Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: H3Iq8Q2jdOslpw8ROSoLUCka412vsFsA88sXnKvsIeY=
Subject key identifier: 32:B6:65:C0:33:9B:42:AE:7B:40:7F:15:10:65:5C:0D:B9:81:64:5E
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 01977C0BC1215266B0BFB9CA62959C825F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 104D
Signing time: Tue 17 Jun 2025 04:00:34 +0000
Manifest this update: Tue 17 Jun 2025 04:00:34 +0000
Manifest next update: Wed 18 Jun 2025 04:00:34 +0000
Files and hashes: 1: As6vwkWGZxruqh4uQQnrE0_5Wkc.roa (hash: +uKniDECqLf36Ns+Ibc2IgSroQKNM4uwIuCwreWx2Qo=)
2: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: 4kPsV5kztqGMluX1k6P9QGwSitiLLOxEa/EyfvYRSVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:0b:c1:21:52:66:b0:bf:b9:ca:62:95:9c:82:5f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: Jun 17 04:00:34 2025 GMT
Not After : Jun 18 04:00:34 2025 GMT
Subject: CN=32b665c0339b42ae7b407f1510655c0db981645e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1e:be:de:04:68:56:38:c5:96:33:d5:97:ee:
96:d7:37:f4:57:7b:a1:e9:97:91:f6:ff:95:15:48:
46:f7:c9:7d:7e:85:6c:df:fa:d5:7e:dc:77:47:3c:
bf:7e:44:d2:87:c6:eb:5c:99:71:41:20:f0:26:6f:
9d:79:83:d1:ae:ea:2c:fa:50:28:32:5f:e1:e1:48:
11:74:ee:08:c5:7d:03:68:7f:74:6e:07:30:2f:ce:
63:03:41:53:74:7d:96:79:f1:19:6c:16:18:24:7a:
3c:75:9e:a5:75:20:02:2a:fb:81:da:d7:b3:9a:a0:
ee:ea:ca:5b:ef:86:29:d2:fe:a6:28:cc:15:f2:e1:
cd:c2:0d:a1:52:59:7b:c9:17:da:6c:c5:91:78:22:
80:9b:71:63:df:55:98:1f:bf:98:cb:4e:93:8f:e9:
98:ba:6c:bc:50:ba:b4:ed:d4:bd:cd:9e:5f:fe:dd:
0c:61:8c:15:88:ca:2f:ad:17:28:24:ac:e8:49:93:
0a:68:e0:02:b6:8d:6e:25:47:b3:5c:4a:a3:f7:23:
73:d4:6e:9e:9f:be:e1:c2:bc:3f:87:dd:9e:9c:aa:
76:0c:a3:da:92:a1:80:39:fe:7f:60:96:b5:90:73:
12:c5:38:d1:77:80:d7:12:a4:8b:97:1f:17:d6:e7:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B6:65:C0:33:9B:42:AE:7B:40:7F:15:10:65:5C:0D:B9:81:64:5E
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0f:b2:2a:f1:84:ec:d1:f2:85:e2:e4:e1:c4:d3:f4:fc:c8:
f1:d6:7f:59:42:84:1d:a0:c0:19:c6:cd:aa:ad:bc:ca:bf:34:
8a:69:19:b6:a8:a8:a8:5f:5c:a2:58:e5:a4:4e:15:6b:db:7b:
92:6f:e1:e3:6b:f3:93:fc:15:6f:36:cb:67:1c:f9:99:5d:92:
54:e2:d2:35:f5:8c:84:c6:8e:6c:02:85:0f:78:df:df:88:e0:
72:3e:93:da:f0:35:aa:22:c5:6d:cc:f7:6c:9e:09:17:1f:eb:
95:32:a7:37:e9:24:99:bd:2b:97:92:80:a2:10:d7:e4:f9:6c:
3f:18:33:ab:a7:7a:64:12:28:77:22:85:cb:a8:e2:5d:05:14:
db:01:c1:35:39:a9:10:6c:e4:9b:bf:de:ce:14:f8:ac:c0:bc:
dd:ba:a5:de:30:d8:1e:31:85:b4:17:a7:d5:44:99:34:91:8d:
b3:c4:1f:9f:b4:29:56:8d:45:73:e1:7d:fe:d3:34:4f:14:62:
2b:e4:d1:17:7e:e0:3a:ec:d4:ba:5a:73:7b:38:4f:48:5d:25:
b8:31:26:7e:2e:9c:77:dd:0f:6f:c5:13:f2:75:13:01:b3:fb:
59:9d:42:f4:39:37:bb:39:a0:b5:1e:42:d5:84:40:58:83:ce:
1e:7e:e4:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8C8EhUmawv7nKYpWcgl9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTBlNGQxMTgyNTE1YzQ3ZGYzNmExMDAxYjdmNjgxZTJk
Y2Y0MTQwHhcNMjUwNjE3MDQwMDM0WhcNMjUwNjE4MDQwMDM0WjAzMTEwLwYDVQQD
EygzMmI2NjVjMDMzOWI0MmFlN2I0MDdmMTUxMDY1NWMwZGI5ODE2NDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9h6+3gRoVjjFljPVl+6W1zf0V3uh
6ZeR9v+VFUhG98l9foVs3/rVftx3Rzy/fkTSh8brXJlxQSDwJm+deYPRruos+lAo
Ml/h4UgRdO4IxX0DaH90bgcwL85jA0FTdH2WefEZbBYYJHo8dZ6ldSACKvuB2tez
mqDu6spb74Yp0v6mKMwV8uHNwg2hUll7yRfabMWReCKAm3Fj31WYH7+Yy06Tj+mY
umy8ULq07dS9zZ5f/t0MYYwViMovrRcoJKzoSZMKaOACto1uJUezXEqj9yNz1G6e
n77hwrw/h92enKp2DKPakqGAOf5/YJa1kHMSxTjRd4DXEqSLlx8X1ufiBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK2ZcAzm0Kue0B/FRBlXA25gWReMB8GA1UdIwQY
MBaAFCQQ5NEYJRXEffNqEAG39oHi3PQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMt
YTI5OWIwMjJkODRlLzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMtYTI5OWIwMjJkODRl
LzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANA+yKvGE
7NHyheLk4cTT9PzI8dZ/WUKEHaDAGcbNqq28yr80imkZtqioqF9coljlpE4Va9t7
km/h42vzk/wVbzbLZxz5mV2SVOLSNfWMhMaObAKFD3jf34jgcj6T2vA1qiLFbcz3
bJ4JFx/rlTKnN+kkmb0rl5KAohDX5PlsPxgzq6d6ZBIodyKFy6jiXQUU2wHBNTmp
EGzkm7/ezhT4rMC83bql3jDYHjGFtBen1USZNJGNs8Qfn7QpVo1Fc+F9/tM0TxRi
K+TRF37gOuzUulpzezhPSF0luDEmfi6cd90Pb8UT8nUTAbP7WZ1C9Dk3uzmgtR5C
1YRAWIPOHn7k5A==
-----END CERTIFICATE-----
Generated at Tue Jun 17 13:26:17 2025 by rpki-client