Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File: JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier: cV679yhuNanIEU0f50L3WNOhpXJmyZjEGQEr6YhVcVI=
Subject key identifier: FD:93:83:43:E6:5E:EC:F2:9D:54:1B:13:4E:1E:42:DE:82:84:F1:55
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 019683908BD97B650179591AB882339F4260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number: 1519
Signing time: Tue 29 Apr 2025 22:00:10 +0000
Manifest this update: Tue 29 Apr 2025 22:00:10 +0000
Manifest next update: Wed 30 Apr 2025 22:00:10 +0000
Files and hashes: 1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: 2bNheClvXT3jH9nqyBNM1HVVEgto+bY/Wvogx0r376Y=)
2: VGpF_n1XPkcrX19VIZfEe9zTBfU.roa (hash: ZCWW25MvdyoXZn5hf+wK4mNxI/epLix5Iz9z1Fs5NMw=)
3: o8N6mibH7HzRPfXSA-XguojRJmE.roa (hash: S9PmnI9ypR0hM3nIMCtKN9FHZAy4nsAZ63XidEySrCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:8b:d9:7b:65:01:79:59:1a:b8:82:33:9f:42:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Apr 29 22:00:10 2025 GMT
Not After : Apr 30 22:00:10 2025 GMT
Subject: CN=fd938343e65eecf29d541b134e1e42de8284f155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:bc:01:17:66:2e:2f:df:cd:4f:02:8a:19:88:
be:76:2f:c0:a2:9a:56:df:5b:88:6a:f9:8d:51:d9:
bf:bb:49:76:77:2a:8d:fa:55:24:b5:a8:03:b8:d2:
1d:82:d3:48:c6:be:35:14:e5:43:50:02:40:d9:dd:
98:75:33:73:e2:72:91:de:db:1b:0c:0c:c4:b4:88:
1c:31:f6:06:3b:35:65:d6:cd:47:10:4b:6f:0c:28:
8a:3a:8b:40:5f:d8:1f:49:3b:0a:04:ee:d4:94:9d:
21:75:02:4a:07:9a:97:36:a2:17:b2:52:ed:a3:4e:
27:8d:f2:09:10:1e:d9:87:3f:18:19:aa:08:ee:f7:
05:64:73:8a:41:4d:8f:4d:00:69:f9:5d:56:b7:0e:
de:d1:8f:47:58:82:17:4f:b2:7e:25:5b:1c:46:47:
1e:e5:30:49:0d:74:05:60:39:05:85:6b:53:95:b5:
f7:d6:9b:87:4c:1b:25:4b:17:1f:cb:fd:99:80:e4:
0f:e9:a8:2f:83:31:20:18:76:8e:ab:c0:4e:fd:a6:
30:f6:9a:15:24:79:30:2f:2f:e9:0f:06:b9:39:ba:
b6:61:3c:6e:87:96:ce:b9:0c:fe:f4:09:0d:ee:ac:
bc:50:92:54:c7:23:a5:ed:4d:64:b7:9a:f8:55:26:
a9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:93:83:43:E6:5E:EC:F2:9D:54:1B:13:4E:1E:42:DE:82:84:F1:55
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ab:0c:ed:ef:87:37:8c:69:f9:5e:85:02:d4:c7:fa:ff:0a:
71:37:58:d2:b8:f4:b4:a1:f0:b7:27:dd:7e:91:88:35:c9:16:
bd:0f:0f:0c:fc:8b:f1:f0:62:12:27:18:10:55:d2:06:a1:4e:
e4:8c:d0:6a:6c:15:ff:1e:d2:dd:50:bb:50:7a:fe:1c:58:51:
3e:7a:cc:96:9e:b4:2a:99:51:d8:24:b4:10:b8:78:dc:7b:ff:
0a:c4:ae:ea:d8:4e:b1:f2:1e:65:91:88:a9:e0:06:df:d4:c4:
cc:47:ce:b3:50:d7:10:63:5f:2f:4a:6f:dd:e8:2e:0f:20:2d:
cc:c7:4d:c3:00:72:90:68:3f:51:fc:a3:d0:50:87:67:0e:5d:
64:34:41:8f:83:88:01:91:62:48:3a:f6:f0:b1:42:c9:bb:b8:
ad:a4:a5:a9:66:e1:e3:96:42:58:03:50:a1:ab:56:84:80:de:
73:97:15:6b:23:1b:fa:47:5a:87:f9:e3:9c:d9:9a:90:d6:38:
d1:92:40:7a:65:ef:ad:dd:c4:96:66:5e:6c:7d:5d:e2:97:9f:
4b:8d:e4:5d:db:c9:5a:67:d0:ca:06:c5:ef:7b:c0:2d:ae:9c:
e7:cb:03:74:63:95:fb:08:66:e3:e5:8a:67:eb:89:21:74:4b:
ad:70:e1:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkIvZe2UBeVkauIIzn0JgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MjgwY2M1MzQ1MTZkMWMxZDllYTAyNGVhYWZiZDAxZmRj
NjhjOTcwHhcNMjUwNDI5MjIwMDEwWhcNMjUwNDMwMjIwMDEwWjAzMTEwLwYDVQQD
EyhmZDkzODM0M2U2NWVlY2YyOWQ1NDFiMTM0ZTFlNDJkZTgyODRmMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rwBF2YuL9/NTwKKGYi+di/AoppW
31uIavmNUdm/u0l2dyqN+lUktagDuNIdgtNIxr41FOVDUAJA2d2YdTNz4nKR3tsb
DAzEtIgcMfYGOzVl1s1HEEtvDCiKOotAX9gfSTsKBO7UlJ0hdQJKB5qXNqIXslLt
o04njfIJEB7Zhz8YGaoI7vcFZHOKQU2PTQBp+V1Wtw7e0Y9HWIIXT7J+JVscRkce
5TBJDXQFYDkFhWtTlbX31puHTBslSxcfy/2ZgOQP6agvgzEgGHaOq8BO/aYw9poV
JHkwLy/pDwa5Obq2YTxuh5bOuQz+9AkN7qy8UJJUxyOl7U1kt5r4VSapFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2Tg0PmXuzynVQbE04eQt6ChPFVMB8GA1UdIwQY
MBaAFCcoDMU0UW0cHZ6gJOqvvQH9xoyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUt
MTViNzliMDI5NDNlLzEvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUtMTViNzliMDI5NDNl
LzEvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcasM7e+H
N4xp+V6FAtTH+v8KcTdY0rj0tKHwtyfdfpGINckWvQ8PDPyL8fBiEicYEFXSBqFO
5IzQamwV/x7S3VC7UHr+HFhRPnrMlp60KplR2CS0ELh43Hv/CsSu6thOsfIeZZGI
qeAG39TEzEfOs1DXEGNfL0pv3eguDyAtzMdNwwBykGg/Ufyj0FCHZw5dZDRBj4OI
AZFiSDr28LFCybu4raSlqWbh45ZCWANQoatWhIDec5cVayMb+kdah/njnNmakNY4
0ZJAemXvrd3ElmZebH1d4pefS43kXdvJWmfQygbF73vALa6c58sDdGOV+whm4+WK
Z+uJIXRLrXDhuQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:53:14 2025 by rpki-client