:4e:6f:89:29:a7:
97:c0:a4:6a:a0:96:92:c5:e8:19:29:69:2a:71:86:11:13:e3:
77:4a:d1:b5:91:ce:cf:2a:d8:af:4a:37:8f:90:19:81:cd:19:
19:5b:70:26:43:6c:04:72:66:9c:6f:89:a7:51:a4:cb:cc:42:
7e:8a:37:9c:1e:b6:00:76:1e:ae:63:9c:76:b6:b4:29:64:52:
4d:e7:7a:38:58:05:92:4a:d3:0a:78:08:34:16:a2:81:94:bf:
3d:64:93:01:8e:54:39:de:6b:7b:3a:15:fb:80:7c:d7:d3:fb:
7e:66:ae:2d:23:ab:eb:08:0f:57:fb:43:e5:bd:80:0b:ca:19:
62:cf:af:0a:84:c4:29:9e:8a:ca:3d:12:54:4e:2d:69:6a:ef:
42:92:8a:b0:90:0c:ca:5c:2f:e7:7d:1b:71:4a:36:df:7a:cb:
9c:66:f2:6a:08:3c:1f:c2:ff:74:a3:7c:08:52:7f:5d:e0:d3:
92:5f:b7:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzCYigFDSnJJ8pMWMexKdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MWJlMWMwNmFmMTFmM2VlYzFkY2IxOTZiY2E4ZGU3YmYw
OGZiOTgwHhcNMjUwNjE1MTAwMTMzWhcNMjUwNjE2MTAwMTMzWjAzMTEwLwYDVQQD
Eyg4NGNmMTljNzhiYmE1NDY3MWVlM2Q5YmQxNDJkMjY0MzQ2ZmJkYTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeCW/+Vlz6tx99TIVUM+RMmiX/OW
EqJ3A8nNOR4mlKeimp0cNJsG1KorkjuEykU8+Jzvr9ZxqKyeU/NKugUAw1+NBnzY
cvLohcSZjaGjgybVat2LuF+73bk8GbDEupmBYTAEpLnEgz3tDiv4nShbWFHW1Vqo
GbTntzrtSVD0T8jQmjaZU3DffhaeiiQNVVve1ADjtzPW+UMAPbEw0+hERx0ReRny
Y/Ry8NqnBgZHlSTdhtEbhfywzvs8FtAWDVdKKhkm9W2SBwGjMpUQhbOIj1XE0+75
PfNq5JRkZ3PfVD9uiV8gnmIHVg17gDKBad/OZ6HUwdN4A7fEZWaFj1d3rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITPGceLulRnHuPZvRQtJkNG+9oCMB8GA1UdIwQY
MBaAFCcb4cBq8R8+7B3LGWvKjee/CPuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNDlkNjQtODNjNC00YTdlLWI0YjUt
NDc0MjA3ZGFlZjQzLzEvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xNDlkNjQtODNjNC00YTdlLWI0YjUtNDc0MjA3ZGFlZjQz
LzEvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQ5bBXeS
/6hbZUAerH3A3zYdHRgv/S69c6Fb5DTW08bmpm04BINddvhJhr94tcFz/9NCDnxQ
8Zntip+0KqUqEGyS4U5viSmnl8CkaqCWksXoGSlpKnGGERPjd0rRtZHOzyrYr0o3
j5AZgc0ZGVtwJkNsBHJmnG+Jp1Gky8xCfoo3nB62AHYermOcdra0KWRSTed6OFgF
kkrTCngINBaigZS/PWSTAY5UOd5rezoV+4B819P7fmauLSOr6wgPV/tD5b2AC8oZ
Ys+vCoTEKZ6Kyj0SVE4taWrvQpKKsJAMylwv530bcUo233rLnGbyagg8H8L/dKN8
CFJ/XeDTkl+3xA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:43:41 2025 by rpki-client