Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
File: jjh1qArSM-nChxWYg3H3fuw_Ygw.mft (raw, json)
Hash identifier: o4dzdPzIqbtB8mqzpn66uKeWdqk3R6hzxfjuo6u8qpU=
Subject key identifier: 14:DD:6B:DB:93:7F:61:94:1B:BD:22:6E:4E:61:8C:73:3B:78:23:9B
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial: 01978E7F6A5634BD507A1A2DD318BD843A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
Manifest number: 15A6
Signing time: Fri 20 Jun 2025 18:00:04 +0000
Manifest this update: Fri 20 Jun 2025 18:00:04 +0000
Manifest next update: Sat 21 Jun 2025 18:00:04 +0000
Files and hashes: 1: 0YS8AQvr8ByNBG7KTwD6sIOGH8A.roa (hash: k8sO4Fn23jLZke1eiUIEXbtdN/A5BluF8j3tNYbaMCM=)
2: jjh1qArSM-nChxWYg3H3fuw_Ygw.crl (hash: 5T3oKOu7z75DlCMmcj6clVb2X7KeKyAelKArwGgA5OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:7f:6a:56:34:bd:50:7a:1a:2d:d3:18:bd:84:3a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
Validity
Not Before: Jun 20 18:00:04 2025 GMT
Not After : Jun 21 18:00:04 2025 GMT
Subject: CN=14dd6bdb937f61941bbd226e4e618c733b78239b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:de:8f:c4:a4:10:52:a5:e5:bf:b5:a6:9e:
a9:26:31:45:c3:43:0e:ba:0b:46:9f:60:d8:6a:18:
1c:1a:08:79:72:e4:c1:e3:dd:05:d4:74:fc:e9:35:
5c:24:d1:52:4e:ca:34:5c:42:ed:cb:ea:8e:b6:c0:
ab:55:5d:41:f2:51:a5:cc:a9:1e:4f:7a:7d:5f:93:
3c:96:19:40:70:67:e2:7c:63:71:3d:62:c5:e1:e2:
f8:a9:42:e3:96:9d:e8:be:a2:37:86:45:d7:c9:b0:
c2:d7:26:0c:aa:89:a0:3c:65:d0:00:53:f8:2c:90:
d3:ef:3e:87:29:d4:eb:a0:a7:55:dc:91:8c:0c:22:
f6:d4:45:94:69:f6:97:c6:e7:11:b3:82:5b:61:71:
b4:87:f1:07:d8:eb:7b:f3:0f:76:42:df:b8:c8:bf:
a9:11:3c:6d:dd:98:58:e0:90:19:7f:1c:06:f7:89:
31:00:a8:cc:33:1c:7b:d9:0a:9a:53:57:1e:a5:8d:
03:dd:d7:12:1f:0e:6a:14:d7:0f:b8:95:7b:3a:5e:
c9:ee:35:e8:6d:77:90:e7:45:60:01:70:17:68:b2:
84:71:d4:2e:b7:1a:49:20:a4:71:dd:82:35:34:3a:
4a:bc:70:7d:fe:74:d9:b2:53:11:29:e7:2f:0f:e4:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DD:6B:DB:93:7F:61:94:1B:BD:22:6E:4E:61:8C:73:3B:78:23:9B
X509v3 Authority Key Identifier:
keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f5:a4:b2:2d:3e:e7:5e:22:56:b5:a0:3a:3b:7d:c5:ff:10:
97:59:9f:7e:4b:50:59:46:a2:15:d0:b5:9c:a1:d3:68:3b:c8:
f6:32:0f:b2:02:00:fd:2a:af:a7:de:2d:fd:e2:3d:b9:6f:29:
