
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File: JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier: d6xqIR03CcJsT1q5KOXhej5APzXsHeAOCROsEppjX9A=
Subject key identifier: 62:A3:15:D5:9F:BC:AA:C2:82:3F:C1:80:20:C4:32:AB:6C:9F:87:BD
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer: /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial: 01987450A8639D39F9799180661EC56E655E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 09:01:39 +0000
Manifest this update: Mon 04 Aug 2025 09:01:39 +0000
Manifest next update: Tue 05 Aug 2025 09:01:39 +0000
Files and hashes: 1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: dnVtZcKMyYfmfDVKZ3Lz5bulZxhPXwloYsQKUGYDw8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a8:63:9d:39:f9:79:91:80:66:1e:c5:6e:65:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Validity
Not Before: Aug 4 09:01:39 2025 GMT
Not After : Aug 5 09:01:39 2025 GMT
Subject: CN=62a315d59fbcaac2823fc18020c432ab6c9f87bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:7e:39:5d:0a:28:7d:9b:55:26:85:ef:e1:
a8:78:c9:79:4b:a7:6f:5d:a0:1b:e8:fd:14:b1:08:
b3:0b:2d:95:9e:2d:74:3e:76:83:ee:bf:51:af:ac:
d6:8d:9f:d6:6b:e2:4f:91:f2:4e:1d:84:97:8c:ed:
90:91:b1:c9:76:84:ee:73:94:e8:8b:d5:eb:6a:4a:
1c:df:ca:cf:20:6d:14:13:90:ba:a1:5c:2c:35:1f:
80:5d:f5:fc:98:0d:ee:9b:2a:41:4f:69:03:c7:63:
90:96:ae:45:b1:17:b8:e8:e1:08:09:de:bb:83:bf:
b5:3d:7f:b4:25:15:c0:f8:44:60:1f:5c:ab:1b:63:
16:2c:bc:61:65:d5:18:c2:65:bf:ec:ca:fb:05:ce:
af:87:5b:18:34:95:37:1a:92:b6:7b:f5:53:ef:ee:
64:36:6f:ce:53:df:2d:f5:66:f9:02:64:c2:fe:bc:
4b:37:0b:7c:91:b0:f5:c3:41:66:25:02:47:78:35:
9b:5e:6f:01:e8:46:8b:1a:6c:dd:47:0f:98:57:da:
e7:01:a1:f3:04:b1:92:3f:dc:2b:6e:7c:ec:fe:f8:
1a:43:2f:11:dd:05:88:9f:fb:da:cc:d7:d1:c3:9c:
f3:74:c1:bc:ba:ef:16:6a:66:e9:ed:63:03:13:af:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A3:15:D5:9F:BC:AA:C2:82:3F:C1:80:20:C4:32:AB:6C:9F:87:BD
X509v3 Authority Key Identifier:
keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8f:22:27:a0:ac:3b:b4:c7:2c:42:08:a0:e7:3c:28:fb:db:
e8:5a:83:14:67:be:31:29:ec:7c:9d:ec:59:95:38:80:15:b8:
fa:57:e4:71:a4:b1:5d:08:03:78:87:f1:a6:13:54:b4:15:7d:
19:8d:8e:4b:6c:11:59:93:3d:3d:97:29:44:8b:b5:d4:b4:b4:
70:35:9d:ce:82:f2:12:11:c6:ca:d3:ee:0f:22:2c:36:ef:c6:
45:2c:44:3b:f1:98:8f:50:25:0a:4c:c8:4e:79:10:50:0a:57:
3c:91:d9:76:42:4f:dd:a0:94:47:4b:c0:6b:48:d9:16:03:42:
21:89:a9:19:0d:87:fc:30:81:bd:70:8c:a9:b9:f8:a6:84:df:
c5:c8:28:91:7a:72:f0:b8:36:35:48:a7:a8:a3:97:33:94:cd:
68:ec:e9:9b:e2:13:4e:c1:a8:57:18:da:90:30:90:ba:29:d3:
76:f8:24:08:ac:11:ac:1c:90:65:24:d9:79:19:8f:fd:54:b6:
c3:b0:3c:16:cd:db:3d:99:e6:55:f9:47:ca:63:21:b2:1c:4c:
7b:d6:a1:a4:44:ca:c7:b3:1a:93:f5:cd:03:dd:d0:0b:8c:d6:
cd:7d:b8:e7:b1:07:65:10:1e:b3:a3:43:95:f2:95:05:f7:9e:
f5:bb:d9:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UKhjnTn5eZGAZh7FbmVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZTlhMWYxMmE4NGQ1MzI1MjYzN2ZmODVkNmViOGViMTYz
NjM5M2UwHhcNMjUwODA0MDkwMTM5WhcNMjUwODA1MDkwMTM5WjAzMTEwLwYDVQQD
Eyg2MmEzMTVkNTlmYmNhYWMyODIzZmMxODAyMGM0MzJhYjZjOWY4N2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9h+OV0KKH2bVSaF7+GoeMl5S6dv
XaAb6P0UsQizCy2Vni10PnaD7r9Rr6zWjZ/Wa+JPkfJOHYSXjO2QkbHJdoTuc5To
i9Xrakoc38rPIG0UE5C6oVwsNR+AXfX8mA3umypBT2kDx2OQlq5FsRe46OEICd67
g7+1PX+0JRXA+ERgH1yrG2MWLLxhZdUYwmW/7Mr7Bc6vh1sYNJU3GpK2e/VT7+5k
Nm/OU98t9Wb5AmTC/rxLNwt8kbD1w0FmJQJHeDWbXm8B6EaLGmzdRw+YV9rnAaHz
BLGSP9wrbnzs/vgaQy8R3QWIn/vazNfRw5zzdMG8uu8Wambp7WMDE6/zKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKjFdWfvKrCgj/BgCDEMqtsn4e9MB8GA1UdIwQY
MBaAFCTpofEqhNUyUmN/+F1uuOsWNjk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk9taDhTcUUxVEpTWTNfNFhXNjQ2eFkyT1Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iNDk1YjUtZmJmYS00MTE4LTg2MmYt
YzJjOTE2ZTQzOTI1LzEvSk9taDhTcUUxVEpTWTNfNFhXNjQ2eFkyT1Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9iNDk1YjUtZmJmYS00MTE4LTg2MmYtYzJjOTE2ZTQzOTI1
LzEvSk9taDhTcUUxVEpTWTNfNFhXNjQ2eFkyT1Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALY8iJ6Cs
O7THLEIIoOc8KPvb6FqDFGe+MSnsfJ3sWZU4gBW4+lfkcaSxXQgDeIfxphNUtBV9
GY2OS2wRWZM9PZcpRIu11LS0cDWdzoLyEhHGytPuDyIsNu/GRSxEO/GYj1AlCkzI
TnkQUApXPJHZdkJP3aCUR0vAa0jZFgNCIYmpGQ2H/DCBvXCMqbn4poTfxcgokXpy
8Lg2NUinqKOXM5TNaOzpm+ITTsGoVxjakDCQuinTdvgkCKwRrByQZSTZeRmP/VS2
w7A8Fs3bPZnmVflHymMhshxMe9ahpETKx7Mak/XNA93QC4zWzX2457EHZRAes6ND
lfKVBfee9bvZHA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:09 2025 by rpki-client