Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier: wCENexPpcf6MOjS158e3K3pSPfmuWDe9z4dlut9+SfQ=
Subject key identifier: 51:9F:33:7A:C4:61:FE:61:2A:71:C5:BB:17:B7:13:54:9D:76:BE:97
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial: 01988B0F988315E2AEBA5F65677CB6FF3D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number: 0237
Signing time: Fri 08 Aug 2025 19:01:51 +0000
Manifest this update: Fri 08 Aug 2025 19:01:51 +0000
Manifest next update: Sat 09 Aug 2025 19:01:51 +0000
Files and hashes: 1: 5mE6WJ9C1aVlmVoIkqUjqUKu6GA.roa (hash: iW1w4Z2DczRn4meCeEiq3QUgbwsTpwLpy6/um6q5LvU=)
2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: agh95VYJu/KWy5OwfeL7r/XeYXl0gZkatI2KIcHOJyw=)
3: UABXDisY7UIcuu729SEVeaTHi9g.roa (hash: OYLFe1eOiXjeIqPxbtFA6YEKDGNFPpOrX8ZmLcir4vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:98:83:15:e2:ae:ba:5f:65:67:7c:b6:ff:3d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Validity
Not Before: Aug 8 19:01:51 2025 GMT
Not After : Aug 9 19:01:51 2025 GMT
Subject: CN=519f337ac461fe612a71c5bb17b713549d76be97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:13:c1:78:ba:3b:af:3f:4a:26:2b:3a:53:
38:36:b7:41:b9:45:b5:79:0a:da:e4:3b:ac:80:13:
25:99:1c:ba:ad:66:3d:8e:ec:da:86:22:7a:d7:e5:
0d:b1:3d:bb:fa:ae:67:5b:4a:56:4b:b9:20:65:e6:
ed:4c:34:3a:16:01:41:a4:65:84:7e:c4:81:e0:d7:
3e:c8:d6:42:0b:31:5f:c0:94:9b:0c:29:63:6e:d5:
51:1c:b7:5e:5d:24:35:67:2c:6c:43:bb:e1:39:39:
56:d0:d4:f0:9f:7c:d7:69:c8:1c:1b:ff:a4:41:d1:
69:ae:c7:1d:d6:68:63:ad:c4:dd:54:8d:d6:e8:0a:
0f:b2:82:13:47:c6:98:2a:dd:7f:2d:32:9c:84:cd:
f0:19:89:08:36:5b:5e:4f:44:eb:06:53:ae:89:8b:
df:b2:63:01:4c:53:71:b7:ac:9b:97:28:5c:9b:bd:
2c:b8:f0:06:88:16:e3:e6:84:e5:52:44:0a:5c:61:
2d:57:4a:4a:8e:4b:cb:26:ab:4b:53:8b:24:41:77:
81:45:a2:81:a4:1c:8f:20:9d:47:e5:94:a6:d9:be:
7c:f9:f7:af:85:2e:fd:9f:82:c1:66:17:b8:7b:44:
98:b2:e8:34:d5:68:e7:9e:58:ad:66:d9:99:5f:33:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9F:33:7A:C4:61:FE:61:2A:71:C5:BB:17:B7:13:54:9D:76:BE:97
X509v3 Authority Key Identifier:
keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:af:f1:68:9c:40:e0:99:ba:4f:09:10:e8:64:aa:bd:6d:7e:
c9:39:bc:69:de:0a:6d:1f:33:07:77:3d:e7:ca:15:8e:26:34:
52:3b:97:e8:49:60:ed:c8:7e:e1:4b:b5:e0:20:05:3b:82:85:
a5:6b:b1:af:6f:50:37:32:c7:a5:5e:c9:6b:81:83:76:15:4e:
ab:6b:fb:1d:b9:0e:6a:f1:f7:80:58:bd:91:dc:81:93:bd:48:
c4:cc:b3:c8:f6:8a:5b:16:a8:3b:5d:04:76:72:ca:26:9a:0b:
e6:82:b3:e3:bf:a0:27:e1:0f:b9:19:f4:b1:7f:13:67:64:3f:
4b:3c:9f:a9:79:72:2c:76:64:25:09:3e:f8:ec:e7:b7:07:1c:
f9:2f:8d:25:1d:03:95:df:59:a1:4e:65:10:95:3c:4f:e1:0c:
71:00:61:94:d4:31:62:08:43:9c:8d:3c:34:aa:6c:c9:fe:82:
19:b1:e1:bd:46:bd:cc:04:89:36:ee:69:ec:8c:ea:e5:fc:e0:
e1:d7:12:60:88:65:56:81:00:a0:d9:2b:ba:4c:48:5c:b7:e2:
f2:7e:31:14:46:f6:d5:5f:9a:f0:44:d6:64:c0:9d:a5:7e:3a:
b2:f5:e0:e0:9b:52:f6:50:4c:b5:bf:3a:af:0a:46:53:a5:9e:
79:ab:c5:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLD5iDFeKuul9lZ3y2/z1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDBhNWNhMmNmMWJkOTEyZjQyY2M4Y2Y2NTFmNmZlODhl
NzI2YTQwHhcNMjUwODA4MTkwMTUxWhcNMjUwODA5MTkwMTUxWjAzMTEwLwYDVQQD
Eyg1MTlmMzM3YWM0NjFmZTYxMmE3MWM1YmIxN2I3MTM1NDlkNzZiZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5gTwXi6O68/SiYrOlM4NrdBuUW1
eQra5DusgBMlmRy6rWY9juzahiJ61+UNsT27+q5nW0pWS7kgZebtTDQ6FgFBpGWE
fsSB4Nc+yNZCCzFfwJSbDCljbtVRHLdeXSQ1ZyxsQ7vhOTlW0NTwn3zXacgcG/+k
QdFprscd1mhjrcTdVI3W6AoPsoITR8aYKt1/LTKchM3wGYkINlteT0TrBlOuiYvf
smMBTFNxt6yblyhcm70suPAGiBbj5oTlUkQKXGEtV0pKjkvLJqtLU4skQXeBRaKB
pByPIJ1H5ZSm2b58+fevhS79n4LBZhe4e0SYsug01WjnnlitZtmZXzOTCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGfM3rEYf5hKnHFuxe3E1Sddr6XMB8GA1UdIwQY
MBaAFCTQpcos8b2RL0LMjPZR9v6I5yakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQt
ZGIxM2NjM2YxZGI2LzEvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQtZGIxM2NjM2YxZGI2
LzEvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACK/xaJxA
4Jm6TwkQ6GSqvW1+yTm8ad4KbR8zB3c958oVjiY0UjuX6Elg7ch+4Uu14CAFO4KF
pWuxr29QNzLHpV7Ja4GDdhVOq2v7HbkOavH3gFi9kdyBk71IxMyzyPaKWxaoO10E
dnLKJpoL5oKz47+gJ+EPuRn0sX8TZ2Q/SzyfqXlyLHZkJQk++Ozntwcc+S+NJR0D
ld9ZoU5lEJU8T+EMcQBhlNQxYghDnI08NKpsyf6CGbHhvUa9zASJNu5p7Izq5fzg
4dcSYIhlVoEAoNkrukxIXLfi8n4xFEb21V+a8ETWZMCdpX46svXg4JtS9lBMtb86
rwpGU6WeeavFJQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:14:21 2025 by rpki-client