Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
File: j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft (raw, json)
Hash identifier: tjvv1VmVspZgx1gUjxqY8AC6p1ImWyLb1bx12z3LkTo=
Subject key identifier: DD:C5:C0:FF:09:47:B8:EA:05:B5:51:3E:3F:38:4C:98:B3:49:92:77
Authority key identifier: 8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
Certificate issuer: /CN=8fa698c9f803032579201048b87c19c63c8e1197
Certificate serial: 0197703ECF00B10A9FD81BC152EC2ECFC768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
Manifest number: 17
Signing time: Sat 14 Jun 2025 21:00:53 +0000
Manifest this update: Sat 14 Jun 2025 21:00:53 +0000
Manifest next update: Sun 15 Jun 2025 21:00:53 +0000
Files and hashes: 1: j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl (hash: 9rJFGbanCy+8WkTg/iFUTHTvraqJBoJR1tvCNKfC5Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:cf:00:b1:0a:9f:d8:1b:c1:52:ec:2e:cf:c7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa698c9f803032579201048b87c19c63c8e1197
Validity
Not Before: Jun 14 21:00:53 2025 GMT
Not After : Jun 15 21:00:53 2025 GMT
Subject: CN=ddc5c0ff0947b8ea05b5513e3f384c98b3499277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:31:2e:0e:cf:f8:ff:04:27:ee:b4:ec:f7:
d4:b2:7d:3d:1a:22:8e:20:ee:7d:1c:3c:c6:d2:1c:
c1:78:53:22:5d:1a:e4:6d:85:99:a7:23:26:b6:84:
e1:8e:a1:f2:13:2d:35:38:88:3e:77:58:ea:48:70:
5c:5a:6c:96:dc:18:4c:5b:54:6c:1f:16:d0:07:64:
eb:e7:85:72:98:f0:cb:9a:f2:6c:42:45:f1:2b:25:
ac:95:cb:21:60:21:1e:b6:85:51:58:34:c8:49:1e:
76:34:7d:33:dd:18:4b:d1:12:03:76:69:bb:d9:0e:
5f:d8:3c:03:73:cd:fc:d2:47:7f:14:f8:c4:59:63:
ea:0e:e3:9c:2e:02:04:15:b3:2c:18:90:84:e8:63:
e9:72:d8:17:ca:0f:78:c6:88:9a:06:81:de:ad:a9:
34:fc:e8:34:f2:94:2b:e7:41:b6:f4:c9:b8:cf:48:
0d:54:d9:cf:24:e5:ae:6e:70:0f:a3:13:33:d5:89:
ad:1c:7e:c3:f9:af:40:b5:2c:e8:68:73:52:47:07:
63:0b:b6:f1:4d:03:89:92:c5:b9:0e:b2:55:e1:2f:
67:34:2a:85:67:ef:8f:b0:fc:ac:76:a0:40:b7:22:
0f:0f:b3:05:bc:33:64:e0:4e:2f:f4:1b:0b:97:29:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C5:C0:FF:09:47:B8:EA:05:B5:51:3E:3F:38:4C:98:B3:49:92:77
X509v3 Authority Key Identifier:
keyid:8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9b:6b:e2:5c:c0:64:23:e6:be:84:9e:9f:f3:c5:f8:ac:25:
90:94:25:e2:8c:f8:7a:b7:d1:31:e1:09:15:3c:47:f6:f1:6f:
b5:12:97:17:fb:27:73:71:d0:bb:b8:3e:f0:49:7e:67:4b:ba:
19:15:5c:7b:8c:2e:55:1d:36:d8:f6:79:b8:9d:99:04:a8:b6:
1b:f1:68:b3:2b:4f:0e:78:ed:6c:2a:45:a7:93:07:44:8c:eb:
2b:bd:bd:65:4a:c7:f0:06:9f:ff:f4:55:13:21:79:66:9c:41:
db:9e:1c:52:f5:5b:33:2c:e9:f9:a6:6f:b4:f9:69:e5:04:6f:
66:86:c1:b0:71:e6:34:9f:3c:e1:6d:1e:5e:f6:39:51:9f:e3:
4d:d6:6b:61:e1:f9:f1:0f:de:04:53:14:ac:db:e7:f9:68:4f:
52:7e:44:d9:b6:71:1e:db:e1:ce:d5:44:e5:46:ce:22:9e:29:
56:0f:e8:d4:bc:17:17:6d:a4:7f:a5:6f:70:0e:b5:19:c4:ae:
18:25:fd:76:44:03:18:9e:f8:35:41:b8:d0:ec:ad:77:0f:1e:
b0:86:55:5f:ab:2d:cf:01:d6:c4:33:1a:0d:74:7f:33:ab:98:
f3:99:d9:19:85:5f:fe:9e:d8:69:b7:4c:72:72:bb:24:43:54:
36:0d:32:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPs8AsQqf2BvBUuwuz8doMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTY5OGM5ZjgwMzAzMjU3OTIwMTA0OGI4N2MxOWM2M2M4
ZTExOTcwHhcNMjUwNjE0MjEwMDUzWhcNMjUwNjE1MjEwMDUzWjAzMTEwLwYDVQQD
EyhkZGM1YzBmZjA5NDdiOGVhMDViNTUxM2UzZjM4NGM5OGIzNDk5Mjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjwxLg7P+P8EJ+607PfUsn09GiKO
IO59HDzG0hzBeFMiXRrkbYWZpyMmtoThjqHyEy01OIg+d1jqSHBcWmyW3BhMW1Rs
HxbQB2Tr54VymPDLmvJsQkXxKyWslcshYCEetoVRWDTISR52NH0z3RhL0RIDdmm7
2Q5f2DwDc8380kd/FPjEWWPqDuOcLgIEFbMsGJCE6GPpctgXyg94xoiaBoHerak0
/Og08pQr50G29Mm4z0gNVNnPJOWubnAPoxMz1YmtHH7D+a9AtSzoaHNSRwdjC7bx
TQOJksW5DrJV4S9nNCqFZ++PsPysdqBAtyIPD7MFvDNk4E4v9BsLlym4QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3FwP8JR7jqBbVRPj84TJizSZJ3MB8GA1UdIwQY
MBaAFI+mmMn4AwMleSAQSLh8GcY8jhGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjc0MDQtOWU5ZS00NGI4LTkwNWMt
ZjQ0ODA5NTc4Y2NhLzEvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wNjc0MDQtOWU5ZS00NGI4LTkwNWMtZjQ0ODA5NTc4Y2Nh
LzEvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJtr4lzA
ZCPmvoSen/PF+KwlkJQl4oz4erfRMeEJFTxH9vFvtRKXF/snc3HQu7g+8El+Z0u6
GRVce4wuVR022PZ5uJ2ZBKi2G/FosytPDnjtbCpFp5MHRIzrK729ZUrH8Aaf//RV
EyF5ZpxB254cUvVbMyzp+aZvtPlp5QRvZobBsHHmNJ884W0eXvY5UZ/jTdZrYeH5
8Q/eBFMUrNvn+WhPUn5E2bZxHtvhztVE5UbOIp4pVg/o1LwXF22kf6VvcA61GcSu
GCX9dkQDGJ74NUG40Oytdw8esIZVX6stzwHWxDMaDXR/M6uY85nZGYVf/p7YabdM
cnK7JENUNg0y+A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:01:55 2025 by rpki-client