Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier: D165HglPbfKHYN6Umb9UuyqDofYm0sCzc5M4DXJpigw=
Subject key identifier: 9B:C1:12:95:2D:96:FA:06:CF:09:C1:E1:0B:CB:91:8C:23:F5:E7:6F
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 01968391417C40667E4C5BBE6A75071EF79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 22:00:56 +0000
Manifest this update: Tue 29 Apr 2025 22:00:56 +0000
Manifest next update: Wed 30 Apr 2025 22:00:56 +0000
Files and hashes: 1: IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa (hash: U6eJPJn6v41NXuScfHVoxXiwmhNM1UGaum7aJQ+kl/o=)
2: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: VEQ1x4Qh8GpQ4I1Lrbki63LwNGY+qA2FjLF1ndeydio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:41:7c:40:66:7e:4c:5b:be:6a:75:07:1e:f7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: Apr 29 22:00:56 2025 GMT
Not After : Apr 30 22:00:56 2025 GMT
Subject: CN=9bc112952d96fa06cf09c1e10bcb918c23f5e76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:75:0b:85:e3:01:52:05:61:03:b8:37:15:
3a:d3:ea:32:be:ca:32:db:c1:4c:43:d1:20:5d:b6:
39:16:00:17:27:8b:a4:89:21:c1:02:4b:4f:9d:b2:
1b:4a:16:34:41:c6:86:d9:43:ea:c7:24:19:59:16:
8e:f0:ad:3c:2d:be:c4:45:8c:6b:7e:92:45:b9:40:
4c:d4:7b:29:dc:98:1c:a0:cc:bf:48:b8:d7:6a:bb:
27:c8:eb:8d:af:ba:b7:5a:26:86:a7:9a:ef:b5:d8:
e5:38:ca:03:9b:a0:f5:30:5d:03:c5:87:e6:ae:6c:
19:31:c5:46:b0:1d:f8:63:66:46:4d:bc:a6:87:ef:
64:2b:8e:aa:22:c6:cc:40:5e:ce:46:f1:62:54:2e:
d1:90:90:1f:ec:da:1f:8d:1d:f4:0b:23:06:89:96:
0c:ca:b3:f5:96:e9:ab:91:aa:e3:73:8d:38:17:24:
a3:a0:d0:a6:83:e7:75:c0:9f:9d:a4:b3:36:08:d3:
ee:d7:8a:37:2a:2b:f7:50:70:8a:0e:11:03:31:0b:
fa:95:44:5b:76:ab:3f:b9:df:12:9c:f2:49:c8:8a:
eb:0b:3b:76:61:88:09:24:c5:f8:9f:8d:48:ce:95:
a0:70:d7:df:7c:51:95:7e:38:51:70:14:94:05:73:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C1:12:95:2D:96:FA:06:CF:09:C1:E1:0B:CB:91:8C:23:F5:E7:6F
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:23:8c:96:54:71:10:71:f0:86:74:d1:a2:af:30:ce:f1:ad:
1e:ee:dc:78:a2:64:bd:d1:84:89:fb:87:84:e1:99:47:b8:68:
71:e4:2b:7b:05:68:fa:53:98:cd:b3:11:2d:c1:09:a8:1c:51:
41:e3:96:2e:de:58:60:2e:ae:63:47:b7:9f:67:7a:5c:49:a9:
6e:d9:ae:75:a8:d5:7a:99:37:72:f7:17:09:b8:a1:36:e2:cc:
3f:a0:ff:44:b3:1b:ef:33:9c:94:c3:87:14:4d:92:f4:f3:e4:
4d:90:f0:65:02:57:72:41:b2:fb:4e:e8:c7:95:c2:8f:1b:2e:
3c:7e:22:4e:b7:62:d3:69:d5:ad:0b:36:6f:9a:b4:d4:06:70:
de:dd:49:fa:67:8e:03:9f:8f:1b:6f:c1:90:5f:80:6f:34:81:
3f:65:a6:88:de:1e:56:53:10:ca:98:fd:63:40:17:70:cb:81:
d7:d7:5f:f0:91:91:ef:fe:7b:e9:9b:94:12:43:ad:44:46:ab:
94:0f:ed:3a:1e:29:1d:f8:4b:8a:d8:99:2c:e6:ee:4f:7b:cb:
ed:97:71:e9:c7:f4:a5:bc:71:fe:9b:5d:02:4f:0a:90:05:55:
b6:dc:b6:df:a4:d5:c6:03:1c:83:c4:69:c0:2a:2b:bf:1f:b1:
b8:b2:66:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkUF8QGZ+TFu+anUHHveeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NGQxNzhiZTFiMjBiOGQ3Mzg0NDZiZTA1MmUwODljODlh
MDBhYjMwHhcNMjUwNDI5MjIwMDU2WhcNMjUwNDMwMjIwMDU2WjAzMTEwLwYDVQQD
Eyg5YmMxMTI5NTJkOTZmYTA2Y2YwOWMxZTEwYmNiOTE4YzIzZjVlNzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NN1C4XjAVIFYQO4NxU60+oyvsoy
28FMQ9EgXbY5FgAXJ4ukiSHBAktPnbIbShY0QcaG2UPqxyQZWRaO8K08Lb7ERYxr
fpJFuUBM1Hsp3JgcoMy/SLjXarsnyOuNr7q3WiaGp5rvtdjlOMoDm6D1MF0DxYfm
rmwZMcVGsB34Y2ZGTbymh+9kK46qIsbMQF7ORvFiVC7RkJAf7NofjR30CyMGiZYM
yrP1lumrkarjc404FySjoNCmg+d1wJ+dpLM2CNPu14o3Kiv3UHCKDhEDMQv6lURb
dqs/ud8SnPJJyIrrCzt2YYgJJMX4n41IzpWgcNfffFGVfjhRcBSUBXNQ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvBEpUtlvoGzwnB4QvLkYwj9edvMB8GA1UdIwQY
MBaAFCVNF4vhsguNc4RGvgUuCJyJoAqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82OGFjZTctM2UzMS00Y2ZlLWExZTQt
YTEwNGQyNDc3MTVmLzEvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC82OGFjZTctM2UzMS00Y2ZlLWExZTQtYTEwNGQyNDc3MTVm
LzEvSlUwWGktR3lDNDF6aEVhLUJTNEluSW1nQ3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCOMllRx
EHHwhnTRoq8wzvGtHu7ceKJkvdGEifuHhOGZR7hoceQrewVo+lOYzbMRLcEJqBxR
QeOWLt5YYC6uY0e3n2d6XEmpbtmudajVepk3cvcXCbihNuLMP6D/RLMb7zOclMOH
FE2S9PPkTZDwZQJXckGy+07ox5XCjxsuPH4iTrdi02nVrQs2b5q01AZw3t1J+meO
A5+PG2/BkF+AbzSBP2WmiN4eVlMQypj9Y0AXcMuB19df8JGR7/576ZuUEkOtREar
lA/tOh4pHfhLitiZLObuT3vL7Zdx6cf0pbxx/ptdAk8KkAVVtty236TVxgMcg8Rp
wCorvx+xuLJmXw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:14:52 2025 by rpki-client