Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier: QSHoiILSxrYJTdkkqgNX0UmhE6lX7vwkC+ars/D9uNY=
Subject key identifier: 6D:85:68:30:87:47:68:CE:40:31:33:84:87:27:51:BC:26:3B:EB:E5
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial: 019874503842F7DD3B62F7E60E7FA2CE697A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number: 42
Signing time: Mon 04 Aug 2025 09:01:10 +0000
Manifest this update: Mon 04 Aug 2025 09:01:10 +0000
Manifest next update: Tue 05 Aug 2025 09:01:10 +0000
Files and hashes: 1: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: yH8QYs/WPjtXrEWvIHepPzfTzOHk3X7975uoQagmjNM=)
2: rsJr37lWx4RTfR8Cvpu056B6Wz4.roa (hash: /l5appIPEWouSbZYMspTa7m6sRTfOtnp/hleC+S0sOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:38:42:f7:dd:3b:62:f7:e6:0e:7f:a2:ce:69:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
Validity
Not Before: Aug 4 09:01:10 2025 GMT
Not After : Aug 5 09:01:10 2025 GMT
Subject: CN=6d856830874768ce40313384872751bc263bebe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:09:ba:f3:7c:47:df:02:cb:d4:c8:a1:bf:
67:0d:42:57:88:23:ac:b1:82:a4:31:42:d4:ad:59:
19:ab:7a:fc:48:47:15:87:0d:a0:62:18:08:e2:bd:
cf:9b:f2:0b:a5:2c:61:82:57:9b:75:26:0c:34:dc:
3e:54:5b:11:77:45:58:06:dd:28:15:d4:32:fb:ef:
a3:92:61:5d:db:a0:af:ca:f8:ed:1a:9f:af:52:50:
78:90:fa:df:3b:5d:d7:84:e8:7e:ec:ef:f0:81:59:
73:ef:e5:83:f9:88:11:d7:fa:3c:57:ba:b0:61:b8:
fa:ef:0b:ea:46:f0:e8:0c:36:03:c6:1f:d9:a3:c5:
11:4a:67:ea:09:3b:37:64:cc:7f:f2:02:8a:c6:a3:
74:22:75:f7:bc:81:e9:b0:25:23:2e:55:39:2c:aa:
a8:a4:a1:b3:e8:76:ca:d7:97:bc:33:9a:4c:42:b9:
67:20:84:01:65:ba:ac:4a:cb:9e:22:2a:c6:95:e5:
c3:8d:7f:78:d4:4c:7e:ed:27:e4:d5:f8:bb:34:e6:
07:66:68:af:f7:e7:8d:d3:3d:cd:0b:ca:30:d0:fe:
0f:b0:a5:3b:63:ac:1c:a7:cd:62:6b:10:7f:54:7d:
54:2a:24:cc:d7:a3:6a:10:89:8d:c6:b8:65:b2:50:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:85:68:30:87:47:68:CE:40:31:33:84:87:27:51:BC:26:3B:EB:E5
X509v3 Authority Key Identifier:
keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4b:2b:bf:5b:31:59:99:f6:b4:e9:e1:d4:7d:54:2d:1d:16:
e6:8e:07:80:51:fb:b9:f7:3b:82:65:4d:16:f9:5b:2c:7b:2c:
98:93:de:04:e1:ed:6f:48:32:66:21:ae:9a:a0:3e:f5:52:1d:
e7:13:5d:0c:74:df:1f:b0:c3:e4:06:8c:2a:d8:1a:5b:2f:09:
5e:60:b1:2c:fe:95:41:6e:f9:2e:46:38:50:81:bd:0a:ee:54:
cd:41:52:eb:a1:28:20:e9:48:7f:e3:5e:17:d5:7d:3a:01:85:
70:aa:14:68:38:5a:94:89:cd:74:e6:77:a0:bd:42:fc:bb:71:
62:26:dc:9c:b9:0d:de:82:63:b2:50:ed:42:49:9b:95:52:97:
24:02:4e:e7:bb:dc:02:3e:0e:35:f3:ef:0b:2f:fa:9f:51:1f:
f8:ab:6c:6f:de:66:a6:e6:76:bd:d8:b6:ca:c0:90:d3:8a:95:
16:bc:4d:65:b7:0e:b3:ea:54:e9:85:eb:3e:06:5b:43:6c:f4:
4f:4d:05:4b:ae:eb:ca:56:ba:0d:a3:a3:81:de:a0:2f:27:28:
a4:4b:dc:85:99:c2:ed:ae:02:9f:ad:56:a1:a1:3c:31:64:64:
bf:83:3d:38:16:32:ea:e3:85:97:c3:11:a4:e2:c6:ee:a5:a6:
a2:7b:8d:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UDhC9907YvfmDn+izml6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NTYzMzE4MmRkZDU1OGI0MWJhMTZjNTE5ZWU0NjE0NTBk
ZGRkZDkwHhcNMjUwODA0MDkwMTEwWhcNMjUwODA1MDkwMTEwWjAzMTEwLwYDVQQD
Eyg2ZDg1NjgzMDg3NDc2OGNlNDAzMTMzODQ4NzI3NTFiYzI2M2JlYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKsJuvN8R98Cy9TIob9nDUJXiCOs
sYKkMULUrVkZq3r8SEcVhw2gYhgI4r3Pm/ILpSxhglebdSYMNNw+VFsRd0VYBt0o
FdQy+++jkmFd26CvyvjtGp+vUlB4kPrfO13XhOh+7O/wgVlz7+WD+YgR1/o8V7qw
Ybj67wvqRvDoDDYDxh/Zo8URSmfqCTs3ZMx/8gKKxqN0InX3vIHpsCUjLlU5LKqo
pKGz6HbK15e8M5pMQrlnIIQBZbqsSsueIirGleXDjX941Ex+7Sfk1fi7NOYHZmiv
9+eN0z3NC8ow0P4PsKU7Y6wcp81iaxB/VH1UKiTM16NqEImNxrhlslAjJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2FaDCHR2jOQDEzhIcnUbwmO+vlMB8GA1UdIwQY
MBaAFCVWMxgt3VWLQboWxRnuRhRQ3d3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEt
NWI1NDFmMzQ3MzJlLzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEtNWI1NDFmMzQ3MzJl
LzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0srv1sx
WZn2tOnh1H1ULR0W5o4HgFH7ufc7gmVNFvlbLHssmJPeBOHtb0gyZiGumqA+9VId
5xNdDHTfH7DD5AaMKtgaWy8JXmCxLP6VQW75LkY4UIG9Cu5UzUFS66EoIOlIf+Ne
F9V9OgGFcKoUaDhalInNdOZ3oL1C/LtxYibcnLkN3oJjslDtQkmblVKXJAJO57vc
Aj4ONfPvCy/6n1Ef+Ktsb95mpuZ2vdi2ysCQ04qVFrxNZbcOs+pU6YXrPgZbQ2z0
T00FS67ryla6DaOjgd6gLycopEvchZnC7a4Cn61WoaE8MWRkv4M9OBYy6uOFl8MR
pOLG7qWmonuNjQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:12 2025 by rpki-client