cd:51:7a:2d:6b:1c:04:e0:90:40:d5:aa:68:36:c9:75:00:1b:
1d:91:33:7e:b6:2f:e3:1c:a2:91:80:21:5d:b9:58:a0:0f:3d:
e5:f9:31:ec:14:dd:70:ea:55:8d:25:d6:bb:01:d5:31:b3:23:
c5:5e:01:97:3c:3d:80:22:c8:6b:0b:00:c9:b2:48:f6:a3:d7:
27:d5:ad:ce:82:9d:dc:db:2b:f1:4f:36:4d:b9:f4:40:46:d9:
d1:c9:26:86:52:17:d0:31:9a:3e:ef:9d:d1:b8:fe:17:18:b9:
2b:c6:d0:fd:f2:67:e5:70:14:41:29:27:96:f9:ec:51:95:70:
e9:a4:1a:3a:b2:93:36:bf:fa:24:ea:c7:b1:a5:8f:2c:e4:9c:
97:77:ec:ef:d1:6b:df:c1:5c:8e:f2:8c:f5:5a:54:1e:a9:98:
e3:7a:9a:f4:7d:f6:20:a9:ac:2d:9b:18:6c:c1:49:61:8a:65:
40:94:a5:d1:e8:77:60:b0:9b:59:ec:07:fa:e6:7e:a1:a6:a7:
d4:07:7b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeOf2pWNL1Qehot0xi9hDozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzg3NWE4MGFkMjMzZTljMjg3MTU5ODgzNzFmNzdlZWMz
ZjYyMGMwHhcNMjUwNjIwMTgwMDA0WhcNMjUwNjIxMTgwMDA0WjAzMTEwLwYDVQQD
EygxNGRkNmJkYjkzN2Y2MTk0MWJiZDIyNmU0ZTYxOGM3MzNiNzgyMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGbej8SkEFKl5b+1pp6pJjFFw0MO
ugtGn2DYahgcGgh5cuTB490F1HT86TVcJNFSTso0XELty+qOtsCrVV1B8lGlzKke
T3p9X5M8lhlAcGfifGNxPWLF4eL4qULjlp3ovqI3hkXXybDC1yYMqomgPGXQAFP4
LJDT7z6HKdTroKdV3JGMDCL21EWUafaXxucRs4JbYXG0h/EH2Ot78w92Qt+4yL+p
ETxt3ZhY4JAZfxwG94kxAKjMMxx72QqaU1cepY0D3dcSHw5qFNcPuJV7Ol7J7jXo
bXeQ50VgAXAXaLKEcdQutxpJIKRx3YI1NDpKvHB9/nTZslMRKecvD+R1ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTda9uTf2GUG70ibk5hjHM7eCObMB8GA1UdIwQY
MBaAFI44dagK0jPpwocVmINx937sP2IMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampoMXFBclNNLW5DaHhXWWczSDNmdXdfWWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NjY1OTktM2ZhMC00MjMwLWJhOWEt
MTljNGZmMTg3N2JiLzEvampoMXFBclNNLW5DaHhXWWczSDNmdXdfWWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84NjY1OTktM2ZhMC00MjMwLWJhOWEtMTljNGZmMTg3N2Ji
LzEvampoMXFBclNNLW5DaHhXWWczSDNmdXdfWWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPWksi0+
514iVrWgOjt9xf8Ql1mffktQWUaiFdC1nKHTaDvI9jIPsgIA/Sqvp94t/eI9uW8p
zVF6LWscBOCQQNWqaDbJdQAbHZEzfrYv4xyikYAhXblYoA895fkx7BTdcOpVjSXW
uwHVMbMjxV4Blzw9gCLIawsAybJI9qPXJ9WtzoKd3Nsr8U82Tbn0QEbZ0ckmhlIX
0DGaPu+d0bj+Fxi5K8bQ/fJn5XAUQSknlvnsUZVw6aQaOrKTNr/6JOrHsaWPLOSc
l3fs79Fr38FcjvKM9VpUHqmY43qa9H32IKmsLZsYbMFJYYplQJSl0eh3YLCbWewH
+uZ+oaan1Ad7uw==
-----END CERTIFICATE-----
Generated at Fri Jun 20 21:56:25 2025 by rpki-client