Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
File: jgRb_s0rviTTP1MJ20fIqnejsQw.mft (raw, json)
Hash identifier: OkItxZ2MdrmWb3ipAaSxXkFk/kUrn0XXlm1ezQeBPUM=
Subject key identifier: F8:84:AF:8F:D5:B1:36:C5:92:D0:EF:E0:E8:9A:8F:AA:3B:72:FB:30
Authority key identifier: 8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
Certificate issuer: /CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Certificate serial: 019676B13FDA5CE119C981720051F0CBF26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
Manifest number: 11C5
Signing time: Sun 27 Apr 2025 10:00:49 +0000
Manifest this update: Sun 27 Apr 2025 10:00:49 +0000
Manifest next update: Mon 28 Apr 2025 10:00:49 +0000
Files and hashes: 1: gdU2cKMCd_BtDDJgSD2HY00mPGM.roa (hash: RJwgl5pMoPPfHnsTPxLoSvX0DBqj4aREjSsl8MZfpXk=)
2: jgRb_s0rviTTP1MJ20fIqnejsQw.crl (hash: 9WdoQdVTBU3gYVhBX0OOuAUpA4RZSNHt0ORTyeNcZ+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:3f:da:5c:e1:19:c9:81:72:00:51:f0:cb:f2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Validity
Not Before: Apr 27 10:00:49 2025 GMT
Not After : Apr 28 10:00:49 2025 GMT
Subject: CN=f884af8fd5b136c592d0efe0e89a8faa3b72fb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:80:79:82:3c:e0:84:5f:1b:ab:c3:1c:e6:
dd:98:5c:89:59:61:9f:e1:7d:6a:6b:34:50:66:d8:
e0:85:14:0c:34:37:ab:5d:8a:5f:c5:39:06:e1:61:
1d:23:c1:ec:8d:bb:ff:79:b9:35:7e:1f:69:50:4e:
91:ee:bf:f8:0d:df:3d:e2:ba:ee:53:30:11:f8:f6:
47:ed:37:a3:1e:76:66:04:d4:b1:9e:e2:a6:83:a6:
c2:f8:47:e6:d8:bf:3e:a5:8a:f5:de:00:e3:c2:ee:
b1:74:c6:b5:1f:c1:f6:b0:f2:d1:81:31:13:d8:3e:
7c:16:4e:03:a7:26:9b:73:8f:b1:39:81:dc:7c:84:
f4:92:f1:9a:27:e7:4d:de:d7:89:8d:fd:90:ed:4c:
31:6d:3a:a5:78:ac:50:29:ee:b5:56:18:fd:d2:5d:
f0:5b:18:f8:11:01:70:d6:29:b9:77:07:b8:91:df:
9c:58:12:4f:f4:8e:68:c6:ad:f4:e3:12:0e:2c:ed:
7e:81:af:01:90:23:94:0f:c8:94:85:0c:50:80:80:
ad:ee:42:7f:74:bc:0f:b1:fc:8c:1b:ab:59:e3:27:
b0:c2:da:51:39:59:f7:1d:8c:c9:0b:96:92:cc:4c:
ee:ad:86:26:a0:0a:3f:29:f4:81:c4:c0:24:51:b9:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:84:AF:8F:D5:B1:36:C5:92:D0:EF:E0:E8:9A:8F:AA:3B:72:FB:30
X509v3 Authority Key Identifier:
keyid:8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:41:e9:da:b0:bf:f2:e3:6d:62:f5:fb:51:47:11:5d:2a:d5:
54:5c:9e:23:40:c8:e9:4a:6b:ba:ce:df:9a:cb:cd:d7:52:d8:
7c:be:24:cd:00:0d:e7:10:fb:d0:ac:95:c6:e6:04:41:72:96:
c1:74:22:95:b0:2e:ec:d8:4c:c1:88:0e:a5:96:55:04:36:9f:
ca:c2:d9:d9:bc:a8:e8:9c:fd:a3:3d:c8:f2:20:28:68:77:7e:
7c:7d:49:1e:33:9f:e3:0a:4f:98:22:3e:bb:3b:48:63:45:13:
e6:d6:6a:11:f0:e4:a2:36:57:9b:80:c8:09:08:4e:6e:25:2e:
52:34:45:c6:d5:12:2a:15:66:72:af:7c:ef:c7:36:ed:dc:ef:
40:72:88:13:0b:6e:99:9f:ad:7a:9c:85:29:7a:d5:e4:11:87:
60:46:1e:bd:b0:ef:fa:01:17:c3:c0:1a:15:10:3d:dc:33:d4:
04:4d:83:68:56:73:8b:7b:98:80:bf:3f:da:cd:fd:33:7c:c7:
45:f0:92:50:28:1d:40:1a:f4:24:59:39:45:03:a8:13:9b:01:
aa:d7:4a:49:16:da:44:61:17:76:16:08:cc:38:99:dd:38:fc:
67:93:18:4d:d6:13:6f:9a:96:d4:41:29:93:7a:e9:9b:a8:00:
de:e2:9f:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sT/aXOEZyYFyAFHwy/JqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMDQ1YmZlY2QyYmJlMjRkMzNmNTMwOWRiNDdjOGFhNzdh
M2IxMGMwHhcNMjUwNDI3MTAwMDQ5WhcNMjUwNDI4MTAwMDQ5WjAzMTEwLwYDVQQD
EyhmODg0YWY4ZmQ1YjEzNmM1OTJkMGVmZTBlODlhOGZhYTNiNzJmYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8aAeYI84IRfG6vDHObdmFyJWWGf
4X1qazRQZtjghRQMNDerXYpfxTkG4WEdI8Hsjbv/ebk1fh9pUE6R7r/4Dd894rru
UzAR+PZH7TejHnZmBNSxnuKmg6bC+Efm2L8+pYr13gDjwu6xdMa1H8H2sPLRgTET
2D58Fk4Dpyabc4+xOYHcfIT0kvGaJ+dN3teJjf2Q7UwxbTqleKxQKe61Vhj90l3w
Wxj4EQFw1im5dwe4kd+cWBJP9I5oxq304xIOLO1+ga8BkCOUD8iUhQxQgICt7kJ/
dLwPsfyMG6tZ4yewwtpROVn3HYzJC5aSzEzurYYmoAo/KfSBxMAkUbkgYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiEr4/VsTbFktDv4Oiaj6o7cvswMB8GA1UdIwQY
MBaAFI4EW/7NK74k0z9TCdtHyKp3o7EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZTU5YTEtMmE1Ni00Njk0LWI0Yzct
ZDgwYjNjMWY5ZDczLzEvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZTU5YTEtMmE1Ni00Njk0LWI0YzctZDgwYjNjMWY5ZDcz
LzEvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUHp2rC/
8uNtYvX7UUcRXSrVVFyeI0DI6Uprus7fmsvN11LYfL4kzQAN5xD70KyVxuYEQXKW
wXQilbAu7NhMwYgOpZZVBDafysLZ2byo6Jz9oz3I8iAoaHd+fH1JHjOf4wpPmCI+
uztIY0UT5tZqEfDkojZXm4DICQhObiUuUjRFxtUSKhVmcq9878c27dzvQHKIEwtu
mZ+tepyFKXrV5BGHYEYevbDv+gEXw8AaFRA93DPUBE2DaFZzi3uYgL8/2s39M3zH
RfCSUCgdQBr0JFk5RQOoE5sBqtdKSRbaRGEXdhYIzDiZ3Tj8Z5MYTdYTb5qW1EEp
k3rpm6gA3uKfmw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:40:51 2025 by rpki-client