Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
File: j6L4iSbgvYQBxzztt36ZyU3MUtc.mft (raw, json)
Hash identifier: l0+UnRjXPE6iJmfE0WIt4g3U72n+fQ+NPYMMoeqoUcY=
Subject key identifier: 41:57:61:6F:C6:85:8C:FD:AA:0C:84:FA:6A:F1:E2:73:FE:17:A4:AF
Authority key identifier: 8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
Certificate issuer: /CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Certificate serial: 01967ED888A5621D4DF757B2CC165CE36168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
Manifest number: 136F
Signing time: Tue 29 Apr 2025 00:00:41 +0000
Manifest this update: Tue 29 Apr 2025 00:00:41 +0000
Manifest next update: Wed 30 Apr 2025 00:00:41 +0000
Files and hashes: 1: hqd990q1gLSW7SBs-f4MtsS4OUs.roa (hash: Cj5NNPUEfRQP2HpFQ4Vq0r88rz0ljjQnf6HR7Q/0ozE=)
2: j6L4iSbgvYQBxzztt36ZyU3MUtc.crl (hash: Ll3J2Rkk2i+DvO9bIxaBuD9/pzyuaAuJ1a+LzZ1twDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:88:a5:62:1d:4d:f7:57:b2:cc:16:5c:e3:61:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Validity
Not Before: Apr 29 00:00:41 2025 GMT
Not After : Apr 30 00:00:41 2025 GMT
Subject: CN=4157616fc6858cfdaa0c84fa6af1e273fe17a4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:a5:4d:67:1c:7f:ff:74:c4:83:d6:d6:e2:
9e:12:3d:fc:75:41:ec:0e:99:a4:f8:5e:16:43:8c:
6c:cf:b0:da:76:6c:e8:d4:77:33:f5:59:b1:ff:68:
51:ad:b2:3f:93:f5:8d:72:08:90:95:47:da:1c:05:
66:d6:31:4e:df:9b:50:7f:95:d1:3e:d9:5d:6f:ef:
4b:10:ec:ad:85:8b:58:a9:8f:ed:f9:43:02:cd:c6:
c3:75:2c:13:f4:b2:5a:f6:08:9d:51:7e:89:03:21:
c9:a6:48:19:8d:31:b5:57:18:7d:5c:fd:00:17:7e:
af:ab:f0:ce:44:35:df:fb:c1:7e:b2:86:46:32:92:
34:02:8c:54:e7:b3:cb:0c:cf:95:f0:fd:97:63:cb:
d2:f5:71:69:be:ae:c8:78:0f:fb:6f:dc:b9:6f:8d:
66:d5:dd:ff:bf:16:c8:e7:90:1d:15:e1:7b:36:19:
c4:23:9d:ff:be:6b:ed:c8:a7:ec:c7:66:75:ae:70:
d3:f5:46:9f:04:b3:4d:54:fc:33:7e:4f:7a:7c:fb:
45:d2:ff:a5:45:83:91:2c:41:f9:63:e1:64:e1:d6:
cf:59:01:a4:49:e4:4d:5c:ad:96:e7:5f:c8:4f:03:
7e:fa:f8:8a:9a:05:26:9f:39:3b:c9:df:56:c7:84:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:61:6F:C6:85:8C:FD:AA:0C:84:FA:6A:F1:E2:73:FE:17:A4:AF
X509v3 Authority Key Identifier:
keyid:8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7b:0f:64:ec:2c:c7:01:3f:ca:94:39:51:95:e6:2a:80:cd:
c1:c6:f5:59:ca:57:62:6e:2a:c8:3f:cd:94:ff:e3:06:9a:d1:
16:9b:64:f8:7d:68:b6:e7:14:f7:fc:c8:06:13:84:25:9e:3b:
f2:09:54:0f:f5:ad:70:ad:1b:d4:d6:23:ce:00:51:d1:ac:12:
6f:a1:7e:d2:b9:3f:dc:25:3c:3c:77:d5:0e:1f:82:f5:88:6c:
fd:e5:89:8c:38:c9:75:ed:2e:b5:a7:13:b6:a5:1b:c0:de:39:
38:37:a8:c5:ea:67:37:b9:61:0d:62:39:10:f0:9f:d8:70:39:
44:e2:2d:7f:c8:21:6d:28:ba:53:93:e1:a3:4f:85:11:ff:ba:
4c:a5:99:e7:10:fc:c7:72:9e:cb:29:95:b3:ff:28:73:3d:cc:
e3:ca:ce:24:b7:9e:a5:f2:94:7c:ea:22:f4:8a:f8:d7:5f:80:
3b:06:6a:a3:a7:b0:eb:0b:9c:57:33:ef:ee:22:7a:dc:9e:7a:
d5:5a:70:43:be:18:48:2c:42:8b:8a:57:41:90:e2:e4:18:5e:
e3:31:90:f4:b7:8a:ca:84:a9:9a:98:6b:28:f1:50:28:c8:90:
89:46:65:48:50:1e:ac:50:65:08:8f:2c:22:9f:a3:df:96:46:
2f:fe:c4:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+2IilYh1N91eyzBZc42FoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTJmODg5MjZlMGJkODQwMWM3M2NlZGI3N2U5OWM5NGRj
YzUyZDcwHhcNMjUwNDI5MDAwMDQxWhcNMjUwNDMwMDAwMDQxWjAzMTEwLwYDVQQD
Eyg0MTU3NjE2ZmM2ODU4Y2ZkYWEwYzg0ZmE2YWYxZTI3M2ZlMTdhNGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtGlTWccf/90xIPW1uKeEj38dUHs
Dpmk+F4WQ4xsz7Dadmzo1Hcz9Vmx/2hRrbI/k/WNcgiQlUfaHAVm1jFO35tQf5XR
Ptldb+9LEOythYtYqY/t+UMCzcbDdSwT9LJa9gidUX6JAyHJpkgZjTG1Vxh9XP0A
F36vq/DORDXf+8F+soZGMpI0AoxU57PLDM+V8P2XY8vS9XFpvq7IeA/7b9y5b41m
1d3/vxbI55AdFeF7NhnEI53/vmvtyKfsx2Z1rnDT9UafBLNNVPwzfk96fPtF0v+l
RYORLEH5Y+Fk4dbPWQGkSeRNXK2W51/ITwN++viKmgUmnzk7yd9Wx4QqpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFXYW/GhYz9qgyE+mrx4nP+F6SvMB8GA1UdIwQY
MBaAFI+i+Ikm4L2EAcc87bd+mclNzFLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kZWI2NDgtZjQzMy00M2YxLTljODMt
ZDBlZGVjOTcyOGU1LzEvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9kZWI2NDgtZjQzMy00M2YxLTljODMtZDBlZGVjOTcyOGU1
LzEvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnsPZOws
xwE/ypQ5UZXmKoDNwcb1WcpXYm4qyD/NlP/jBprRFptk+H1otucU9/zIBhOEJZ47
8glUD/WtcK0b1NYjzgBR0awSb6F+0rk/3CU8PHfVDh+C9Yhs/eWJjDjJde0utacT
tqUbwN45ODeoxepnN7lhDWI5EPCf2HA5ROItf8ghbSi6U5Pho0+FEf+6TKWZ5xD8
x3KeyymVs/8ocz3M48rOJLeepfKUfOoi9Ir411+AOwZqo6ew6wucVzPv7iJ63J56
1VpwQ74YSCxCi4pXQZDi5Bhe4zGQ9LeKyoSpmphrKPFQKMiQiUZlSFAerFBlCI8s
Ip+j35ZGL/7EEQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:12:09 2025 by rpki-client