Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
File: JwBs1Oq8VbNskwifFND6bg-gzG0.mft (raw, json)
Hash identifier: QSUXNTPClW2CiUyy/FAyivHH2LXFcqcHnoy79akfowk=
Subject key identifier: B1:19:D1:D0:8C:C4:37:A3:0F:20:A2:B4:E7:DD:EA:AA:CD:C4:A0:45
Authority key identifier: 27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
Certificate issuer: /CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Certificate serial: 019787342DB8BA2B9EA5EE961A1FD1C84F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
Manifest number: 109D
Signing time: Thu 19 Jun 2025 08:00:33 +0000
Manifest this update: Thu 19 Jun 2025 08:00:33 +0000
Manifest next update: Fri 20 Jun 2025 08:00:33 +0000
Files and hashes: 1: JwBs1Oq8VbNskwifFND6bg-gzG0.crl (hash: MYvB4PjodWBbhwbXy/+vjRv3AFPqdUSiuA2n4iOZdsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:34:2d:b8:ba:2b:9e:a5:ee:96:1a:1f:d1:c8:4f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Validity
Not Before: Jun 19 08:00:33 2025 GMT
Not After : Jun 20 08:00:33 2025 GMT
Subject: CN=b119d1d08cc437a30f20a2b4e7ddeaaacdc4a045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c3:eb:b9:d8:4a:27:62:e3:f4:13:bc:3c:c4:
de:b3:50:1f:74:75:dd:7b:ab:0f:8e:40:f2:95:5d:
e5:67:1f:6d:dd:b7:9f:25:3a:f3:e9:c5:53:6b:50:
d0:fe:01:b6:e7:c1:7f:d2:d5:f7:25:56:3e:0e:7d:
47:2e:d7:1c:bc:3a:60:d1:5b:64:fd:a9:13:3c:3f:
db:0b:8a:07:dd:b9:4a:99:8e:c9:a1:69:d7:53:e0:
7b:89:b2:d8:36:9e:be:d5:4a:37:11:3a:b6:44:2d:
91:3e:d6:4b:5a:aa:6e:c9:55:82:10:7e:59:ac:53:
d0:0c:37:3c:78:86:db:74:20:60:f7:a4:23:7d:06:
52:43:fe:d7:55:ce:96:f8:bf:77:65:12:44:e4:3f:
77:cf:de:f9:5b:46:89:68:c8:6a:80:46:e8:d5:94:
f4:16:f8:5b:30:a3:6e:e9:cf:d7:84:f6:aa:af:ed:
6a:2e:d2:1a:39:1d:bb:c7:d5:e9:6a:6f:f1:55:b7:
e5:3e:54:2e:5f:57:63:72:3f:18:fd:53:01:6a:8c:
de:a4:ab:bb:b7:47:99:2c:e0:1e:96:97:57:a2:55:
6a:89:67:37:e8:38:8f:0d:04:20:24:f3:63:1e:5b:
63:75:cb:83:9a:1c:d1:33:c4:3c:2b:dd:3d:c5:12:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:19:D1:D0:8C:C4:37:A3:0F:20:A2:B4:E7:DD:EA:AA:CD:C4:A0:45
X509v3 Authority Key Identifier:
keyid:27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:29:e5:3e:7a:3e:23:a7:e4:49:3e:db:fa:1a:e3:14:71:7f:
b8:08:13:21:02:fb:e1:50:00:83:b9:e9:1b:2c:26:4a:e8:cb:
8f:76:2b:19:d3:ea:33:92:f9:bb:0d:d4:fa:2e:c3:d3:96:8c:
