Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
File: JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json)
Hash identifier: FsybT56UD3LfLnU758L4VFxHyZD8N/DKmGDl0AkwLlo=
Subject key identifier: D1:ED:BD:70:BD:0D:27:6F:C6:1D:F3:AC:6A:5C:D5:88:B2:03:B8:80
Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
Certificate issuer: /CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Certificate serial: 01978660AD750F46E5B92D9B2CDF0A52D274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
Manifest number: 0AF2
Signing time: Thu 19 Jun 2025 04:09:32 +0000
Manifest this update: Thu 19 Jun 2025 04:09:32 +0000
Manifest next update: Fri 20 Jun 2025 04:09:32 +0000
Files and hashes: 1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: e8JjSiVK3DSm/rXt+GcqYBNhH9LHHIu/Ui5rQO4TUe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 04:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:60:ad:75:0f:46:e5:b9:2d:9b:2c:df:0a:52:d2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Validity
Not Before: Jun 19 04:09:32 2025 GMT
Not After : Jun 20 04:09:32 2025 GMT
Subject: CN=d1edbd70bd0d276fc61df3ac6a5cd588b203b880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:37:d3:36:c9:a6:e7:8b:d3:c4:03:f2:85:
64:ed:de:8b:29:f3:43:40:bb:52:d2:93:05:5a:69:
01:e4:5b:14:8b:39:ac:1d:9d:23:5d:18:67:4e:e7:
01:df:3c:40:76:ba:f2:75:0f:5f:fb:31:6e:2c:a6:
59:31:28:5f:e8:46:1d:74:5f:4e:9b:9a:68:fe:4c:
dc:9a:e6:f4:a3:ab:e5:d6:fa:c0:62:10:19:3b:d3:
e8:1f:e5:94:61:17:31:27:fc:32:be:d7:25:b0:64:
cf:98:02:27:7a:4c:70:dc:30:9e:dd:54:ed:01:b4:
da:7d:27:9e:d7:91:a4:b2:42:16:f2:90:0e:17:14:
c3:f2:89:0c:74:de:c3:6c:9f:2e:28:f5:c2:f8:cd:
62:3e:29:4a:28:c8:d6:20:62:5e:51:1f:12:61:ef:
0b:36:ff:a6:e3:c0:4f:c1:ab:73:1a:01:cf:a5:50:
8e:7c:ba:35:1f:5f:6f:23:d0:c9:47:e2:e0:ef:ce:
4b:fa:06:99:d8:c1:08:1e:09:64:5c:ea:9b:cd:46:
1b:6b:ca:dd:c7:6e:b2:6c:7f:ff:29:24:e4:7c:61:
1b:25:8d:45:d5:33:66:50:a3:41:61:62:20:a3:05:
e9:71:3c:1e:a8:eb:5e:5d:69:13:46:15:64:b7:df:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:ED:BD:70:BD:0D:27:6F:C6:1D:F3:AC:6A:5C:D5:88:B2:03:B8:80
X509v3 Authority Key Identifier:
keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c6:0e:74:e9:4f:b6:a5:33:c8:fe:b2:41:5e:96:7e:8a:fc:
7d:0c:e1:2d:99:08:0e:30:d5:1d:03:07:f4:25:81:fd:21:84:
cc:3e:b2:c6:68:16:be:94:d8:07:1e:d9:e4:f9:a1:0e:c1:81:
fb:b2:47:98:a9:ed:7e:46:7a:95:f2:ea:14:ae:46:d9:0b:68:
7c:29:71:57:42:5b:bc:93:ca:8c:c2:c9:58:69:c9:74:8f:74:
c6:bd:e7:6c:ca:a1:1d:f0:44:26:35:bb:f6:2e:56:42:52:ec:
44:68:c7:96:02:a3:2e:a7:03:8e:32:9a:1e:15:82:18:44:53:
da:ec:bc:22:29:47:01:0e:50:db:8b:91:7e:f5:44:bd:69:c4:
03:0f:6f:8d:37:59:03:e1:aa:8e:c3:79:4e:f7:13:2d:86:5f:
f1:21:c7:6b:eb:b0:af:58:0b:49:08:0d:e3:3d:48:30:b8:bc:
ff:6d:a2:8c:84:d3:24:83:69:14:a8:f7:33:e0:30:26:0f:f2:
35:04:60:7d:08:a3:78:12:d4:a3:1f:eb:ce:15:71:ae:9d:67:
29:7d:7c:7f:15:d5:db:1e:c3:d7:a3:81:43:78:4d:b2:e7:af:
26:1e:eb:3d:71:6f:53:99:a7:99:71:5c:11:fa:cb:e9:0c:82:
66:79:b7:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeGYK11D0bluS2bLN8KUtJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NDQzMDY2ODBmOGRkYjhiOTg5MGQzMGY1MDdlNjE5ZTQ0
MTVkM2UwHhcNMjUwNjE5MDQwOTMyWhcNMjUwNjIwMDQwOTMyWjAzMTEwLwYDVQQD
EyhkMWVkYmQ3MGJkMGQyNzZmYzYxZGYzYWM2YTVjZDU4OGIyMDNiODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ030zbJpueL08QD8oVk7d6LKfND
QLtS0pMFWmkB5FsUizmsHZ0jXRhnTucB3zxAdrrydQ9f+zFuLKZZMShf6EYddF9O
m5po/kzcmub0o6vl1vrAYhAZO9PoH+WUYRcxJ/wyvtclsGTPmAInekxw3DCe3VTt
AbTafSee15GkskIW8pAOFxTD8okMdN7DbJ8uKPXC+M1iPilKKMjWIGJeUR8SYe8L
Nv+m48BPwatzGgHPpVCOfLo1H19vI9DJR+Lg785L+gaZ2MEIHglkXOqbzUYba8rd
x26ybH//KSTkfGEbJY1F1TNmUKNBYWIgowXpcTweqOteXWkTRhVkt9+uEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHtvXC9DSdvxh3zrGpc1YiyA7iAMB8GA1UdIwQY
MBaAFCREMGaA+N24uYkNMPUH5hnkQV0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2Nzgt
NzY0NjczMWM2NWRiLzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2NzgtNzY0NjczMWM2NWRi
LzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8YOdOlP
tqUzyP6yQV6Wfor8fQzhLZkIDjDVHQMH9CWB/SGEzD6yxmgWvpTYBx7Z5PmhDsGB
+7JHmKntfkZ6lfLqFK5G2QtofClxV0JbvJPKjMLJWGnJdI90xr3nbMqhHfBEJjW7
9i5WQlLsRGjHlgKjLqcDjjKaHhWCGERT2uy8IilHAQ5Q24uRfvVEvWnEAw9vjTdZ
A+GqjsN5TvcTLYZf8SHHa+uwr1gLSQgN4z1IMLi8/22ijITTJINpFKj3M+AwJg/y
NQRgfQijeBLUox/rzhVxrp1nKX18fxXV2x7D16OBQ3hNsuevJh7rPXFvU5mnmXFc
EfrL6QyCZnm3lg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 14:26:35 2025 by rpki-client