Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: qLcb5/a47iryfi6sBTGhVMv1DC4+84YAunNEXe/zJPk=
Subject key identifier: 56:93:4C:E1:BC:A1:6E:83:C1:74:90:0E:EF:B8:B5:F9:98:7B:05:FC
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 019777F7D19A7BCAEBC201B5B8B3342D5EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 08AF
Signing time: Mon 16 Jun 2025 09:00:18 +0000
Manifest this update: Mon 16 Jun 2025 09:00:18 +0000
Manifest next update: Tue 17 Jun 2025 09:00:18 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: SboZmr+ET0vzp9yXGMPs0WvMdB31uvlCNM/3hA7k9CQ=)
2: YRQ4mvsGwzil4hFVAUOAk6dNVCU.roa (hash: X5eaS1qa/k5JOAN5WxaVK8Rkr/iQxPqJC1ctHVNkj8M=)
3: clLzc_fPy2OSfEJhnvCxw-gzmJg.roa (hash: QOQMhVAiztAASS43Dph/mctPcwas/jY/zxydrARjdnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f7:d1:9a:7b:ca:eb:c2:01:b5:b8:b3:34:2d:5e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Jun 16 09:00:18 2025 GMT
Not After : Jun 17 09:00:18 2025 GMT
Subject: CN=56934ce1bca16e83c174900eefb8b5f9987b05fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:52:c6:2b:e8:ae:06:9e:69:d4:46:9c:90:
e6:f6:89:c1:0f:57:29:9f:fe:f0:7e:83:34:b9:f1:
02:20:5d:0d:e0:05:78:4e:c7:52:06:35:fa:52:58:
a6:c8:56:68:4c:32:cf:2e:1c:72:dc:ca:37:bc:bf:
80:a5:dd:71:48:18:32:c9:6b:75:25:b7:83:c1:04:
89:4b:03:a1:d5:52:e2:69:51:61:b4:f2:32:0a:98:
23:ba:5d:d4:c7:4a:6a:51:ca:f9:dc:58:12:db:03:
97:4f:c2:e1:91:b9:c6:33:0e:f7:5a:66:a0:49:bb:
c5:70:82:0c:2e:e5:34:ae:74:b4:0c:60:53:df:8d:
0c:f5:49:a6:f0:8b:29:7d:39:ce:4c:fc:5a:0d:74:
66:ef:72:f1:e7:ef:b4:42:a5:b4:f8:d2:65:07:f9:
f6:e2:88:ac:d4:91:dc:04:7f:04:5f:a8:23:91:f7:
34:67:dd:ec:5d:02:d1:e9:f1:78:0e:9a:f7:f8:a1:
e5:a5:52:67:bf:f7:b0:ee:8d:50:52:a7:fa:f4:8f:
f9:5d:84:ca:31:8a:9b:dd:ac:b4:a1:de:ce:99:02:
1c:52:cc:33:25:55:77:d1:fd:8d:5d:0d:e1:48:10:
e0:19:12:3b:7a:87:5b:d0:25:3b:fe:a7:53:f8:0d:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:93:4C:E1:BC:A1:6E:83:C1:74:90:0E:EF:B8:B5:F9:98:7B:05:FC
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ff:95:98:45:f2:2e:8d:a6:67:df:de:82:99:3f:4e:6f:ce:
2b:ed:ad:91:9c:ee:4c:27:f8:87:98:b1:54:96:7d:df:91:94:
e7:af:3a:ae:c2:dc:07:16:4d:34:6c:4e:c8:c1:09:a0:f1:97:
1c:8e:88:ce:11:9c:61:e1:ff:31:62:94:f7:08:3d:44:93:0d:
5b:46:4e:6c:b3:44:d3:9e:42:21:ad:82:67:8a:77:1b:5e:dc:
f1:54:e9:dc:28:16:64:36:3d:27:4e:7e:8f:25:13:09:99:61:
62:b3:3f:7b:40:8c:23:e1:90:1b:d3:23:1a:4c:c1:46:69:03:
89:a8:9b:ff:0e:3a:47:23:f8:95:a2:42:bf:b3:4a:f1:29:66:
d8:09:cc:76:15:5e:71:b7:23:9d:92:3f:4d:bd:88:6f:a2:73:
71:21:6a:80:30:51:b2:36:6e:b4:4e:4b:c4:98:49:9e:a5:0e:
1d:1a:80:63:00:14:56:d1:d0:2d:91:87:f2:06:35:a4:d1:17:
24:45:d2:75:de:30:81:82:39:7a:eb:ec:4f:0f:e9:67:a7:8a:
dc:fc:12:ed:51:9e:c4:79:53:b8:e7:c1:31:fb:fa:18:26:6a:
bc:3e:14:c6:e8:17:58:28:e9:f1:92:c5:d6:fe:d0:1e:1a:53:
58:49:3e:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd399Gae8rrwgG1uLM0LV77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTcwMjdlM2EwODdiNjVmOTY4YjUzNWU0MTVmNjc0MzI2
OTU4NzYwHhcNMjUwNjE2MDkwMDE4WhcNMjUwNjE3MDkwMDE4WjAzMTEwLwYDVQQD
Eyg1NjkzNGNlMWJjYTE2ZTgzYzE3NDkwMGVlZmI4YjVmOTk4N2IwNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+VSxivorgaeadRGnJDm9onBD1cp
n/7wfoM0ufECIF0N4AV4TsdSBjX6UlimyFZoTDLPLhxy3Mo3vL+Apd1xSBgyyWt1
JbeDwQSJSwOh1VLiaVFhtPIyCpgjul3Ux0pqUcr53FgS2wOXT8LhkbnGMw73Wmag
SbvFcIIMLuU0rnS0DGBT340M9Umm8IspfTnOTPxaDXRm73Lx5++0QqW0+NJlB/n2
4ois1JHcBH8EX6gjkfc0Z93sXQLR6fF4Dpr3+KHlpVJnv/ew7o1QUqf69I/5XYTK
MYqb3ay0od7OmQIcUswzJVV30f2NXQ3hSBDgGRI7eodb0CU7/qdT+A0BTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaTTOG8oW6DwXSQDu+4tfmYewX8MB8GA1UdIwQY
MBaAFCRXAn46CHtl+Wi1NeQV9nQyaVh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUt
Yjc5ZDA4ZmExNzQ3LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUtYjc5ZDA4ZmExNzQ3
LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/+VmEXy
Lo2mZ9/egpk/Tm/OK+2tkZzuTCf4h5ixVJZ935GU5686rsLcBxZNNGxOyMEJoPGX
HI6IzhGcYeH/MWKU9wg9RJMNW0ZObLNE055CIa2CZ4p3G17c8VTp3CgWZDY9J05+
jyUTCZlhYrM/e0CMI+GQG9MjGkzBRmkDiaib/w46RyP4laJCv7NK8Slm2AnMdhVe
cbcjnZI/Tb2Ib6JzcSFqgDBRsjZutE5LxJhJnqUOHRqAYwAUVtHQLZGH8gY1pNEX
JEXSdd4wgYI5euvsTw/pZ6eK3PwS7VGexHlTuOfBMfv6GCZqvD4UxugXWCjp8ZLF
1v7QHhpTWEk+Rw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:43:46 2025 by rpki-client