Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
File: JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json)
Hash identifier: ROv9EeGHH7oCNqGWuLTFLhSxy9UxWZfaUGTj0kXn0BU=
Subject key identifier: 87:49:DD:D2:1C:8B:02:40:CD:CA:DC:46:AD:7F:EE:29:87:90:73:DF
Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
Certificate issuer: /CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Certificate serial: 0196895CB4977176B31721BC8BF348984947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
Manifest number: 0A6F
Signing time: Thu 01 May 2025 01:01:16 +0000
Manifest this update: Thu 01 May 2025 01:01:16 +0000
Manifest next update: Fri 02 May 2025 01:01:16 +0000
Files and hashes: 1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: B8AhwcJN6xoScnNkrjjFOUr9eHKgFUbQP0yPcraVWgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:b4:97:71:76:b3:17:21:bc:8b:f3:48:98:49:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Validity
Not Before: May 1 01:01:16 2025 GMT
Not After : May 2 01:01:16 2025 GMT
Subject: CN=8749ddd21c8b0240cdcadc46ad7fee29879073df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:d9:ae:a9:18:54:6f:e6:11:aa:58:43:3c:
94:fb:da:b1:db:33:c8:3f:cb:75:21:9b:91:f4:5d:
4b:bb:3f:8c:d6:bc:70:af:34:0b:c2:f5:1d:29:b5:
9f:6e:6a:29:e9:a7:a9:b5:ba:d7:a2:f6:26:8d:2f:
0f:0e:1e:30:4d:19:ae:f8:21:ce:12:39:99:7c:9b:
d9:ed:0b:41:b0:49:6c:d8:19:69:14:58:93:c9:59:
68:3b:64:2d:ed:0c:3e:f0:43:75:4c:d4:03:1c:51:
b2:15:46:03:28:05:34:ca:13:78:f0:a3:5f:e2:d8:
7b:de:dc:d2:22:e6:f0:34:38:46:ee:54:95:7d:cb:
f4:d2:53:7b:89:f7:67:4b:d1:c8:6c:0d:65:0a:c7:
c8:5c:3e:7d:c4:a6:ea:5b:58:1f:c3:40:74:d3:db:
fa:1e:ff:88:00:7f:cc:f2:d2:b9:c6:a0:e2:f2:fb:
cc:02:6c:d3:4b:48:c3:6e:27:3d:7c:4a:6b:58:08:
ae:4d:57:ab:d6:20:da:d7:57:28:d5:97:bd:97:5e:
d3:e4:e1:fc:84:cc:fd:e9:d6:f6:dc:92:7a:a7:02:
ee:08:0d:78:31:55:02:64:e5:a5:c5:0f:88:ea:5b:
05:2c:87:a4:a0:c4:e0:d5:7a:f4:67:eb:29:56:f1:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:49:DD:D2:1C:8B:02:40:CD:CA:DC:46:AD:7F:EE:29:87:90:73:DF
X509v3 Authority Key Identifier:
keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7e:08:a5:01:2b:54:20:52:38:11:d9:ad:0c:5b:ce:a8:46:
76:80:84:40:89:03:06:17:56:e9:12:eb:83:54:ee:37:a1:1d:
63:ae:78:60:e8:14:27:5f:71:8b:5e:83:96:e8:1c:2c:c0:cd:
b4:64:3a:5f:25:bc:83:3a:fb:bc:f1:e0:67:3f:91:1c:b0:dd:
74:84:cf:b6:cd:2e:90:a9:32:9a:a7:e6:7b:7a:9e:b5:81:f9:
34:7b:23:5a:49:2a:a1:77:d4:e3:cd:e9:41:50:76:c8:53:52:
8f:60:ad:54:10:c9:b7:fd:c0:4e:d1:a8:df:47:87:9a:a4:cc:
04:d4:92:ba:d6:5b:b6:a5:31:f0:3c:17:1d:c7:e3:2c:54:51:
bc:27:1c:1f:ff:09:b3:9d:ef:11:9d:6a:87:83:d4:64:91:a1:
99:2b:40:9b:13:cd:fa:b9:df:38:89:da:f2:f5:80:23:be:ce:
b8:1a:e6:0c:06:c1:a1:ff:a7:bc:e4:09:37:78:ec:d1:1a:f9:
42:d0:68:94:67:8f:ed:00:22:71:33:22:03:9e:59:29:f4:c3:
0f:f9:0c:55:69:1e:c9:e2:08:d1:5c:ea:8a:3b:cd:19:92:ff:
51:5e:6d:2b:47:ff:b7:96:53:3c:9c:42:ed:a7:ef:6f:f6:ef:
66:66:cb:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJXLSXcXazFyG8i/NImElHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NDQzMDY2ODBmOGRkYjhiOTg5MGQzMGY1MDdlNjE5ZTQ0
MTVkM2UwHhcNMjUwNTAxMDEwMTE2WhcNMjUwNTAyMDEwMTE2WjAzMTEwLwYDVQQD
Eyg4NzQ5ZGRkMjFjOGIwMjQwY2RjYWRjNDZhZDdmZWUyOTg3OTA3M2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSDZrqkYVG/mEapYQzyU+9qx2zPI
P8t1IZuR9F1Luz+M1rxwrzQLwvUdKbWfbmop6aeptbrXovYmjS8PDh4wTRmu+CHO
EjmZfJvZ7QtBsEls2BlpFFiTyVloO2Qt7Qw+8EN1TNQDHFGyFUYDKAU0yhN48KNf
4th73tzSIubwNDhG7lSVfcv00lN7ifdnS9HIbA1lCsfIXD59xKbqW1gfw0B009v6
Hv+IAH/M8tK5xqDi8vvMAmzTS0jDbic9fEprWAiuTVer1iDa11co1Ze9l17T5OH8
hMz96db23JJ6pwLuCA14MVUCZOWlxQ+I6lsFLIekoMTg1Xr0Z+spVvHZ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdJ3dIciwJAzcrcRq1/7imHkHPfMB8GA1UdIwQY
MBaAFCREMGaA+N24uYkNMPUH5hnkQV0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2Nzgt
NzY0NjczMWM2NWRiLzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2NzgtNzY0NjczMWM2NWRi
LzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjn4IpQEr
VCBSOBHZrQxbzqhGdoCEQIkDBhdW6RLrg1TuN6EdY654YOgUJ19xi16DlugcLMDN
tGQ6XyW8gzr7vPHgZz+RHLDddITPts0ukKkymqfme3qetYH5NHsjWkkqoXfU483p
QVB2yFNSj2CtVBDJt/3ATtGo30eHmqTMBNSSutZbtqUx8DwXHcfjLFRRvCccH/8J
s53vEZ1qh4PUZJGhmStAmxPN+rnfOIna8vWAI77OuBrmDAbBof+nvOQJN3js0Rr5
QtBolGeP7QAicTMiA55ZKfTDD/kMVWkeyeII0VzqijvNGZL/UV5tK0f/t5ZTPJxC
7afvb/bvZmbLSQ==
-----END CERTIFICATE-----
Generated at Thu May 1 03:39:22 2025 by rpki-client