52:a7:59:bb:8e:5f:97:d0:a9:7e:02:73:69:ee:bb:33:97:cd:
4d:d5:1b:62:1b:03:ae:39:d5:ad:64:a3:30:99:08:29:ac:e1:
9e:31:54:d8:f5:c0:8e:27:f7:e1:28:01:85:59:56:df:13:98:
8c:89:a0:ee:ac:10:5e:ed:76:fa:7d:c1:25:04:dc:3f:8e:f8:
cc:18:74:63:14:5a:7d:06:48:0d:c2:39:4a:a6:e3:7b:28:d0:
66:39:12:b9:bf:16:ff:de:b2:ee:5e:f3:6c:a6:b8:4f:bc:e6:
78:ba:e7:f3:3c:5f:93:1c:58:5b:30:2a:d3:55:47:45:4e:92:
6c:d8:88:4b:06:9c:ce:52:c6:5f:14:06:66:28:91:d6:9d:b2:
ae:de:1b:8f:77:1b:19:12:af:ea:09:53:23:fc:b1:b5:7b:21:
4b:b3:00:79:fb:49:3a:3a:25:ae:0b:ac:8b:cd:be:3c:00:95:
a6:61:fe:a9:7c:91:f0:ba:78:2f:53:08:43:f7:57:07:32:94:
8d:f8:b2:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeHNC24uiuepe6WGh/RyE+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDA2Y2Q0ZWFiYzU1YjM2YzkzMDg5ZjE0ZDBmYTZlMGZh
MGNjNmQwHhcNMjUwNjE5MDgwMDMzWhcNMjUwNjIwMDgwMDMzWjAzMTEwLwYDVQQD
EyhiMTE5ZDFkMDhjYzQzN2EzMGYyMGEyYjRlN2RkZWFhYWNkYzRhMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8PrudhKJ2Lj9BO8PMTes1AfdHXd
e6sPjkDylV3lZx9t3befJTrz6cVTa1DQ/gG258F/0tX3JVY+Dn1HLtccvDpg0Vtk
/akTPD/bC4oH3blKmY7JoWnXU+B7ibLYNp6+1Uo3ETq2RC2RPtZLWqpuyVWCEH5Z
rFPQDDc8eIbbdCBg96QjfQZSQ/7XVc6W+L93ZRJE5D93z975W0aJaMhqgEbo1ZT0
FvhbMKNu6c/XhPaqr+1qLtIaOR27x9Xpam/xVbflPlQuX1djcj8Y/VMBaozepKu7
t0eZLOAelpdXolVqiWc36DiPDQQgJPNjHltjdcuDmhzRM8Q8K909xRKPFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEZ0dCMxDejDyCitOfd6qrNxKBFMB8GA1UdIwQY
MBaAFCcAbNTqvFWzbJMInxTQ+m4PoMxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndCczFPcThWYk5za3dpZkZORDZiZy1nekcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNTcwODEtZTE2Zi00N2NlLWJkOTgt
ZGNlMTI4MDIyYWM0LzEvSndCczFPcThWYk5za3dpZkZORDZiZy1nekcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNTcwODEtZTE2Zi00N2NlLWJkOTgtZGNlMTI4MDIyYWM0
LzEvSndCczFPcThWYk5za3dpZkZORDZiZy1nekcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSnlPno+
I6fkST7b+hrjFHF/uAgTIQL74VAAg7npGywmSujLj3YrGdPqM5L5uw3U+i7D05aM
UqdZu45fl9CpfgJzae67M5fNTdUbYhsDrjnVrWSjMJkIKazhnjFU2PXAjif34SgB
hVlW3xOYjImg7qwQXu12+n3BJQTcP474zBh0YxRafQZIDcI5SqbjeyjQZjkSub8W
/96y7l7zbKa4T7zmeLrn8zxfkxxYWzAq01VHRU6SbNiISwaczlLGXxQGZiiR1p2y
rt4bj3cbGRKv6glTI/yxtXshS7MAeftJOjolrgusi82+PACVpmH+qXyR8Lp4L1MI
Q/dXBzKUjfiyHw==
-----END CERTIFICATE-----
Generated at Thu Jun 19 17:45:54 2025 by rpki-client