Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
File: ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft (raw, json)
Hash identifier: GN+IN/JiROMW/QGCZf7gbu4SWI7zWEpt5i0pwsBAhF4=
Subject key identifier: 62:6D:20:3C:EC:E5:83:B7:43:CB:62:57:0D:FD:75:FF:6A:56:39:A2
Authority key identifier: 8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
Certificate issuer: /CN=8dad9277ba91819eb734924c125f876a41659eab
Certificate serial: 019873E3BB679DDB5E82B0BCD9324436C4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
Manifest number: 0FCC
Signing time: Mon 04 Aug 2025 07:02:41 +0000
Manifest this update: Mon 04 Aug 2025 07:02:41 +0000
Manifest next update: Tue 05 Aug 2025 07:02:41 +0000
Files and hashes: 1: ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl (hash: YgMsuRGcjY77Rcyef3UU1FJq3oZQpzwnPa9QBT15HPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:bb:67:9d:db:5e:82:b0:bc:d9:32:44:36:c4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dad9277ba91819eb734924c125f876a41659eab
Validity
Not Before: Aug 4 07:02:41 2025 GMT
Not After : Aug 5 07:02:41 2025 GMT
Subject: CN=626d203cece583b743cb62570dfd75ff6a5639a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:79:57:36:9b:5e:7d:6e:a4:d0:16:4d:ab:
4d:ba:83:9a:75:8b:ba:c3:1e:9c:90:d7:6c:67:39:
af:e2:80:83:68:2f:0e:09:29:66:d1:91:5e:f0:53:
4d:b2:d5:bd:19:a5:e4:80:0f:03:fc:d2:5a:6d:2b:
52:f5:7f:d9:24:a9:be:eb:c2:e1:63:26:f7:a3:4f:
27:b1:b9:36:ad:22:57:f8:63:a5:34:fd:8d:18:ce:
38:c7:e8:0c:27:bd:e4:82:40:93:34:60:d4:c6:52:
22:20:36:b8:77:28:cd:9a:17:a8:a3:db:11:e3:c2:
3b:3c:06:0a:da:8c:e2:e7:39:ae:35:25:d4:6c:4c:
50:b7:90:d5:ba:3f:6a:3d:b1:ae:2c:82:08:17:9d:
9f:f4:eb:ae:5e:45:e7:5c:af:20:df:99:99:89:1a:
61:0d:b5:23:94:22:3e:8d:44:1e:11:40:20:a6:98:
6d:ec:52:e5:1d:1d:ef:7a:93:b6:02:15:c6:3b:1a:
2a:62:7f:01:81:15:f1:f1:c2:78:bd:e9:09:fb:fb:
02:ff:cd:88:e6:8a:88:36:b3:51:4c:96:94:26:b1:
bb:be:b4:25:27:40:ef:9c:f7:fb:f6:35:f5:4e:44:
24:07:aa:24:13:d1:15:02:a2:37:64:02:b3:47:03:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6D:20:3C:EC:E5:83:B7:43:CB:62:57:0D:FD:75:FF:6A:56:39:A2
X509v3 Authority Key Identifier:
keyid:8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d6:b9:39:b8:73:51:fa:35:72:97:29:3e:94:45:e2:cb:b5:
2b:5d:09:af:55:d0:df:8c:77:47:55:4c:b3:c6:74:11:27:66:
2b:06:eb:a7:02:df:92:c3:e8:2b:bb:9d:4a:e7:be:ec:8d:03:
27:55:30:28:6e:a1:f7:6d:a1:0b:66:a3:71:3a:d6:1c:98:e4:
43:86:4b:e2:06:0d:2d:68:43:1a:62:0a:0a:fa:25:fc:f9:ba:
f3:90:e8:4c:68:e0:c8:ef:28:cf:a0:de:5d:97:fc:fd:78:4d:
bf:0c:f5:33:c9:8e:2d:65:fe:1d:df:f6:74:46:c7:65:93:55:
84:86:25:68:8f:ed:ac:73:04:df:ba:d9:5a:e9:a9:dd:3c:f7:
53:c4:13:68:51:b7:91:56:c2:c6:40:e2:f8:54:c1:07:c6:26:
3e:96:5f:95:83:0e:53:0e:44:61:17:c9:8e:18:60:84:c4:a4:
49:09:e9:cd:5a:d9:24:1f:86:dd:05:01:97:33:d9:bc:84:c7:
d6:ed:2b:7c:22:1d:dc:43:02:2e:87:bd:29:93:91:0c:b6:c9:
41:48:cb:e8:fb:c6:cf:42:fd:0d:59:a1:4b:ef:a3:b9:f9:72:
e0:eb:e0:be:13:a4:e6:75:c9:34:a0:65:4e:db:5d:b6:25:da:
22:82:80:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz47tnndtegrC82TJENsSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYWQ5Mjc3YmE5MTgxOWViNzM0OTI0YzEyNWY4NzZhNDE2
NTllYWIwHhcNMjUwODA0MDcwMjQxWhcNMjUwODA1MDcwMjQxWjAzMTEwLwYDVQQD
Eyg2MjZkMjAzY2VjZTU4M2I3NDNjYjYyNTcwZGZkNzVmZjZhNTYzOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dx5VzabXn1upNAWTatNuoOadYu6
wx6ckNdsZzmv4oCDaC8OCSlm0ZFe8FNNstW9GaXkgA8D/NJabStS9X/ZJKm+68Lh
Yyb3o08nsbk2rSJX+GOlNP2NGM44x+gMJ73kgkCTNGDUxlIiIDa4dyjNmheoo9sR
48I7PAYK2ozi5zmuNSXUbExQt5DVuj9qPbGuLIIIF52f9OuuXkXnXK8g35mZiRph
DbUjlCI+jUQeEUAgppht7FLlHR3vepO2AhXGOxoqYn8BgRXx8cJ4vekJ+/sC/82I
5oqINrNRTJaUJrG7vrQlJ0DvnPf79jX1TkQkB6okE9EVAqI3ZAKzRwP1SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJtIDzs5YO3Q8tiVw39df9qVjmiMB8GA1UdIwQY
MBaAFI2tkne6kYGetzSSTBJfh2pBZZ6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lY2IxZGEtYjgzNS00M2ZhLWI2MDIt
OTE0OWQzNDhhNmM3LzEvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lY2IxZGEtYjgzNS00M2ZhLWI2MDItOTE0OWQzNDhhNmM3
LzEvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNa5Obhz
Ufo1cpcpPpRF4su1K10Jr1XQ34x3R1VMs8Z0ESdmKwbrpwLfksPoK7udSue+7I0D
J1UwKG6h922hC2ajcTrWHJjkQ4ZL4gYNLWhDGmIKCvol/Pm685DoTGjgyO8oz6De
XZf8/XhNvwz1M8mOLWX+Hd/2dEbHZZNVhIYlaI/trHME37rZWump3Tz3U8QTaFG3
kVbCxkDi+FTBB8YmPpZflYMOUw5EYRfJjhhghMSkSQnpzVrZJB+G3QUBlzPZvITH
1u0rfCId3EMCLoe9KZORDLbJQUjL6PvGz0L9DVmhS++jufly4OvgvhOk5nXJNKBl
TttdtiXaIoKALQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:22 2025 by rpki-client