Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier: 9zNka13TSJdEQgKbczmyw+s9parUa+r5FlWbbCe9MyQ=
Subject key identifier: DF:78:33:BB:85:F6:29:0B:CE:49:8A:53:89:98:27:76:A4:02:8D:D3
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 0196760C9A3D943FB13A68137DB3F03C2E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number: 132A
Signing time: Sun 27 Apr 2025 07:00:59 +0000
Manifest this update: Sun 27 Apr 2025 07:00:59 +0000
Manifest next update: Mon 28 Apr 2025 07:00:59 +0000
Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: IsIpDahhwyzgAZ/bA/iu1KhzyZtFpl63Xbu6t121XGU=)
2: ShfkVecVvyoW3_YQq7LwcMaYmQs.roa (hash: BoQNVikNhGTcu9edVXF4u7v7ipMyHbA4n2LulfglPKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:9a:3d:94:3f:b1:3a:68:13:7d:b3:f0:3c:2e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: Apr 27 07:00:59 2025 GMT
Not After : Apr 28 07:00:59 2025 GMT
Subject: CN=df7833bb85f6290bce498a5389982776a4028dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:ef:f6:6e:63:80:c0:61:4e:2b:06:15:ee:
27:fb:34:02:f9:09:5a:5f:82:e6:a9:61:04:5d:57:
05:fd:8c:85:80:b1:00:a0:f7:54:e5:a3:29:67:ac:
26:86:1b:9e:0a:ed:f2:d2:91:99:91:84:97:68:33:
6a:94:61:68:5d:60:12:35:16:8a:bf:02:2c:14:98:
f1:0a:8c:e7:30:9c:0f:16:c2:51:8e:d6:da:36:d9:
e4:e7:0e:a5:f5:b8:5e:0b:b9:b5:47:0e:f9:08:4e:
b9:b5:27:f2:af:e9:db:a3:58:ba:3e:76:66:55:9a:
84:18:9e:fe:3c:c8:de:98:e1:64:a6:ba:90:97:f2:
3a:da:7d:bb:12:ce:37:36:1a:46:ef:c7:d8:ef:fc:
e1:8b:08:1f:3e:bb:1f:f1:3d:dc:5c:fd:ff:69:e5:
83:6a:d6:95:4b:e7:cd:d4:9e:2f:35:bb:5f:81:3c:
41:e2:4b:7e:e3:27:f2:c4:e9:ba:9f:5a:65:51:ef:
fa:f2:45:23:77:44:39:96:7a:70:c0:a0:02:93:d8:
88:0a:91:fe:e4:d7:d0:65:c9:d6:92:64:b3:33:10:
ea:79:ab:11:fd:14:40:f1:84:4f:f4:47:02:e2:8a:
58:24:9e:e1:84:5f:df:97:6b:e9:98:6f:cb:d4:22:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:78:33:BB:85:F6:29:0B:CE:49:8A:53:89:98:27:76:A4:02:8D:D3
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:44:09:fc:fb:c9:a9:a6:65:f2:54:a4:94:ff:82:f9:dd:e2:
6b:a2:02:8e:3e:87:76:c4:f0:49:d5:df:2e:27:eb:e7:a0:b3:
4a:01:7a:e7:82:28:28:76:5e:f5:b4:27:78:5d:dd:83:03:cc:
7e:33:3c:64:e8:1b:71:81:b1:7f:7e:c8:ff:23:87:31:2d:38:
84:d7:df:c7:b4:f3:1c:2e:1d:05:de:da:84:c1:a9:85:ae:e0:
6e:1f:90:1f:15:d2:ae:c5:3f:f3:c7:41:5d:b8:c0:79:23:58:
4a:02:d2:c5:d3:07:d4:87:ce:92:ca:61:d8:80:9a:a0:ec:5f:
aa:ab:74:79:a2:a9:1a:e1:f1:eb:72:e6:48:e3:b9:cc:c4:c7:
54:c0:b4:c7:9c:82:42:33:a1:6f:e1:a7:26:36:a6:2a:8f:13:
e2:1c:2a:d5:c7:64:80:e4:58:00:c5:36:77:1f:ee:25:a1:6a:
63:8b:2b:cd:19:df:31:9a:09:cc:41:41:37:aa:ae:32:02:7f:
9a:49:7a:87:0a:c6:4b:5f:c7:c2:a4:31:54:4b:26:17:d7:ba:
b2:92:d4:66:f1:92:b9:08:2e:94:fe:ca:2a:93:78:56:dd:26:
6a:c7:c5:29:08:aa:ce:72:11:b4:9d:55:50:96:2b:35:5f:e8:
3f:8e:3c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DJo9lD+xOmgTfbPwPC5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZmQ1NzgxNTc2ZjNkNDIyNWFmOTk0NTNlOTNhOTI1OTg1
MjcxMjYwHhcNMjUwNDI3MDcwMDU5WhcNMjUwNDI4MDcwMDU5WjAzMTEwLwYDVQQD
EyhkZjc4MzNiYjg1ZjYyOTBiY2U0OThhNTM4OTk4Mjc3NmE0MDI4ZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDrv9m5jgMBhTisGFe4n+zQC+Qla
X4LmqWEEXVcF/YyFgLEAoPdU5aMpZ6wmhhueCu3y0pGZkYSXaDNqlGFoXWASNRaK
vwIsFJjxCoznMJwPFsJRjtbaNtnk5w6l9bheC7m1Rw75CE65tSfyr+nbo1i6PnZm
VZqEGJ7+PMjemOFkprqQl/I62n27Es43NhpG78fY7/zhiwgfPrsf8T3cXP3/aeWD
ataVS+fN1J4vNbtfgTxB4kt+4yfyxOm6n1plUe/68kUjd0Q5lnpwwKACk9iICpH+
5NfQZcnWkmSzMxDqeasR/RRA8YRP9EcC4opYJJ7hhF/fl2vpmG/L1CLd1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN94M7uF9ikLzkmKU4mYJ3akAo3TMB8GA1UdIwQY
MBaAFCX9V4FXbz1CJa+ZRT6TqSWYUnEmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NDlkZGUtZTgxNC00ZmIyLTlmOWIt
NTk0ODNmYTA5ZmUxLzEvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NDlkZGUtZTgxNC00ZmIyLTlmOWItNTk0ODNmYTA5ZmUx
LzEvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0QJ/PvJ
qaZl8lSklP+C+d3ia6ICjj6HdsTwSdXfLifr56CzSgF654IoKHZe9bQneF3dgwPM
fjM8ZOgbcYGxf37I/yOHMS04hNffx7TzHC4dBd7ahMGpha7gbh+QHxXSrsU/88dB
XbjAeSNYSgLSxdMH1IfOksph2ICaoOxfqqt0eaKpGuHx63LmSOO5zMTHVMC0x5yC
QjOhb+GnJjamKo8T4hwq1cdkgORYAMU2dx/uJaFqY4srzRnfMZoJzEFBN6quMgJ/
mkl6hwrGS1/HwqQxVEsmF9e6spLUZvGSuQgulP7KKpN4Vt0masfFKQiqznIRtJ1V
UJYrNV/oP448ww==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:21:07 2025 by rpki-client