Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
File: jxdSJfOGzpgBGfaYhPm-fGorOzM.mft (raw, json)
Hash identifier: AIzXBNXyrbFbtQ+ohIzkpWan2+ONdNBbtCucK1XxAA0=
Subject key identifier: C5:68:5D:67:43:2D:4B:C1:72:35:3B:1B:7B:F5:A0:96:28:3A:A2:C7
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial: 0197752E17C10F4B0377B8CDDC9B1FB2DC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
Manifest number: 1596
Signing time: Sun 15 Jun 2025 20:00:44 +0000
Manifest this update: Sun 15 Jun 2025 20:00:44 +0000
Manifest next update: Mon 16 Jun 2025 20:00:44 +0000
Files and hashes: 1: 89EQQCo6Tx4ACaGk_JyA4-a5SnA.roa (hash: DER2tNvuAXp0PR1aSNW92ooYvtdX7oI6GzQVCz2YBFM=)
2: jxdSJfOGzpgBGfaYhPm-fGorOzM.crl (hash: C3wL9FfqPCady+ckvmkbejmRGNXFBmx18NfwpphNBoM=)
3: wqj7UB7atlo4UtptagO8D4QVpv4.roa (hash: ylN4r0wdJFKjI8FqYNMjzdJ19nbuA10o9E8/faFnnKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:2e:17:c1:0f:4b:03:77:b8:cd:dc:9b:1f:b2:dc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Validity
Not Before: Jun 15 20:00:44 2025 GMT
Not After : Jun 16 20:00:44 2025 GMT
Subject: CN=c5685d67432d4bc172353b1b7bf5a096283aa2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:01:86:14:f2:5b:a4:aa:30:51:f9:83:57:
73:27:a3:d3:c7:8e:76:74:7a:44:8c:a7:72:89:e0:
4c:c1:d9:50:c0:14:89:2b:a1:bd:95:69:0c:59:69:
b5:9a:73:8f:71:a7:6c:5b:48:47:82:60:11:42:32:
5e:df:1a:87:c2:20:db:31:2d:a4:59:6b:7f:f3:b2:
7c:04:5b:07:88:23:1b:51:ef:d1:1d:64:99:78:34:
08:16:5c:bf:e8:48:3e:86:af:05:57:2d:c1:3e:f2:
20:4d:51:a8:6b:8d:a8:6c:3c:b3:5c:be:b3:76:5f:
40:40:bd:1d:0c:a0:c8:62:5b:20:76:b9:d6:e5:b0:
d1:c4:15:d2:77:ac:49:75:c6:d4:4c:9d:71:10:29:
52:b3:c5:92:3f:9f:56:5a:b4:e6:5e:ba:21:ca:1a:
90:2e:e6:4e:e5:c8:da:3e:11:6b:15:ca:6b:3c:fd:
4c:d8:ad:4a:53:c7:78:02:b5:32:0d:c8:13:94:f1:
62:95:52:c9:cb:72:f7:b7:3e:ed:e1:7a:9d:b3:6a:
bf:f9:b6:e0:78:64:f4:4b:94:06:5b:09:81:8d:42:
5b:88:4d:22:d0:7e:26:9c:bd:c9:54:2a:05:09:ea:
8f:8e:1d:4c:7d:3d:38:fd:f1:ca:53:7d:e8:19:0c:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:5D:67:43:2D:4B:C1:72:35:3B:1B:7B:F5:A0:96:28:3A:A2:C7
X509v3 Authority Key Identifier:
keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a7:17:60:9c:72:b5:87:5e:df:63:f5:1c:b1:98:57:1a:96:
