Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
File: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json)
Hash identifier: QIzVbu89JVCZgHuWXRqEWjVgPGZ5LoTB/f5+DcB/mlQ=
Subject key identifier: B8:0C:62:86:74:BB:A8:BC:36:D3:26:03:73:27:3C:25:74:4D:BD:3E
Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689
Certificate serial: 01967BA0223F330D4568E0B34D5A20251C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
Manifest number: 0D94
Signing time: Mon 28 Apr 2025 09:00:14 +0000
Manifest this update: Mon 28 Apr 2025 09:00:14 +0000
Manifest next update: Tue 29 Apr 2025 09:00:14 +0000
Files and hashes: 1: FAPasEirS5CbUB6PjBrAMteNaOo.roa (hash: HbkkLdFOGhY92Tbv9fOfCuB90ZHdJx6ePREhkoIqvyA=)
2: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: ugjyNlf9i2YlqNuNjiZZEvbJgyhuMtHel21GAmqDrzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:22:3f:33:0d:45:68:e0:b3:4d:5a:20:25:1c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689
Validity
Not Before: Apr 28 09:00:14 2025 GMT
Not After : Apr 29 09:00:14 2025 GMT
Subject: CN=b80c628674bba8bc36d3260373273c25744dbd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:b0:51:78:9d:57:34:67:9c:11:36:34:5c:
98:95:7c:6d:e0:25:f3:3d:2d:29:d7:63:df:34:67:
32:c1:6b:c0:de:be:fb:68:b5:d4:b3:ff:4b:5d:61:
1e:77:32:9a:87:36:50:9b:89:ae:6c:e3:ca:f5:43:
69:9b:d9:aa:32:18:db:86:44:33:27:ce:3c:89:fe:
b2:5b:34:fa:6b:4f:38:ea:28:02:bb:23:48:cb:96:
2e:4c:74:99:0a:d2:29:d1:63:c0:b4:ee:e8:e2:32:
21:66:24:61:54:a1:ae:7e:d5:6a:a2:06:c4:0a:b5:
ef:b6:cb:a1:f1:d6:28:62:e7:77:49:68:67:c1:de:
e4:a3:7f:42:54:37:ea:ec:62:3a:1a:61:39:b1:6c:
b5:77:79:71:bb:de:f6:23:30:42:cd:ed:41:31:b1:
af:ac:93:a6:95:d5:a3:85:2f:59:d9:b0:53:6b:09:
75:3b:d8:8e:b8:a5:4b:69:e6:cb:36:fd:2a:e2:0e:
8c:92:a4:89:18:71:ee:39:c1:cb:30:bf:26:ae:10:
62:cb:8e:13:40:14:e1:41:6a:8b:76:b8:36:1a:7a:
16:7c:5c:5c:e9:85:29:ab:24:e8:87:58:e3:46:1b:
46:38:d3:ca:ac:d6:73:3f:44:93:77:88:e3:f2:0f:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0C:62:86:74:BB:A8:BC:36:D3:26:03:73:27:3C:25:74:4D:BD:3E
X509v3 Authority Key Identifier:
keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:78:90:f4:d9:cd:77:76:e4:bc:d1:69:ed:ea:bd:9a:cb:e7:
87:a2:f9:4f:d2:59:63:a5:08:b2:59:aa:8f:5b:42:06:ad:35:
ce:62:18:a0:74:95:db:30:c1:a4:a0:66:a3:fe:ab:d8:eb:71:
a2:b3:bf:e2:45:5b:10:b1:5c:fc:03:90:6b:fe:3b:6a:35:02:
43:58:fe:85:6c:99:3a:f3:4d:8a:5a:81:87:db:5e:f0:5a:9c:
76:30:e0:16:6b:d1:30:c5:e5:10:23:12:94:74:b0:a2:e2:c2:
a4:88:db:58:8b:b0:a7:f5:31:06:ba:32:42:ea:6a:51:ff:41:
ce:44:4d:d8:99:fc:ed:b9:2f:36:43:0a:c9:bc:ad:59:32:ea:
69:d8:38:24:c1:2e:ec:3c:3f:d3:b4:2e:37:49:4b:15:bd:87:
5c:5b:89:d1:c2:0f:f0:7b:9f:ff:e8:a2:81:64:6a:f4:47:30:
56:fe:54:2b:32:35:fd:24:40:08:10:6a:01:21:41:4e:fc:6a:
09:13:0c:00:e2:86:ee:de:01:76:0b:23:6f:56:53:cb:26:43:
fc:82:4d:65:d7:44:31:23:01:50:b9:d3:5f:0f:e7:5e:d0:ac:
00:2d:dd:d8:cb:c7:62:92:27:49:54:a3:36:dd:23:e4:02:f0:
70:b1:c8:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7oCI/Mw1FaOCzTVogJRyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NGQwNGMzOTY0MWI4MmI1ZGMzODQ0Y2Y1ZmY1NTBmNTQw
NDQ2ODkwHhcNMjUwNDI4MDkwMDE0WhcNMjUwNDI5MDkwMDE0WjAzMTEwLwYDVQQD
EyhiODBjNjI4Njc0YmJhOGJjMzZkMzI2MDM3MzI3M2MyNTc0NGRiZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtomwUXidVzRnnBE2NFyYlXxt4CXz
PS0p12PfNGcywWvA3r77aLXUs/9LXWEedzKahzZQm4mubOPK9UNpm9mqMhjbhkQz
J848if6yWzT6a0846igCuyNIy5YuTHSZCtIp0WPAtO7o4jIhZiRhVKGuftVqogbE
CrXvtsuh8dYoYud3SWhnwd7ko39CVDfq7GI6GmE5sWy1d3lxu972IzBCze1BMbGv
rJOmldWjhS9Z2bBTawl1O9iOuKVLaebLNv0q4g6MkqSJGHHuOcHLML8mrhBiy44T
QBThQWqLdrg2GnoWfFxc6YUpqyToh1jjRhtGONPKrNZzP0STd4jj8g8FbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgMYoZ0u6i8NtMmA3MnPCV0Tb0+MB8GA1UdIwQY
MBaAFCZNBMOWQbgrXcOETPX/VQ9UBEaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTkt
M2QwMDM2NjAzZWEwLzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTktM2QwMDM2NjAzZWEw
LzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaniQ9NnN
d3bkvNFp7eq9msvnh6L5T9JZY6UIslmqj1tCBq01zmIYoHSV2zDBpKBmo/6r2Otx
orO/4kVbELFc/AOQa/47ajUCQ1j+hWyZOvNNilqBh9te8FqcdjDgFmvRMMXlECMS
lHSwouLCpIjbWIuwp/UxBroyQupqUf9BzkRN2Jn87bkvNkMKybytWTLqadg4JMEu
7Dw/07QuN0lLFb2HXFuJ0cIP8Huf/+iigWRq9EcwVv5UKzI1/SRACBBqASFBTvxq
CRMMAOKG7t4Bdgsjb1ZTyyZD/IJNZddEMSMBULnTXw/nXtCsAC3d2MvHYpInSVSj
Nt0j5ALwcLHIew==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:33:23 2025 by rpki-client