Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
File: JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft (raw, json)
Hash identifier: ymrYaWBwDWw/t5nm9YUZv+EciOI+i+bzPGXEY+m+7mc=
Subject key identifier: D1:6E:4E:05:90:65:AC:2C:9E:A1:B8:CB:99:F6:A1:41:EA:F6:AD:10
Authority key identifier: 27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
Certificate issuer: /CN=27339409458cfc2bbc30bb19aee50631855b75e6
Certificate serial: 019873E2E88F201898589AB69664115B1EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 07:01:47 +0000
Manifest this update: Mon 04 Aug 2025 07:01:47 +0000
Manifest next update: Tue 05 Aug 2025 07:01:47 +0000
Files and hashes: 1: JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl (hash: WHhuDlSkM+d/sif3XCeeD1TS2uML4PX/pE8rqX3HJig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e8:8f:20:18:98:58:9a:b6:96:64:11:5b:1e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27339409458cfc2bbc30bb19aee50631855b75e6
Validity
Not Before: Aug 4 07:01:47 2025 GMT
Not After : Aug 5 07:01:47 2025 GMT
Subject: CN=d16e4e059065ac2c9ea1b8cb99f6a141eaf6ad10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:87:db:79:bc:67:66:fc:4f:8a:95:2b:ef:
61:9a:6e:ac:f8:ec:40:66:5d:f5:ac:c8:58:47:16:
41:05:50:0d:85:61:c8:0a:e3:d9:b6:af:76:86:09:
f2:90:e4:43:f9:aa:5a:2d:48:ed:c5:79:a5:c4:91:
75:ad:b6:b5:d4:23:21:b1:1e:fe:07:34:68:4a:25:
bb:a9:f4:9d:e9:b7:f1:cc:d1:6a:bb:4e:01:8a:18:
bc:44:6c:eb:62:b2:c9:89:3c:bc:43:48:d8:ae:70:
56:9c:aa:d7:27:4c:1b:f5:c1:b3:36:a7:cf:d4:fa:
6f:0a:27:fc:b9:7e:5e:7a:fc:d7:c8:1b:89:1f:9f:
08:07:18:81:d5:f4:89:2e:63:91:64:8b:a3:09:a6:
5c:c3:d6:54:8b:2d:32:9c:22:62:e5:cc:95:a9:f6:
72:68:2d:2d:25:53:ba:9a:16:1d:a5:9c:8e:73:c5:
41:79:e9:49:7f:31:7e:12:5b:4d:1a:18:60:3a:3b:
90:f4:1b:8c:7b:ca:8d:d6:48:39:11:36:10:a6:7b:
b1:71:3a:c1:52:84:9b:0a:7c:fb:6f:be:86:de:5e:
b0:39:f4:bd:25:b5:8f:ea:ec:49:5c:c5:7b:5a:3c:
a9:d5:80:9b:f5:cb:67:ff:78:e5:bd:41:41:d5:f2:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6E:4E:05:90:65:AC:2C:9E:A1:B8:CB:99:F6:A1:41:EA:F6:AD:10
X509v3 Authority Key Identifier:
keyid:27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:10:be:69:c4:b8:84:7d:d3:1d:61:67:f1:11:15:57:98:6e:
93:5c:50:48:65:6b:26:4d:03:9f:ce:9e:94:77:79:dd:4a:41:
95:36:09:55:37:6c:6d:94:a0:96:fe:ad:03:48:7a:1b:8d:69:
45:ba:e2:62:4f:9d:e8:eb:42:c5:e3:0d:1a:d4:1d:02:f8:d2:
3b:00:2e:22:f2:5b:d5:de:4e:d1:b9:7b:72:ef:8b:6c:18:ac:
a4:42:9c:58:90:96:27:96:c5:28:fd:a0:5a:4b:6b:1c:93:09:
72:d5:d6:3a:fc:5e:7e:c3:0b:66:aa:e4:ee:c4:c0:da:4f:08:
99:1f:94:3c:c4:20:49:34:33:02:2e:2d:fd:a0:54:08:2f:a1:
9e:12:55:bf:b3:5c:fb:82:b4:78:2a:65:04:86:02:e4:b8:bf:
de:9a:9e:41:d6:4d:cb:fb:12:37:ce:d5:c4:03:43:10:47:19:
34:72:c7:54:8c:5f:2e:aa:18:53:3f:b2:50:4e:e7:1c:08:40:
ca:58:34:2d:ba:1d:61:2c:2c:0b:ef:82:40:c0:a6:99:d6:69:
fa:6c:4e:3f:23:7d:19:a5:2b:ac:53:a5:da:db:1d:1c:94:40:
11:6b:48:f0:fd:7b:df:39:d7:d6:db:53:7d:08:4e:47:0f:f6:
b5:b7:8b:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4uiPIBiYWJq2lmQRWx6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzM5NDA5NDU4Y2ZjMmJiYzMwYmIxOWFlZTUwNjMxODU1
Yjc1ZTYwHhcNMjUwODA0MDcwMTQ3WhcNMjUwODA1MDcwMTQ3WjAzMTEwLwYDVQQD
EyhkMTZlNGUwNTkwNjVhYzJjOWVhMWI4Y2I5OWY2YTE0MWVhZjZhZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ2H23m8Z2b8T4qVK+9hmm6s+OxA
Zl31rMhYRxZBBVANhWHICuPZtq92hgnykORD+apaLUjtxXmlxJF1rba11CMhsR7+
BzRoSiW7qfSd6bfxzNFqu04Bihi8RGzrYrLJiTy8Q0jYrnBWnKrXJ0wb9cGzNqfP
1PpvCif8uX5eevzXyBuJH58IBxiB1fSJLmORZIujCaZcw9ZUiy0ynCJi5cyVqfZy
aC0tJVO6mhYdpZyOc8VBeelJfzF+EltNGhhgOjuQ9BuMe8qN1kg5ETYQpnuxcTrB
UoSbCnz7b76G3l6wOfS9JbWP6uxJXMV7Wjyp1YCb9ctn/3jlvUFB1fL9yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFuTgWQZawsnqG4y5n2oUHq9q0QMB8GA1UdIwQY
MBaAFCczlAlFjPwrvDC7Ga7lBjGFW3XmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpPVUNVV01fQ3U4TUxzWnJ1VUdNWVZiZGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lY2Q2YTUtZGNmMi00NTFjLThhMmYt
NWQxM2M3NDQ3ZjZhLzEvSnpPVUNVV01fQ3U4TUxzWnJ1VUdNWVZiZGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lY2Q2YTUtZGNmMi00NTFjLThhMmYtNWQxM2M3NDQ3ZjZh
LzEvSnpPVUNVV01fQ3U4TUxzWnJ1VUdNWVZiZGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRC+acS4
hH3THWFn8REVV5huk1xQSGVrJk0Dn86elHd53UpBlTYJVTdsbZSglv6tA0h6G41p
RbriYk+d6OtCxeMNGtQdAvjSOwAuIvJb1d5O0bl7cu+LbBispEKcWJCWJ5bFKP2g
WktrHJMJctXWOvxefsMLZqrk7sTA2k8ImR+UPMQgSTQzAi4t/aBUCC+hnhJVv7Nc
+4K0eCplBIYC5Li/3pqeQdZNy/sSN87VxANDEEcZNHLHVIxfLqoYUz+yUE7nHAhA
ylg0LbodYSwsC++CQMCmmdZp+mxOPyN9GaUrrFOl2tsdHJRAEWtI8P173znX1ttT
fQhORw/2tbeLVw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:02 2025 by rpki-client