Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft
File: 1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft (raw, json)
Hash identifier: 0d1edR/0hC1NorJcbXFKNDlDV0sQqeX5CF4lsENEJ1s=
Subject key identifier: 61:5A:92:C1:7F:59:D9:51:D2:CD:9E:50:7E:69:D1:1B:D7:A1:56:09
Authority key identifier: D6:39:CD:75:53:BD:7E:A3:CD:88:EA:C0:26:05:EA:A4:30:6D:8F:27
Certificate issuer: /CN=d639cd7553bd7ea3cd88eac02605eaa4306d8f27
Certificate serial: 0196937280B55446971005F09A03FDBA4A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jnNdVO9fqPNiOrAJgXqpDBtjyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft
Manifest number: 0721
Signing time: Sat 03 May 2025 00:01:16 +0000
Manifest this update: Sat 03 May 2025 00:01:16 +0000
Manifest next update: Sun 04 May 2025 00:01:16 +0000
Files and hashes: 1: 1jnNdVO9fqPNiOrAJgXqpDBtjyc.crl (hash: VJUoe8T2Tefu77dXrQZTtn29M2Z2grVypYKdZD51qAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jnNdVO9fqPNiOrAJgXqpDBtjyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:72:80:b5:54:46:97:10:05:f0:9a:03:fd:ba:4a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d639cd7553bd7ea3cd88eac02605eaa4306d8f27
Validity
Not Before: May 3 00:01:16 2025 GMT
Not After : May 4 00:01:16 2025 GMT
Subject: CN=615a92c17f59d951d2cd9e507e69d11bd7a15609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:87:f0:48:9f:2c:aa:47:4f:3b:1e:fa:2b:
f2:be:8a:e7:a1:00:9e:fd:ca:b9:16:9a:2d:e3:8b:
9c:8d:92:bd:5c:b5:dd:24:08:69:fa:e4:99:57:85:
89:16:11:c2:e1:e4:d1:55:53:f2:93:c6:69:d0:30:
6d:6c:62:8f:70:34:9e:da:8c:99:63:61:a6:29:94:
49:65:52:c4:3d:a2:3b:e1:79:09:f6:20:c7:94:49:
58:ba:d7:43:e0:2d:6a:3f:ee:7a:da:ae:1e:70:58:
24:4f:ba:07:d6:db:3d:91:37:00:b5:33:a6:d7:4f:
dd:7f:a2:92:72:c7:a3:54:7c:24:9b:30:28:97:36:
59:54:a7:bd:dc:cb:7b:d9:52:66:45:97:3b:ca:9c:
fb:d4:59:29:b0:74:9e:5d:4a:96:93:65:89:6c:ac:
e8:5d:20:a7:04:9a:b6:fb:ab:39:73:6f:ed:9c:2f:
6c:f1:68:3f:f7:a5:a0:70:9c:67:c5:54:cf:e9:8b:
10:7b:9a:b5:f1:5c:7d:78:3a:24:1b:d8:55:9a:8a:
d8:d1:6b:9a:48:64:a9:91:8f:a9:a9:32:16:26:70:
2b:39:f2:3e:e1:1e:40:1f:d5:da:a7:d0:76:9e:cd:
4c:a4:f1:10:82:46:9b:61:56:07:b3:aa:a2:f1:f7:
31:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5A:92:C1:7F:59:D9:51:D2:CD:9E:50:7E:69:D1:1B:D7:A1:56:09
X509v3 Authority Key Identifier:
keyid:D6:39:CD:75:53:BD:7E:A3:CD:88:EA:C0:26:05:EA:A4:30:6D:8F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jnNdVO9fqPNiOrAJgXqpDBtjyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7c:db:f5:a0:6b:91:a6:3c:47:94:7b:d1:57:e4:d4:15:dd:
