Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File: J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier: zZhKDTLq5YEsy/tV3fxPcVClvLox5N1tHCco5eqzmq4=
Subject key identifier: F9:05:0B:25:27:4E:57:D0:E7:21:C5:77:41:E6:36:1F:16:DC:13:5D
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: 01967D8EE9C371A8255C030D3A98133BD90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number: 0C09
Signing time: Mon 28 Apr 2025 18:00:40 +0000
Manifest this update: Mon 28 Apr 2025 18:00:40 +0000
Manifest next update: Tue 29 Apr 2025 18:00:40 +0000
Files and hashes: 1: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: fa76wjeVcEGOtN7mhDMANAs3In7A3ib8TWGkJuVXWlo=)
2: dlmSMThgfzEt-EoGdzxxYyd6AvA.roa (hash: II2qv/R+riqTZycAWnh60efymgX6QJpKVeYxCLVnyks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:e9:c3:71:a8:25:5c:03:0d:3a:98:13:3b:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: Apr 28 18:00:40 2025 GMT
Not After : Apr 29 18:00:40 2025 GMT
Subject: CN=f9050b25274e57d0e721c57741e6361f16dc135d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:88:27:06:ca:83:15:7e:4d:e1:29:bb:28:
59:16:a0:41:43:2c:95:69:41:09:d8:ce:8a:d7:fb:
93:ba:36:36:f9:72:4f:3b:c6:13:45:f0:54:21:db:
4e:4a:25:55:be:ff:24:0f:48:5d:81:b7:42:30:cf:
f0:d0:71:df:81:a1:6c:2a:ab:9a:ec:cb:cc:d1:61:
71:05:e8:9e:e7:af:f6:4e:16:9a:94:bd:26:fd:52:
c0:a2:21:39:5e:e0:79:28:f1:91:99:d8:50:90:60:
78:4f:38:3e:14:c6:56:dd:5c:9a:45:e9:6b:b5:1c:
b6:ae:87:17:45:d0:97:40:6a:9e:a1:88:34:65:7d:
9e:63:5a:1d:14:18:26:d4:56:bf:0c:05:89:9c:f1:
e3:2c:e1:0d:9b:28:30:68:6d:99:53:6b:cd:3a:3f:
37:49:57:0f:1b:63:04:77:4d:97:87:8c:26:ad:b1:
d6:57:43:24:bc:22:f4:99:76:2b:84:ca:ca:18:d2:
22:ca:d3:f7:d7:e3:e8:44:d9:9e:be:29:6d:b9:4b:
5e:f6:0a:b6:af:0e:41:92:bb:4c:bb:f4:19:fd:2d:
73:bf:10:48:24:84:33:a1:1f:77:ec:3c:a9:0b:a4:
92:ff:51:89:06:8a:9a:cf:a7:f7:df:69:8a:73:e2:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:05:0B:25:27:4E:57:D0:E7:21:C5:77:41:E6:36:1F:16:DC:13:5D
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1a:bb:0d:ed:6e:4f:d4:1b:e3:f4:d3:3b:f9:bf:25:d3:89:
f9:aa:ab:05:04:13:a9:18:a0:1a:f9:26:b9:3f:48:40:c3:d9:
97:d7:69:f9:26:79:ba:a8:ec:18:b0:69:98:c3:c3:db:d9:24:
3b:b4:7c:59:42:78:79:ed:d4:1d:0d:a5:04:d8:59:21:87:a6:
2d:66:af:a3:86:24:e1:1a:a1:e6:1b:ab:7b:63:25:aa:71:3a:
a4:de:19:ef:0b:fc:61:ef:4e:35:14:26:84:04:02:dc:30:fb:
af:93:4b:a5:e0:78:72:b6:55:a1:02:33:71:7e:28:b3:17:92:
d2:5f:3f:c4:5f:dc:14:36:4f:4b:d0:a8:98:73:de:86:61:42:
2e:45:05:69:4d:71:36:f3:75:af:88:7a:39:d6:00:43:c0:de:
1c:6f:0f:55:06:d1:17:c3:21:32:49:b6:63:94:1a:ae:02:9f:
2e:fe:7d:ec:2a:26:4a:51:7e:a6:36:e2:11:96:54:00:4c:29:
19:ff:3d:04:78:2b:e2:91:55:4a:2d:db:79:1e:c4:a6:37:06:
e1:3a:a3:83:d9:91:81:5a:93:97:46:36:1c:bc:ce:db:b4:e2:
c4:8b:3e:29:9d:17:39:e8:ae:2d:93:87:6e:c9:94:c5:d5:3a:
55:f2:7f:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9junDcaglXAMNOpgTO9kOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzYzN2E3MDlkZGJlN2Y2MjM3YWY4ZDViMjkxM2I0MjIz
NzE1N2MwHhcNMjUwNDI4MTgwMDQwWhcNMjUwNDI5MTgwMDQwWjAzMTEwLwYDVQQD
EyhmOTA1MGIyNTI3NGU1N2QwZTcyMWM1Nzc0MWU2MzYxZjE2ZGMxMzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGmIJwbKgxV+TeEpuyhZFqBBQyyV
aUEJ2M6K1/uTujY2+XJPO8YTRfBUIdtOSiVVvv8kD0hdgbdCMM/w0HHfgaFsKqua
7MvM0WFxBeie56/2ThaalL0m/VLAoiE5XuB5KPGRmdhQkGB4Tzg+FMZW3VyaRelr
tRy2rocXRdCXQGqeoYg0ZX2eY1odFBgm1Fa/DAWJnPHjLOENmygwaG2ZU2vNOj83
SVcPG2MEd02Xh4wmrbHWV0MkvCL0mXYrhMrKGNIiytP31+PoRNmeviltuUte9gq2
rw5BkrtMu/QZ/S1zvxBIJIQzoR937DypC6SS/1GJBoqaz6f332mKc+KKgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkFCyUnTlfQ5yHFd0HmNh8W3BNdMB8GA1UdIwQY
MBaAFCfGN6cJ3b5/YjevjVspE7QiNxV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jYzdlNmItOGM4Ni00NWFiLWFjMDMt
Y2JhZGI2NDM0MGUwLzEvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jYzdlNmItOGM4Ni00NWFiLWFjMDMtY2JhZGI2NDM0MGUw
LzEvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBq7De1u
T9Qb4/TTO/m/JdOJ+aqrBQQTqRigGvkmuT9IQMPZl9dp+SZ5uqjsGLBpmMPD29kk
O7R8WUJ4ee3UHQ2lBNhZIYemLWavo4Yk4Rqh5hure2MlqnE6pN4Z7wv8Ye9ONRQm
hAQC3DD7r5NLpeB4crZVoQIzcX4osxeS0l8/xF/cFDZPS9ComHPehmFCLkUFaU1x
NvN1r4h6OdYAQ8DeHG8PVQbRF8MhMkm2Y5QargKfLv597ComSlF+pjbiEZZUAEwp
Gf89BHgr4pFVSi3beR7EpjcG4Tqjg9mRgVqTl0Y2HLzO27TixIs+KZ0XOeiuLZOH
bsmUxdU6VfJ/tg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:27:01 2025 by rpki-client