Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File: jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier: yqYsjQnArgLDhKqWqvKVhSLu1WdD7Ml5wA2xp0Kbf70=
Subject key identifier: 41:B5:46:34:2A:DC:25:A8:25:EB:5E:01:7E:6C:1C:FC:D3:AC:3F:25
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial: 0196760BF9329AD837039CA00AD439B002F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number: 14A2
Signing time: Sun 27 Apr 2025 07:00:18 +0000
Manifest this update: Sun 27 Apr 2025 07:00:18 +0000
Manifest next update: Mon 28 Apr 2025 07:00:18 +0000
Files and hashes: 1: BCN4ZtExcExoi2ZpeY5zxnXpqZs.roa (hash: J4RuOv92rnUwTT9ZA2LqfolBgIUjjRVEb11UiMubpN8=)
2: KQ8djxwDZnjEjwDeGenO8z4CQfE.roa (hash: n8AngvQ0fquzsxztAqeeyBCrmmkZMY5Guz/NYsJtM+U=)
3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: HkMwvQazTJwccKvyrTyHDUlyoM2jo5HF581dSj1z6Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:f9:32:9a:d8:37:03:9c:a0:0a:d4:39:b0:02:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Validity
Not Before: Apr 27 07:00:18 2025 GMT
Not After : Apr 28 07:00:18 2025 GMT
Subject: CN=41b546342adc25a825eb5e017e6c1cfcd3ac3f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:fa:69:f3:c8:db:c7:b8:04:e1:63:28:ec:
33:fe:d9:84:b6:cb:d5:e2:a1:4c:27:bd:e1:3b:28:
a3:b9:4c:df:d7:b0:7d:e0:11:79:bf:39:fe:cd:de:
ac:8f:23:91:db:16:f1:3c:0a:66:84:ae:47:28:c8:
3c:13:e4:ac:2e:d1:d4:75:ce:19:72:ba:49:7b:0d:
96:54:c8:51:54:18:bc:46:c8:dc:3a:c4:b6:d9:11:
1f:da:53:76:82:1a:ee:e8:a0:0b:58:0f:7e:42:87:
d2:c0:39:e2:06:5f:76:05:50:f0:ca:c4:92:2e:14:
f0:81:76:ca:94:6f:b8:35:b0:bd:a0:f3:f8:de:eb:
32:07:3a:ba:3e:2d:8c:39:ce:2d:b0:17:3d:0d:ce:
4e:12:4f:59:83:e2:c0:0b:7b:98:cf:4c:4f:4c:c6:
7e:2c:f2:67:94:d8:9f:51:8c:89:c1:3a:22:fb:1e:
dc:43:15:27:a6:d9:19:40:bd:f7:79:28:7d:80:3a:
27:9c:2a:d7:35:4d:d5:02:b8:af:b0:80:25:56:3b:
b4:1d:d9:fd:19:a3:e5:05:a6:c8:a1:9e:8b:d6:17:
7d:76:5d:d7:9f:40:3e:6c:66:ee:cc:f9:91:f4:9d:
06:04:23:41:03:d7:13:a3:6a:c6:cb:92:55:f4:e3:
15:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B5:46:34:2A:DC:25:A8:25:EB:5E:01:7E:6C:1C:FC:D3:AC:3F:25
X509v3 Authority Key Identifier:
keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:69:a1:0b:5c:b9:7f:af:25:22:5a:62:27:c1:1f:1e:9e:1b:
9d:34:e6:55:59:be:b0:59:84:5c:40:7b:3b:43:55:52:98:ca:
be:0c:e2:0b:07:af:af:c1:b6:14:45:31:26:c1:46:55:f0:c4:
c2:d6:ca:86:36:9f:ae:85:a1:88:47:67:af:c9:aa:f9:eb:1c:
27:da:aa:83:47:f9:61:4d:b9:7d:f8:8b:1a:6f:94:51:b9:2a:
49:87:37:fb:e8:f9:61:45:35:63:c9:dc:4d:19:e8:6d:ed:06:
de:23:b0:fe:31:af:70:3f:99:85:17:dd:92:57:db:28:92:69:
d4:04:fa:ab:f0:0f:fc:12:3c:33:15:fc:b2:67:bd:46:a1:4e:
68:39:fb:df:2e:40:01:3c:54:de:9c:15:65:fc:30:e2:44:69:
3f:45:01:e0:04:bc:e2:81:f5:49:29:0f:ea:6d:b4:c7:8f:5b:
7e:fd:6d:49:c6:f2:54:ba:00:f4:43:92:0e:06:f4:0a:9d:d0:
66:93:e0:93:a5:5c:4b:97:9e:2c:ab:10:96:61:f1:54:10:72:
0a:a2:ec:eb:80:33:88:93:1c:0f:4f:fc:16:8e:b7:72:c9:b5:
15:19:1c:fa:91:79:13:0c:2c:1b:6a:ed:fc:8a:09:e3:e9:3e:
46:a7:f2:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2C/kymtg3A5ygCtQ5sAL3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMGM1NGIzYWFlMjUxOTE1ZmZjOThiZDM0YTU1MDE4MWZm
YWI0OWEwHhcNMjUwNDI3MDcwMDE4WhcNMjUwNDI4MDcwMDE4WjAzMTEwLwYDVQQD
Eyg0MWI1NDYzNDJhZGMyNWE4MjVlYjVlMDE3ZTZjMWNmY2QzYWMzZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RT6afPI28e4BOFjKOwz/tmEtsvV
4qFMJ73hOyijuUzf17B94BF5vzn+zd6sjyOR2xbxPApmhK5HKMg8E+SsLtHUdc4Z
crpJew2WVMhRVBi8RsjcOsS22REf2lN2ghru6KALWA9+QofSwDniBl92BVDwysSS
LhTwgXbKlG+4NbC9oPP43usyBzq6Pi2MOc4tsBc9Dc5OEk9Zg+LAC3uYz0xPTMZ+
LPJnlNifUYyJwToi+x7cQxUnptkZQL33eSh9gDonnCrXNU3VArivsIAlVju0Hdn9
GaPlBabIoZ6L1hd9dl3Xn0A+bGbuzPmR9J0GBCNBA9cTo2rGy5JV9OMVXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEG1RjQq3CWoJeteAX5sHPzTrD8lMB8GA1UdIwQY
MBaAFI4MVLOq4lGRX/yYvTSlUBgf+rSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMt
YmYxZTFkZTJlYTYzLzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMtYmYxZTFkZTJlYTYz
LzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2mhC1y5
f68lIlpiJ8EfHp4bnTTmVVm+sFmEXEB7O0NVUpjKvgziCwevr8G2FEUxJsFGVfDE
wtbKhjafroWhiEdnr8mq+escJ9qqg0f5YU25ffiLGm+UUbkqSYc3++j5YUU1Y8nc
TRnobe0G3iOw/jGvcD+ZhRfdklfbKJJp1AT6q/AP/BI8MxX8sme9RqFOaDn73y5A
ATxU3pwVZfww4kRpP0UB4AS84oH1SSkP6m20x49bfv1tScbyVLoA9EOSDgb0Cp3Q
ZpPgk6VcS5eeLKsQlmHxVBByCqLs64AziJMcD0/8Fo63csm1FRkc+pF5EwwsG2rt
/IoJ4+k+RqfyjQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:15:15 2025 by rpki-client