Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier: vL/EYaA+rc9IlplQEhIqn7/bPmriaYlMI8NAdj0AsPQ=
Subject key identifier: B8:66:30:38:81:07:72:D1:AC:2B:E1:44:1B:A9:8C:EE:0F:DD:22:79
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer: /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial: 0196775606551B9B9CFA19166748A4FC1564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 13:00:48 +0000
Manifest this update: Sun 27 Apr 2025 13:00:48 +0000
Manifest next update: Mon 28 Apr 2025 13:00:48 +0000
Files and hashes: 1: Ouc3RvEDnyO6PZ6J8vBTm0umZLo.roa (hash: O9/4o6Al8uD1wslgbyQKwgMo1+JOp/WhUeraCAmbd1Q=)
2: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: 0OJgIsA+OEwm0QYtE9TYzFILKSvBuCo9bLvv1BATBWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:06:55:1b:9b:9c:fa:19:16:67:48:a4:fc:15:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Validity
Not Before: Apr 27 13:00:48 2025 GMT
Not After : Apr 28 13:00:48 2025 GMT
Subject: CN=b8663038810772d1ac2be1441ba98cee0fdd2279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:15:a3:64:c8:9e:e3:f0:91:1f:a5:5a:30:
99:6c:3e:c0:68:bf:22:6d:1a:b2:1c:4e:4d:1e:5d:
e2:d5:17:e9:b9:45:75:4b:f1:05:b6:08:cc:01:72:
14:66:3a:02:c3:f5:bc:c5:98:ca:2d:c7:e2:b0:b3:
3d:8f:ee:32:49:eb:4a:9a:c2:d1:59:b9:40:8b:9d:
22:3f:52:75:56:5d:43:6b:99:45:70:15:51:e6:50:
c2:4e:d0:85:3f:22:a0:b8:8a:ba:84:f2:c3:3a:47:
d1:5f:a4:81:c1:f8:67:14:4c:b5:35:22:06:3d:4e:
72:3c:5a:bc:01:d1:b7:93:ca:97:5f:b5:4e:e9:cf:
61:13:45:1b:67:5c:49:44:f8:65:4a:85:e7:ca:38:
f3:4c:ee:a7:de:48:34:ec:7f:71:55:e5:fd:cf:d7:
a7:e9:a1:53:ad:5b:7d:95:02:8b:6d:31:c9:52:60:
b3:c5:eb:56:3c:26:ad:79:3f:57:9d:4f:6c:0e:53:
a7:e5:df:72:ac:fe:33:2d:aa:84:13:17:66:fb:df:
4d:c0:32:4c:d5:14:33:d1:c5:d2:34:4a:08:36:bd:
be:61:f9:60:b8:d1:8d:34:c4:28:41:ab:72:dc:c3:
0d:b5:87:e5:be:f7:19:ff:05:95:f7:5f:6b:d9:26:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:66:30:38:81:07:72:D1:AC:2B:E1:44:1B:A9:8C:EE:0F:DD:22:79
X509v3 Authority Key Identifier:
keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:59:f2:90:dd:47:ee:4a:3d:f6:f1:cc:51:eb:68:4a:02:ce:
6b:c7:47:88:2e:9e:69:58:d1:89:f9:01:75:34:ca:55:fa:2e:
c5:59:4a:f2:e5:b7:24:a2:12:d0:cb:9a:86:f9:d5:3c:60:20:
b5:a1:c5:2d:2d:bb:09:81:33:0c:78:80:aa:fb:33:e8:a3:6d:
50:33:96:09:76:87:e1:0a:8e:31:0f:10:67:be:3d:f5:c2:0d:
57:2b:af:ea:1a:4a:8b:5e:85:4f:db:e6:26:41:cc:b6:67:37:
10:38:4e:7a:bf:d5:b1:32:e0:4f:cf:bb:0b:b7:4f:45:bc:38:
bb:ef:94:0a:58:82:fa:7f:e8:55:e4:d1:f4:5d:58:f7:1a:38:
c0:fc:f8:de:e4:a7:c7:da:8e:a0:1c:72:5e:55:9f:99:a2:cf:
c7:36:bc:38:1e:ae:d2:aa:20:90:4e:3f:c1:21:a0:cf:ac:29:
44:62:d2:11:82:54:0c:12:3a:80:e2:28:89:75:5e:1c:ad:45:
fc:05:e6:ec:a5:9a:86:9f:8d:c4:bc:5f:db:4b:cd:65:d5:18:
a1:60:9e:e1:ba:15:7b:ad:83:9f:e2:d6:99:ab:54:80:10:e9:
92:06:d2:80:4c:54:5c:36:30:02:a3:2e:91:0b:e4:4e:a6:60:
89:4d:36:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3VgZVG5uc+hkWZ0ik/BVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZDI2YWQ2ZjkxYmE0NDcyODE0YmFlNDg0YThkZjFmNjM0
YzMzNDEwHhcNMjUwNDI3MTMwMDQ4WhcNMjUwNDI4MTMwMDQ4WjAzMTEwLwYDVQQD
EyhiODY2MzAzODgxMDc3MmQxYWMyYmUxNDQxYmE5OGNlZTBmZGQyMjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYYVo2TInuPwkR+lWjCZbD7AaL8i
bRqyHE5NHl3i1RfpuUV1S/EFtgjMAXIUZjoCw/W8xZjKLcfisLM9j+4ySetKmsLR
WblAi50iP1J1Vl1Da5lFcBVR5lDCTtCFPyKguIq6hPLDOkfRX6SBwfhnFEy1NSIG
PU5yPFq8AdG3k8qXX7VO6c9hE0UbZ1xJRPhlSoXnyjjzTO6n3kg07H9xVeX9z9en
6aFTrVt9lQKLbTHJUmCzxetWPCateT9XnU9sDlOn5d9yrP4zLaqEExdm+99NwDJM
1RQz0cXSNEoINr2+YflguNGNNMQoQaty3MMNtYflvvcZ/wWV919r2SaAAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhmMDiBB3LRrCvhRBupjO4P3SJ5MB8GA1UdIwQY
MBaAFI/Satb5G6RHKBS65ISo3x9jTDNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajlKcTF2a2JwRWNvRkxya2hLamZIMk5NTTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZGFkOGYtYjkxOS00NWQxLWFmMTgt
NjM3NDJkMTlhMDEyLzEvajlKcTF2a2JwRWNvRkxya2hLamZIMk5NTTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jZGFkOGYtYjkxOS00NWQxLWFmMTgtNjM3NDJkMTlhMDEy
LzEvajlKcTF2a2JwRWNvRkxya2hLamZIMk5NTTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1nykN1H
7ko99vHMUetoSgLOa8dHiC6eaVjRifkBdTTKVfouxVlK8uW3JKIS0MuahvnVPGAg
taHFLS27CYEzDHiAqvsz6KNtUDOWCXaH4QqOMQ8QZ7499cINVyuv6hpKi16FT9vm
JkHMtmc3EDhOer/VsTLgT8+7C7dPRbw4u++UCliC+n/oVeTR9F1Y9xo4wPz43uSn
x9qOoBxyXlWfmaLPxza8OB6u0qogkE4/wSGgz6wpRGLSEYJUDBI6gOIoiXVeHK1F
/AXm7KWahp+NxLxf20vNZdUYoWCe4boVe62Dn+LWmatUgBDpkgbSgExUXDYwAqMu
kQvkTqZgiU02Pg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:20:24 2025 by rpki-client