Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: Ltk+jSn76XP7o5ybMeZ70+OUdxnf6xJtGrSVo8QaTJY=
Subject key identifier: AF:87:4A:70:82:DD:2A:47:06:16:86:D6:4B:C7:15:83:27:98:0A:58
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 01968247711C181E16DECBC141A018D1242A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 151E
Signing time: Tue 29 Apr 2025 16:00:42 +0000
Manifest this update: Tue 29 Apr 2025 16:00:42 +0000
Manifest next update: Wed 30 Apr 2025 16:00:42 +0000
Files and hashes: 1: JXdwz8Kh5s8D4fZUiI7MP0vHa-g.roa (hash: aGy7W4wvxfuA3DMrWGQip2XzAfgBaKwU1Q707mDCSqY=)
2: W1sV2SXycnhhhyOvaUwWx8t1ifs.roa (hash: HcxcuKRHaI2x0IIJ12wkt3W53ioexeV4UAL0OsdORr4=)
3: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: aFTcMNlhp2KhZca+oL7FNt008govdnMoEfLkE8TYdSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:71:1c:18:1e:16:de:cb:c1:41:a0:18:d1:24:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Apr 29 16:00:42 2025 GMT
Not After : Apr 30 16:00:42 2025 GMT
Subject: CN=af874a7082dd2a47061686d64bc7158327980a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:71:d2:28:f6:e0:9e:72:a1:0c:fd:5b:1c:10:
ca:f6:6b:47:58:f6:68:10:5c:b4:b5:fe:69:5f:f6:
bf:28:09:b9:c0:3b:99:3d:75:d3:12:5e:eb:22:5a:
8f:1c:6d:61:ab:2c:c4:f0:2b:3c:8b:24:a1:f4:4c:
05:96:73:56:56:82:9c:6d:bb:80:21:d2:b2:b0:fa:
1c:a9:42:1a:a4:05:d0:db:e4:32:4e:26:4d:ee:f5:
f7:cc:5d:1a:80:ea:88:17:7f:a3:02:eb:4f:94:ae:
f7:ab:ba:89:db:78:a1:bd:2a:97:a3:1c:11:fd:cc:
d9:6d:29:a1:a4:33:ce:3d:89:ee:15:36:1c:05:b0:
f9:bf:6f:d9:7f:05:f1:e9:26:d6:4f:91:49:80:6a:
f9:70:a1:6d:01:de:12:95:cd:c3:46:21:52:77:72:
0a:94:a0:1b:bf:67:04:10:5f:bb:90:05:fa:df:59:
0d:e7:9a:fa:7c:fc:c7:dd:48:74:7a:a9:08:4f:08:
b4:85:b3:a5:3d:b4:be:61:51:e6:e5:e8:d7:36:9c:
f8:3e:ef:aa:82:2e:aa:32:84:2c:f8:f2:ce:ed:db:
3a:26:dc:59:52:72:30:41:17:2e:40:44:bc:c9:59:
41:fc:23:be:ca:25:34:30:f5:53:97:e4:ea:f4:03:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:87:4A:70:82:DD:2A:47:06:16:86:D6:4B:C7:15:83:27:98:0A:58
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:52:27:5f:8d:ce:16:a0:15:7a:8a:c7:56:d9:4e:fd:fe:fb:
ca:41:50:ee:5e:79:d6:53:d7:d6:2d:1b:3b:81:97:8e:b9:fe:
11:89:4c:8d:52:60:c7:11:7f:6c:a0:88:45:98:3e:66:b1:fe:
7c:d3:9e:c6:19:67:44:d2:35:0f:79:1a:19:3a:c0:46:37:53:
