Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier: bsqJC5egdlFRN8ttjo/TIZpApsVvhMh7VCxqGU/S94E=
Subject key identifier: B7:64:B3:BB:28:C1:9B:F0:3F:C0:BE:1D:0B:C1:5A:8F:86:33:95:D0
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial: 01976CCFE762D94B1A034ED2A53936F247B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 05:00:53 +0000
Manifest this update: Sat 14 Jun 2025 05:00:53 +0000
Manifest next update: Sun 15 Jun 2025 05:00:53 +0000
Files and hashes: 1: WqkjigZnCXf1cGoouiwLBsYhyDg.roa (hash: JS3h2BtVCeMAnMIYV0aIQuTD6sVEzA9KQapJj6DBbJg=)
2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: VBpGKBUQIw6mFRMbQpaptD1XAXbnRR+4GjaYObHeLLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:e7:62:d9:4b:1a:03:4e:d2:a5:39:36:f2:47:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Validity
Not Before: Jun 14 05:00:53 2025 GMT
Not After : Jun 15 05:00:53 2025 GMT
Subject: CN=b764b3bb28c19bf03fc0be1d0bc15a8f863395d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:c3:0b:d8:1d:ec:14:9b:82:c3:35:6c:5b:
e3:f8:b5:ed:dc:79:61:cd:dc:62:02:0b:51:f7:21:
74:92:d9:54:d4:d1:2e:d6:3f:c3:db:1b:73:62:ca:
78:98:12:5a:c6:13:22:53:f7:10:54:ae:23:50:fe:
de:08:b2:43:7f:53:23:b7:95:99:51:aa:4c:f8:2b:
c1:7e:2f:1d:aa:e5:6f:65:5a:69:84:72:a4:55:12:
93:ab:59:ea:ec:4e:18:76:ea:17:54:31:24:e7:96:
e8:7c:c5:31:93:e1:6e:0b:3a:09:8b:3d:4d:55:78:
52:b2:98:0e:e9:bb:ad:17:48:4c:a1:3c:ce:5d:ce:
83:5e:e4:30:a4:3a:a4:e9:c3:eb:75:49:01:41:62:
98:6c:31:95:33:af:ec:e5:03:a4:81:49:8a:76:1d:
21:fc:56:c9:b5:fc:4f:c6:64:75:77:52:b1:7b:7e:
54:b9:13:bb:99:42:6d:72:1c:92:3e:88:96:79:19:
1b:dc:10:6a:f2:1e:48:f0:e1:e8:95:e5:94:15:6e:
7a:83:d3:2b:0e:bf:47:da:1e:38:c6:23:84:70:f2:
ae:5a:d8:c7:1c:2c:ce:a7:30:d4:a1:1e:a0:a2:50:
fd:32:09:83:b8:1e:14:04:88:6c:15:88:7f:05:fa:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:64:B3:BB:28:C1:9B:F0:3F:C0:BE:1D:0B:C1:5A:8F:86:33:95:D0
X509v3 Authority Key Identifier:
keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:83:51:36:11:58:99:35:c2:6f:c7:d5:7e:11:0e:f8:e5:80:
79:61:32:ea:22:63:68:71:d3:7e:a6:2f:b6:1c:ca:47:58:e6:
00:23:86:78:c1:e8:25:96:4a:68:e8:54:95:2f:ef:ec:41:17:
0e:20:ab:8f:b7:67:b1:33:5d:e6:f9:56:5d:41:45:c6:b1:0c:
fc:f0:3a:f9:dc:3b:33:b0:f9:e6:d3:27:f0:1b:66:1b:a8:f2:
c1:a8:43:94:f0:67:60:77:18:05:8b:78:a7:4a:f4:45:87:55:
c7:75:59:63:a5:49:bf:73:97:e8:87:45:92:1b:b9:81:0e:8b:
b7:d3:08:a1:28:6f:1d:d8:9b:16:20:e3:af:20:dd:d9:7d:33:
be:7b:28:30:2b:cf:26:b2:38:0b:e6:37:51:22:b1:c3:4d:0b:
d9:5d:2f:f4:8d:68:e7:70:dc:c1:cd:c9:94:b1:2a:8c:89:3c:
ae:2a:41:70:96:13:0c:d9:e8:bd:68:83:44:d5:b2:da:a3:8a:
bb:fc:45:e6:ce:e6:b1:e7:dd:46:0c:e7:2d:50:cf:60:31:53:
e5:b0:1a:f5:82:44:a9:00:e2:13:13:1b:00:60:e0:90:18:0b:
cc:7c:71:cd:f5:77:74:69:4f:c2:db:d2:26:a6:20:0b:8b:9f:
9b:c8:bf:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz+di2UsaA07SpTk28ke3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzFmN2QwNTMwNjgyZTFiNjhlM2JmZTVhODc0NGVlNTFh
ZDMzNWQwHhcNMjUwNjE0MDUwMDUzWhcNMjUwNjE1MDUwMDUzWjAzMTEwLwYDVQQD
EyhiNzY0YjNiYjI4YzE5YmYwM2ZjMGJlMWQwYmMxNWE4Zjg2MzM5NWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL/DC9gd7BSbgsM1bFvj+LXt3Hlh
zdxiAgtR9yF0ktlU1NEu1j/D2xtzYsp4mBJaxhMiU/cQVK4jUP7eCLJDf1Mjt5WZ
UapM+CvBfi8dquVvZVpphHKkVRKTq1nq7E4YduoXVDEk55bofMUxk+FuCzoJiz1N
VXhSspgO6butF0hMoTzOXc6DXuQwpDqk6cPrdUkBQWKYbDGVM6/s5QOkgUmKdh0h
/FbJtfxPxmR1d1Kxe35UuRO7mUJtchySPoiWeRkb3BBq8h5I8OHoleWUFW56g9Mr
Dr9H2h44xiOEcPKuWtjHHCzOpzDUoR6golD9MgmDuB4UBIhsFYh/Bfq/wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdks7sowZvwP8C+HQvBWo+GM5XQMB8GA1UdIwQY
MBaAFI7B99BTBoLhto47/lqHRO5RrTNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMt
YWVlNjk4YWY2OGI3LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMtYWVlNjk4YWY2OGI3
LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxINRNhFY
mTXCb8fVfhEO+OWAeWEy6iJjaHHTfqYvthzKR1jmACOGeMHoJZZKaOhUlS/v7EEX
DiCrj7dnsTNd5vlWXUFFxrEM/PA6+dw7M7D55tMn8BtmG6jywahDlPBnYHcYBYt4
p0r0RYdVx3VZY6VJv3OX6IdFkhu5gQ6Lt9MIoShvHdibFiDjryDd2X0zvnsoMCvP
JrI4C+Y3USKxw00L2V0v9I1o53Dcwc3JlLEqjIk8ripBcJYTDNnovWiDRNWy2qOK
u/xF5s7msefdRgznLVDPYDFT5bAa9YJEqQDiExMbAGDgkBgLzHxxzfV3dGlPwtvS
JqYgC4ufm8i/8A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:05:21 2025 by rpki-client