Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: dT2GHv5nXRZxYsn3BGQjImNp6UUQSuiYHDlravcJ70k=
Subject key identifier: DE:C5:20:E2:E2:0F:90:78:92:E9:29:12:CA:0E:A0:4A:2F:4A:44:7D
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 01977753580C897272B7A8629FCC3B835B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 1370
Signing time: Mon 16 Jun 2025 06:00:40 +0000
Manifest this update: Mon 16 Jun 2025 06:00:40 +0000
Manifest next update: Tue 17 Jun 2025 06:00:40 +0000
Files and hashes: 1: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: y4c0U0YrjctfUgc3EjA0LLpUNNIGJO+H+tOkiehAmMw=)
2: WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa (hash: LWTe3RG5x6p18VhZoks9MnTE5mxlsn7m+dciM17vR7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:58:0c:89:72:72:b7:a8:62:9f:cc:3b:83:5b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Jun 16 06:00:40 2025 GMT
Not After : Jun 17 06:00:40 2025 GMT
Subject: CN=dec520e2e20f907892e92912ca0ea04a2f4a447d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:83:50:fb:87:9d:1d:e3:ce:bd:e7:ec:61:fb:
4a:2a:8e:92:2d:3c:01:96:6d:a2:c6:12:a7:ed:b3:
03:ae:d4:55:1d:d5:c2:55:7f:19:4a:24:f2:6b:30:
41:13:85:d7:7d:41:40:fa:85:42:cf:c6:23:6b:27:
f0:40:6c:57:49:91:5a:53:15:fb:f0:c3:91:05:88:
6a:f5:67:6f:e3:84:51:70:10:fe:3a:a5:0d:1b:ab:
64:18:6a:42:b1:cc:8b:c8:69:da:0c:67:79:fc:2d:
99:8a:d5:b6:0c:af:70:d5:7e:25:5d:22:e8:63:2f:
44:d4:06:8c:43:77:83:79:01:f2:78:2a:e7:8c:bb:
56:c4:56:9a:30:b8:22:f5:21:d6:7c:e2:cb:fa:58:
25:43:be:41:2e:2f:6d:c7:68:31:62:76:f7:dc:1d:
0f:1c:2a:a9:6f:00:e3:8e:b7:0c:ee:98:34:c4:e4:
d3:32:8f:13:5a:bf:1d:5d:91:84:6f:37:fe:ff:20:
91:44:e8:7f:c0:f7:a2:4e:02:f2:b7:74:64:d9:f9:
57:fb:76:90:f9:8a:ee:9c:0f:ec:ee:d5:98:59:ab:
b4:74:5c:00:65:b7:7f:6a:b2:52:87:32:64:b8:0d:
34:e2:89:0e:49:06:df:4f:a2:08:8a:f2:87:48:47:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C5:20:E2:E2:0F:90:78:92:E9:29:12:CA:0E:A0:4A:2F:4A:44:7D
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9d:91:84:ba:4c:fd:d2:a2:82:9b:06:fe:47:9d:8b:f3:5d:
71:96:65:d9:a3:28:b8:02:98:f3:62:01:12:c0:03:7e:f1:71:
38:83:51:c5:5c:22:5f:5c:a1:b0:88:03:df:12:0d:35:6b:83:
c9:bb:a7:1f:9b:77:fc:4d:9d:b3:c6:62:c1:f5:33:0d:60:80:
a2:6b:92:0a:dd:91:2b:79:93:40:d9:10:e3:2e:06:26:75:64:
d1:63:7c:b5:95:ab:0b:04:d2:85:01:13:68:a6:9e:f8:5a:b9:
e7:d0:a0:45:1e:62:7b:7f:5a:79:59:34:f0:6a:48:f6:cb:8d:
e3:38:96:03:7a:f1:4b:35:5f:53:59:ee:81:02:66:82:11:3c:
a9:91:e6:24:a6:63:b4:db:19:c6:0c:9a:b2:ed:a3:ae:73:f6:
e4:9e:f9:b0:db:c6:4a:d2:bb:4f:da:71:09:e3:56:79:fd:59:
e4:ae:3a:ea:41:b2:19:9e:69:fb:29:81:5b:4a:c2:cd:78:05:
77:8e:29:af:5f:57:0b:55:be:9a:37:ed:86:74:43:28:8e:62:
58:d0:01:13:32:b0:9e:ec:01:ea:e1:96:de:bb:42:76:58:d1:
a0:dd:db:76:5d:ae:59:da:b8:34:e8:68:dd:ca:11:38:73:07:
f6:51:f8:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3U1gMiXJyt6hin8w7g1t0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjBlNGYxODE4M2ZiZDlkNjk1MGVlYTQzM2ZlNWQyMTZi
ZDVmMTIwHhcNMjUwNjE2MDYwMDQwWhcNMjUwNjE3MDYwMDQwWjAzMTEwLwYDVQQD
EyhkZWM1MjBlMmUyMGY5MDc4OTJlOTI5MTJjYTBlYTA0YTJmNGE0NDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYNQ+4edHePOvefsYftKKo6SLTwB
lm2ixhKn7bMDrtRVHdXCVX8ZSiTyazBBE4XXfUFA+oVCz8YjayfwQGxXSZFaUxX7
8MORBYhq9Wdv44RRcBD+OqUNG6tkGGpCscyLyGnaDGd5/C2ZitW2DK9w1X4lXSLo
Yy9E1AaMQ3eDeQHyeCrnjLtWxFaaMLgi9SHWfOLL+lglQ75BLi9tx2gxYnb33B0P
HCqpbwDjjrcM7pg0xOTTMo8TWr8dXZGEbzf+/yCRROh/wPeiTgLyt3Rk2flX+3aQ
+YrunA/s7tWYWau0dFwAZbd/arJShzJkuA004okOSQbfT6IIivKHSEdqBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7FIOLiD5B4kukpEsoOoEovSkR9MB8GA1UdIwQY
MBaAFCSw5PGBg/vZ1pUO6kM/5dIWvV8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEt
NWJhNTk1NGRmYzM3LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEtNWJhNTk1NGRmYzM3
LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPp2RhLpM
/dKigpsG/kedi/NdcZZl2aMouAKY82IBEsADfvFxOINRxVwiX1yhsIgD3xINNWuD
ybunH5t3/E2ds8ZiwfUzDWCAomuSCt2RK3mTQNkQ4y4GJnVk0WN8tZWrCwTShQET
aKae+Fq559CgRR5ie39aeVk08GpI9suN4ziWA3rxSzVfU1nugQJmghE8qZHmJKZj
tNsZxgyasu2jrnP25J75sNvGStK7T9pxCeNWef1Z5K466kGyGZ5p+ymBW0rCzXgF
d44pr19XC1W+mjfthnRDKI5iWNABEzKwnuwB6uGW3rtCdljRoN3bdl2uWdq4NOho
3coROHMH9lH4ww==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:01:33 2025 by rpki-client