db:22:9c:ca:f4:5b:fa:b8:6e:88:3b:ab:64:f5:66:d1:2b:3b:
b5:53:e8:b5:82:2f:ec:95:b4:85:f3:58:d3:d2:48:b6:24:13:
74:2e:6f:10:69:e3:06:51:28:38:92:c8:a9:a4:a7:d8:2b:7f:
23:d2:47:52:b0:91:66:f0:36:10:32:ec:73:30:de:09:12:96:
f4:5b:93:75:4a:17:5d:5b:bc:c8:fb:87:b1:9f:ad:3b:56:03:
21:6b:71:ff:92:43:b8:92:a0:9a:28:3c:20:cb:72:3a:69:02:
54:5e:66:1f:da:95:25:23:0a:82:c4:8f:a9:f9:0d:65:83:22:
78:30:ff:26:7f:9a:2c:41:9e:b3:8d:f0:a3:8a:16:fe:9c:47:
c2:cb:f5:08:02:b1:69:59:0b:d6:3d:b8:bf:9a:e2:08:74:1c:
06:ed:e3:08:49:e9:4d:77:23:be:69:0c:69:9a:e2:60:d2:78:
88:62:28:ab:0e:4a:dd:8c:97:d8:bb:84:b7:30:0f:cb:38:73:
83:9e:47:69:6e:e3:1c:0f:54:71:6a:ab:8b:55:07:82:85:b4:
30:d3:8b:b7:93:84:34:6e:63:2a:94:5a:d6:cd:8c:13:56:a1:
55:a7:55:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1LhfBD0sDd7jN3JsfstwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTc1MjI1ZjM4NmNlOTgwMTE5ZjY5ODg0ZjliZTdjNmEy
YjNiMzMwHhcNMjUwNjE1MjAwMDQ0WhcNMjUwNjE2MjAwMDQ0WjAzMTEwLwYDVQQD
EyhjNTY4NWQ2NzQzMmQ0YmMxNzIzNTNiMWI3YmY1YTA5NjI4M2FhMmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k8BhhTyW6SqMFH5g1dzJ6PTx452
dHpEjKdyieBMwdlQwBSJK6G9lWkMWWm1mnOPcadsW0hHgmARQjJe3xqHwiDbMS2k
WWt/87J8BFsHiCMbUe/RHWSZeDQIFly/6Eg+hq8FVy3BPvIgTVGoa42obDyzXL6z
dl9AQL0dDKDIYlsgdrnW5bDRxBXSd6xJdcbUTJ1xEClSs8WSP59WWrTmXrohyhqQ
LuZO5cjaPhFrFcprPP1M2K1KU8d4ArUyDcgTlPFilVLJy3L3tz7t4Xqds2q/+bbg
eGT0S5QGWwmBjUJbiE0i0H4mnL3JVCoFCeqPjh1MfT04/fHKU33oGQwRpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVoXWdDLUvBcjU7G3v1oJYoOqLHMB8GA1UdIwQY
MBaAFI8XUiXzhs6YARn2mIT5vnxqKzszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81ZWM3Y2EtYTQwMi00YzVkLWExYjct
NjFiNzcyZDc1MWVjLzEvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81ZWM3Y2EtYTQwMi00YzVkLWExYjctNjFiNzcyZDc1MWVj
LzEvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKcXYJxy
tYde32P1HLGYVxqW2yKcyvRb+rhuiDurZPVm0Ss7tVPotYIv7JW0hfNY09JItiQT
dC5vEGnjBlEoOJLIqaSn2Ct/I9JHUrCRZvA2EDLsczDeCRKW9FuTdUoXXVu8yPuH
sZ+tO1YDIWtx/5JDuJKgmig8IMtyOmkCVF5mH9qVJSMKgsSPqfkNZYMieDD/Jn+a
LEGes43wo4oW/pxHwsv1CAKxaVkL1j24v5riCHQcBu3jCEnpTXcjvmkMaZriYNJ4
iGIoqw5K3YyX2LuEtzAPyzhzg55HaW7jHA9UcWqri1UHgoW0MNOLt5OENG5jKpRa
1s2ME1ahVadVgQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:29:17 2025 by rpki-client