67:e7:e8:46:81:d5:83:16:7a:8a:02:4f:81:57:8b:13:a9:61:
ea:41:2d:27:ea:80:a4:82:fc:90:33:25:15:4e:50:46:73:23:
89:96:e9:b1:c1:af:60:7c:65:5d:b4:93:69:83:ba:6e:c1:75:
0b:71:af:38:97:e3:df:f9:db:eb:4d:a4:ab:fe:88:16:a6:59:
ea:a8:18:76:7a:ef:8b:c0:a5:6c:64:ad:a8:f9:75:75:25:72:
62:8a:da:69:84:0d:65:9f:9c:9f:c0:82:dc:dd:44:27:2a:99:
c8:2f:a0:fd:9e:52:56:04:da:c5:ab:5d:f8:ba:b0:e4:99:46:
05:c3:b3:8d:34:15:96:99:7e:8b:8f:9d:28:b1:78:2b:e4:34:
95:e9:32:68:be:74:85:83:f4:4f:65:c0:18:5b:e2:9e:04:f4:
b5:5d:3c:79:8e:d2:a9:5d:84:5f:21:4b:3c:49:63:bc:f9:2c:
18:e9:d0:68:dd:ac:3d:b4:65:06:a3:82:46:94:01:db:5c:41:
0f:46:d2:0f:34:1c:52:3b:1c:81:26:ae:db:fc:fd:42:33:17:
ca:f8:09:a7:64:7d:4c:1d:6b:0a:5b:13:29:19:7c:03:90:e9:
39:81:19:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTcoC1VEaXEAXwmgP9ukoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MzljZDc1NTNiZDdlYTNjZDg4ZWFjMDI2MDVlYWE0MzA2
ZDhmMjcwHhcNMjUwNTAzMDAwMTE2WhcNMjUwNTA0MDAwMTE2WjAzMTEwLwYDVQQD
Eyg2MTVhOTJjMTdmNTlkOTUxZDJjZDllNTA3ZTY5ZDExYmQ3YTE1NjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWOH8EifLKpHTzse+ivyvornoQCe
/cq5Fpot44ucjZK9XLXdJAhp+uSZV4WJFhHC4eTRVVPyk8Zp0DBtbGKPcDSe2oyZ
Y2GmKZRJZVLEPaI74XkJ9iDHlElYutdD4C1qP+562q4ecFgkT7oH1ts9kTcAtTOm
10/df6KScsejVHwkmzAolzZZVKe93Mt72VJmRZc7ypz71FkpsHSeXUqWk2WJbKzo
XSCnBJq2+6s5c2/tnC9s8Wg/96WgcJxnxVTP6YsQe5q18Vx9eDokG9hVmorY0Wua
SGSpkY+pqTIWJnArOfI+4R5AH9Xap9B2ns1MpPEQgkabYVYHs6qi8fcxYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFaksF/WdlR0s2eUH5p0RvXoVYJMB8GA1UdIwQY
MBaAFNY5zXVTvX6jzYjqwCYF6qQwbY8nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWpuTmRWTzlmcVBOaU9yQUpnWHFwREJ0anljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMDYzZGQtYTU1MS00MTY0LTgxMDYt
MTE5MDExZjkxZmVjLzEvMWpuTmRWTzlmcVBOaU9yQUpnWHFwREJ0anljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xMDYzZGQtYTU1MS00MTY0LTgxMDYtMTE5MDExZjkxZmVj
LzEvMWpuTmRWTzlmcVBOaU9yQUpnWHFwREJ0anljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3zb9aBr
kaY8R5R70Vfk1BXdZ+foRoHVgxZ6igJPgVeLE6lh6kEtJ+qApIL8kDMlFU5QRnMj
iZbpscGvYHxlXbSTaYO6bsF1C3GvOJfj3/nb602kq/6IFqZZ6qgYdnrvi8ClbGSt
qPl1dSVyYoraaYQNZZ+cn8CC3N1EJyqZyC+g/Z5SVgTaxatd+Lqw5JlGBcOzjTQV
lpl+i4+dKLF4K+Q0lekyaL50hYP0T2XAGFvingT0tV08eY7SqV2EXyFLPEljvPks
GOnQaN2sPbRlBqOCRpQB21xBD0bSDzQcUjscgSau2/z9QjMXyvgJp2R9TB1rClsT
KRl8A5DpOYEZFg==
-----END CERTIFICATE-----
Generated at Sat May 3 02:27:23 2025 by rpki-client