Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier: il+CDMyNRkghq4MLEiGH8Fs0XdKuAsokMC5aQTPm8/w=
Subject key identifier: 25:37:96:0E:39:B2:76:DA:EC:F2:24:31:57:40:1A:D2:8B:A8:20:D6
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 0196789F0BA7CDD784A9C586A56E1DCC08B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number: 1229
Signing time: Sun 27 Apr 2025 19:00:11 +0000
Manifest this update: Sun 27 Apr 2025 19:00:11 +0000
Manifest next update: Mon 28 Apr 2025 19:00:11 +0000
Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: AX3f0Kp/jPxEzGt1HkkLzvRnuZg+aSBahYQMWETLc/c=)
2: bMRktPBk3GJGItNskNyUqcrOWmw.roa (hash: oN+XpyM7329DMObxCObtViAvj7EaNMyaASixYhlQlxY=)
3: qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa (hash: tu6gozK2xpe2ojLmfpogjmMhCMxCaqiedX62p8ai78g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:0b:a7:cd:d7:84:a9:c5:86:a5:6e:1d:cc:08:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Apr 27 19:00:11 2025 GMT
Not After : Apr 28 19:00:11 2025 GMT
Subject: CN=2537960e39b276daecf2243157401ad28ba820d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:30:63:04:55:89:8a:f5:8a:74:45:7d:36:f0:
36:f2:fe:81:8e:4e:31:f2:4a:0c:10:7b:3d:27:d0:
d7:1a:9d:d1:a3:21:c7:69:cc:f4:9f:89:e1:d7:dd:
a0:45:c8:62:d2:63:9e:cf:9c:8d:d3:84:b6:a6:3c:
d7:73:94:c9:22:bb:10:6d:d1:f2:68:cc:35:59:70:
44:ec:04:e1:50:29:2b:92:0e:a9:e0:21:64:9d:9b:
37:c5:5c:e7:fb:05:98:55:89:78:25:17:55:9d:dc:
4b:ef:de:76:99:99:e2:99:c3:b0:cc:e5:6d:46:bc:
09:10:75:3f:08:2b:86:86:09:42:c7:48:e1:01:e4:
97:59:60:3b:a2:24:aa:3e:e6:32:58:d1:36:56:91:
37:b2:dc:f7:2c:43:eb:25:20:98:de:d1:bb:50:f1:
06:11:e1:cd:1e:b7:84:25:88:f4:f3:8e:3a:f2:2e:
31:82:d6:34:f0:6c:b7:24:ff:9a:6c:bf:8f:81:a2:
1f:4c:0c:de:b5:e7:4b:30:10:09:13:20:e3:cb:18:
8e:f1:e7:9b:40:01:83:11:a6:b7:f1:a5:21:26:b2:
e0:f2:1b:f0:a9:dd:0d:31:ae:20:03:88:08:42:ab:
8f:1d:2b:ce:a0:2c:2f:56:d7:43:1b:b4:33:1c:92:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:37:96:0E:39:B2:76:DA:EC:F2:24:31:57:40:1A:D2:8B:A8:20:D6
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f3:b2:4a:41:53:16:13:ea:24:6b:83:cc:75:2d:b3:6b:d6:
63:d4:e2:bf:4a:79:73:f0:cc:b3:16:1e:af:d2:1f:16:e8:5c:
86:75:9e:f4:6e:01:93:c4:1a:6a:c0:1e:7b:ba:ae:f7:fc:93:
86:7a:08:8e:ca:20:10:e7:94:4c:17:cf:38:e2:50:d2:b9:dc:
b0:f0:cc:d5:a0:78:4d:b2:99:a2:7b:e8:5d:06:cc:19:59:81:
07:46:9e:f6:c9:c9:e8:4a:9f:b0:a3:d7:b4:43:74:b2:9e:03:
cf:79:22:1b:96:21:71:91:6e:4d:ed:31:20:9b:4b:8c:5a:5c:
d4:67:d2:7b:d2:cb:30:3d:f9:dc:56:7c:40:38:32:c2:49:12:
0e:f0:5f:1a:f1:6f:90:e4:cd:d5:a1:b6:5f:87:a1:93:0c:72:
60:8c:56:a7:8c:f3:82:41:f4:2b:e1:89:fa:1c:9b:43:3f:51:
70:26:bc:a1:c0:28:20:a2:87:64:4b:88:b0:f4:62:da:0f:93:
bb:74:9b:43:b7:56:9d:fa:ed:6c:2c:08:2e:45:f5:42:46:0a:
88:e6:35:5e:0e:fe:02:6d:0c:0a:e4:aa:d3:2c:22:b8:b6:c0:
58:3b:5a:62:17:0f:61:a3:56:b4:93:87:a4:67:0c:8d:ab:cf:
1f:85:00:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4nwunzdeEqcWGpW4dzAi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODAyNjg1ZGE3MzRiMTU3YTJkYjljY2ZmNzZkZDRlNDg5
MTE5MjgwHhcNMjUwNDI3MTkwMDExWhcNMjUwNDI4MTkwMDExWjAzMTEwLwYDVQQD
EygyNTM3OTYwZTM5YjI3NmRhZWNmMjI0MzE1NzQwMWFkMjhiYTgyMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DBjBFWJivWKdEV9NvA28v6Bjk4x
8koMEHs9J9DXGp3RoyHHacz0n4nh192gRchi0mOez5yN04S2pjzXc5TJIrsQbdHy
aMw1WXBE7AThUCkrkg6p4CFknZs3xVzn+wWYVYl4JRdVndxL7952mZnimcOwzOVt
RrwJEHU/CCuGhglCx0jhAeSXWWA7oiSqPuYyWNE2VpE3stz3LEPrJSCY3tG7UPEG
EeHNHreEJYj084468i4xgtY08Gy3JP+abL+PgaIfTAzetedLMBAJEyDjyxiO8eeb
QAGDEaa38aUhJrLg8hvwqd0NMa4gA4gIQquPHSvOoCwvVtdDG7QzHJJnVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU3lg45snba7PIkMVdAGtKLqCDWMB8GA1UdIwQY
MBaAFCeAJoXac0sVei25zP923U5IkRkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEt
MTIzYTg2ZDk0ODE4LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEtMTIzYTg2ZDk0ODE4
LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPOySkFT
FhPqJGuDzHUts2vWY9Tiv0p5c/DMsxYer9IfFuhchnWe9G4Bk8QaasAee7qu9/yT
hnoIjsogEOeUTBfPOOJQ0rncsPDM1aB4TbKZonvoXQbMGVmBB0ae9snJ6EqfsKPX
tEN0sp4Dz3kiG5YhcZFuTe0xIJtLjFpc1GfSe9LLMD353FZ8QDgywkkSDvBfGvFv
kOTN1aG2X4ehkwxyYIxWp4zzgkH0K+GJ+hybQz9RcCa8ocAoIKKHZEuIsPRi2g+T
u3SbQ7dWnfrtbCwILkX1QkYKiOY1Xg7+Am0MCuSq0ywiuLbAWDtaYhcPYaNWtJOH
pGcMjavPH4UAJg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:50:51 2025 by rpki-client