d9:51:3f:0a:7b:4d:7d:ce:9f:45:a8:eb:8c:d1:c7:c5:bc:6a:
03:0d:08:51:63:3f:7e:eb:d6:4e:a5:6e:f7:83:44:a7:02:a1:
38:5b:d4:7a:e2:05:93:5b:00:3c:13:15:fa:35:a7:1d:a5:59:
ae:8e:79:0b:90:4d:0d:67:a8:a0:36:59:b4:e5:ba:36:80:98:
9a:a0:d9:88:62:11:5a:b2:8d:56:e0:f7:60:9f:f0:27:0c:ca:
31:30:35:6c:cc:7a:4e:97:60:8d:c3:66:1a:60:62:9e:68:0b:
c3:20:6b:36:8b:53:6a:18:9e:4b:da:7a:b5:71:af:b5:20:3f:
cc:1b:be:ed:3e:0f:ec:26:b8:37:bf:c8:ec:1c:ce:0d:80:dc:
80:3d:af:07:93:8d:7e:79:e3:8b:29:82:4e:c8:e9:c1:f2:1c:
8f:e7:e4:f6:51:e0:88:10:bf:76:b0:62:1d:e4:df:00:2c:de:
4f:b0:35:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCR3EcGB4W3svBQaAY0SQqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZWU3YTNhZDE1MmJiODcyNWE3ZGI5YmI3NTIwODA0YjZm
MTE1NWYwHhcNMjUwNDI5MTYwMDQyWhcNMjUwNDMwMTYwMDQyWjAzMTEwLwYDVQQD
EyhhZjg3NGE3MDgyZGQyYTQ3MDYxNjg2ZDY0YmM3MTU4MzI3OTgwYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43HSKPbgnnKhDP1bHBDK9mtHWPZo
EFy0tf5pX/a/KAm5wDuZPXXTEl7rIlqPHG1hqyzE8Cs8iySh9EwFlnNWVoKcbbuA
IdKysPocqUIapAXQ2+QyTiZN7vX3zF0agOqIF3+jAutPlK73q7qJ23ihvSqXoxwR
/czZbSmhpDPOPYnuFTYcBbD5v2/ZfwXx6SbWT5FJgGr5cKFtAd4Slc3DRiFSd3IK
lKAbv2cEEF+7kAX631kN55r6fPzH3Uh0eqkITwi0hbOlPbS+YVHm5ejXNpz4Pu+q
gi6qMoQs+PLO7ds6JtxZUnIwQRcuQES8yVlB/CO+yiU0MPVTl+Tq9AP0JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+HSnCC3SpHBhaG1kvHFYMnmApYMB8GA1UdIwQY
MBaAFI7uejrRUruHJafbm7dSCAS28RVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanU1Nk90RlN1NGNscDl1YnQxSUlCTGJ4RlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83OTc5YjItYzNkOS00ZjMzLWEwOWYt
NDk1OTFhZmUxN2YwLzEvanU1Nk90RlN1NGNscDl1YnQxSUlCTGJ4RlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83OTc5YjItYzNkOS00ZjMzLWEwOWYtNDk1OTFhZmUxN2Yw
LzEvanU1Nk90RlN1NGNscDl1YnQxSUlCTGJ4RlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1InX43O
FqAVeorHVtlO/f77ykFQ7l551lPX1i0bO4GXjrn+EYlMjVJgxxF/bKCIRZg+ZrH+
fNOexhlnRNI1D3kaGTrARjdT2VE/CntNfc6fRajrjNHHxbxqAw0IUWM/fuvWTqVu
94NEpwKhOFvUeuIFk1sAPBMV+jWnHaVZro55C5BNDWeooDZZtOW6NoCYmqDZiGIR
WrKNVuD3YJ/wJwzKMTA1bMx6TpdgjcNmGmBinmgLwyBrNotTahieS9p6tXGvtSA/
zBu+7T4P7Ca4N7/I7BzODYDcgD2vB5ONfnnjiymCTsjpwfIcj+fk9lHgiBC/drBi
HeTfACzeT7A11g==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:11:03 2025 by rpki-client