Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: 0TuUCoxKf0nnUyIlceBsXpMJK/SXCi4KP9JMUpFefJc=
Subject key identifier: 79:D3:35:22:C8:B9:AF:D7:86:65:3E:5C:CD:C2:41:DF:28:B4:18:CE
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 019689CA04B4C2C5E2AC354FC85826FCE490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 0FCB
Signing time: Thu 01 May 2025 03:00:40 +0000
Manifest this update: Thu 01 May 2025 03:00:40 +0000
Manifest next update: Fri 02 May 2025 03:00:40 +0000
Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: onnygf+pafCadib/FaR6jxbj/Y0HoytZItHkgzRq/KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:04:b4:c2:c5:e2:ac:35:4f:c8:58:26:fc:e4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: May 1 03:00:40 2025 GMT
Not After : May 2 03:00:40 2025 GMT
Subject: CN=79d33522c8b9afd786653e5ccdc241df28b418ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:14:40:2b:27:9e:95:15:9a:4c:84:a3:d2:
2d:53:ae:65:91:a2:4c:21:a5:35:79:90:08:31:1d:
43:6d:1c:e3:d2:d9:98:0b:a0:2e:64:11:95:71:1f:
98:1c:89:7c:0d:ec:15:61:f9:af:dd:89:61:ab:e3:
26:0b:41:18:be:38:bb:7a:18:9e:68:6c:4c:34:2d:
7a:76:6b:c7:66:36:fc:b0:73:79:9b:2e:da:59:c5:
1b:e9:63:21:47:d5:b0:53:f5:ef:a9:68:0c:fd:d6:
0b:e2:f4:69:a0:aa:54:22:18:47:4c:ff:bb:76:8c:
1f:3d:21:4c:06:db:3e:97:d6:fb:73:16:fa:e8:05:
37:d0:3e:e1:63:9f:63:8b:3a:38:f8:bb:83:4b:7b:
c8:6b:83:8a:a9:c5:02:dd:ad:ae:ce:e2:69:85:f9:
91:7f:15:e9:cc:d9:17:8b:27:e0:9f:66:fb:11:57:
0e:28:a3:67:ee:f2:56:8a:f7:c2:81:b9:73:26:63:
de:5e:22:97:5b:7a:55:19:32:f9:9f:c0:47:7b:18:
c4:b8:7f:50:c2:01:3c:56:5d:31:61:56:8d:51:48:
99:78:40:50:10:b5:97:58:37:3a:ac:9a:54:64:91:
36:9e:8c:f4:80:c2:9d:d2:6e:b0:e2:9f:f4:99:18:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D3:35:22:C8:B9:AF:D7:86:65:3E:5C:CD:C2:41:DF:28:B4:18:CE
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1a:0e:8b:86:6e:cd:85:b0:df:3f:50:25:44:93:80:ef:ef:
1b:77:17:bf:71:b8:a2:f7:4c:88:bb:0c:7c:60:f9:b5:39:53:
96:82:3c:44:c3:dc:39:e2:2b:f8:e4:0d:e9:23:94:91:b6:e4:
44:1f:70:aa:e3:df:40:41:7c:3d:bc:c1:cf:61:62:d9:23:3b:
38:01:8c:e2:f0:ff:17:6c:c5:77:06:78:64:aa:a2:37:39:26:
4e:6b:85:85:8b:af:67:68:cd:f2:05:87:ac:df:40:2e:50:a7:
16:65:65:49:0c:79:4a:81:23:6d:df:04:63:dc:30:ba:f6:77:
f4:4f:00:8a:c5:37:3e:3c:95:cd:a0:73:9a:0b:b5:e0:14:93:
7f:14:0c:91:36:9a:80:c2:1c:b0:b0:58:5a:fc:65:f9:55:b2:
64:3c:7f:da:d0:13:97:f7:e9:bb:bc:f6:00:73:16:da:42:17:
bf:59:28:a6:e0:ad:b5:28:97:ff:85:42:95:ff:e1:d5:22:a6:
3f:e7:1a:6e:f6:1c:2c:34:2b:03:2f:7c:c9:31:1e:65:ee:17:
05:12:f8:a2:eb:42:e0:de:ae:80:0d:35:df:74:27:35:33:1f:
a8:1f:3e:a7:f6:6f:4d:54:b3:64:f4:a6:fe:9e:6e:31:38:7a:
08:69:00:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJygS0wsXirDVPyFgm/OSQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTQwMDNkNjU3ZWNiZTVmOWI2ZjQ5NDdiOGNhNzJhZGFj
ZTlkMjkwHhcNMjUwNTAxMDMwMDQwWhcNMjUwNTAyMDMwMDQwWjAzMTEwLwYDVQQD
Eyg3OWQzMzUyMmM4YjlhZmQ3ODY2NTNlNWNjZGMyNDFkZjI4YjQxOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7kUQCsnnpUVmkyEo9ItU65lkaJM
IaU1eZAIMR1DbRzj0tmYC6AuZBGVcR+YHIl8DewVYfmv3Ylhq+MmC0EYvji7ehie
aGxMNC16dmvHZjb8sHN5my7aWcUb6WMhR9WwU/XvqWgM/dYL4vRpoKpUIhhHTP+7
dowfPSFMBts+l9b7cxb66AU30D7hY59jizo4+LuDS3vIa4OKqcUC3a2uzuJphfmR
fxXpzNkXiyfgn2b7EVcOKKNn7vJWivfCgblzJmPeXiKXW3pVGTL5n8BHexjEuH9Q
wgE8Vl0xYVaNUUiZeEBQELWXWDc6rJpUZJE2noz0gMKd0m6w4p/0mRi3CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnTNSLIua/XhmU+XM3CQd8otBjOMB8GA1UdIwQY
MBaAFI8UAD1lfsvl+bb0lHuMpyrazp0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjct
ZWIzYzlhMmU3ZWVhLzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjctZWIzYzlhMmU3ZWVh
LzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRoOi4Zu
zYWw3z9QJUSTgO/vG3cXv3G4ovdMiLsMfGD5tTlTloI8RMPcOeIr+OQN6SOUkbbk
RB9wquPfQEF8PbzBz2Fi2SM7OAGM4vD/F2zFdwZ4ZKqiNzkmTmuFhYuvZ2jN8gWH
rN9ALlCnFmVlSQx5SoEjbd8EY9wwuvZ39E8AisU3PjyVzaBzmgu14BSTfxQMkTaa
gMIcsLBYWvxl+VWyZDx/2tATl/fpu7z2AHMW2kIXv1kopuCttSiX/4VClf/h1SKm
P+cabvYcLDQrAy98yTEeZe4XBRL4outC4N6ugA0133QnNTMfqB8+p/ZvTVSzZPSm
/p5uMTh6CGkAdA==
-----END CERTIFICATE-----
Generated at Thu May 1 12:33:54 2025 by rpki-client