Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
File: jygQkMQApWFm_Ii083pcuu0hhfA.mft (raw, json)
Hash identifier: Fiik1FZBSUaBrAG7r+uzFfPkljQs758KcyA58jA6Tus=
Subject key identifier: B7:E6:98:EA:8E:5C:10:C3:AE:C1:64:12:28:EF:E5:CC:C7:60:64:78
Authority key identifier: 8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
Certificate issuer: /CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Certificate serial: 01967DC66429222B50A275163CE9F0BA247A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 19:01:15 +0000
Manifest this update: Mon 28 Apr 2025 19:01:15 +0000
Manifest next update: Tue 29 Apr 2025 19:01:15 +0000
Files and hashes: 1: 7XUdeR7Uiqy2nX_SzaBAY10QtF0.roa (hash: NZuDg+MfyuXfdZEwhDepOr5DFbg1lkCScWpvXsHFUtQ=)
2: jygQkMQApWFm_Ii083pcuu0hhfA.crl (hash: DcEzbWUk/cXzx4BKw9ifX8wafd3+epqo8eFwzY+Wghk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:64:29:22:2b:50:a2:75:16:3c:e9:f0:ba:24:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Validity
Not Before: Apr 28 19:01:15 2025 GMT
Not After : Apr 29 19:01:15 2025 GMT
Subject: CN=b7e698ea8e5c10c3aec1641228efe5ccc7606478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:54:73:a1:27:4b:b3:59:49:2a:94:53:ed:
8b:9b:db:91:ae:e8:4a:24:de:33:8f:95:db:24:d0:
43:f3:89:6a:d2:87:63:3c:18:04:e1:e7:b2:2c:07:
55:7b:22:88:78:61:6d:45:67:90:93:f5:50:23:52:
68:2b:10:5c:91:92:21:91:89:6b:ca:fb:ae:81:fb:
1f:34:6c:1d:01:7c:a5:0a:fd:0a:a9:bd:c6:0f:39:
40:e6:ec:77:58:c9:6c:e1:66:5a:13:58:76:47:a5:
27:30:05:e4:d3:ff:3b:64:d3:d7:ce:35:37:00:30:
c8:63:d7:3a:c1:d1:d5:8f:c1:e1:c1:6b:96:45:c4:
df:4a:97:a0:a5:3d:fa:fc:c9:52:9a:71:5d:24:1a:
35:f8:06:cd:34:8a:97:b1:71:09:65:13:29:98:54:
6b:98:22:1d:1b:4b:0a:8d:6a:97:a3:28:c5:0e:9e:
34:44:dd:0f:ed:3f:f3:29:dd:85:ed:00:3b:09:60:
06:3f:c1:90:c6:43:a3:77:d2:c3:28:5a:f9:6d:4b:
4b:6c:a4:e8:7c:51:05:90:03:a8:f2:f2:01:f2:60:
c8:a1:70:74:ea:62:65:e5:a4:8c:ec:7a:12:f3:62:
cc:37:87:50:e4:85:8c:0d:9e:57:47:5f:23:4b:39:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E6:98:EA:8E:5C:10:C3:AE:C1:64:12:28:EF:E5:CC:C7:60:64:78
X509v3 Authority Key Identifier:
keyid:8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:85:1a:d0:2e:1f:37:0f:55:d4:cb:32:db:c8:b9:c1:c4:25:
37:64:17:5f:19:9e:ad:d4:33:e0:ca:63:f9:ab:b0:89:84:b3:
da:a0:b9:46:03:1e:24:2d:69:81:bf:0a:88:b5:57:3d:ce:01:
7c:d1:2f:ca:be:b3:a8:7d:9f:64:b1:c3:b5:18:83:b0:f5:c9:
b8:2d:39:c8:c9:2e:fc:b5:ec:8e:f3:7d:19:a7:75:f1:62:90:
8b:75:00:6a:9d:1f:98:86:72:72:a5:0c:dc:a0:56:05:ae:8d:
42:67:b7:0d:d0:a0:59:e5:71:c5:77:9f:23:13:eb:60:06:b2:
5c:25:f2:2b:57:5d:50:33:1e:10:47:08:42:67:77:79:47:57:
a4:c2:76:55:f9:ef:5f:48:8a:3d:16:98:02:96:39:85:d5:6e:
e0:fd:1b:e4:d1:e9:86:ff:b9:a6:be:23:a8:0e:a7:82:f4:cc:
f1:91:8a:3f:2f:d3:24:dd:5c:1d:ba:13:b7:e6:7c:8d:5f:22:
01:0b:34:6e:9c:63:b6:82:53:48:a8:3e:eb:cb:fb:7c:6e:44:
44:41:78:47:7d:a4:32:48:50:ba:22:a7:96:e3:01:fa:8a:6f:
e1:b9:49:2c:f3:4e:5c:e3:36:f3:7b:10:e8:da:e8:53:32:7f:
e9:87:90:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9xmQpIitQonUWPOnwuiR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjgxMDkwYzQwMGE1NjE2NmZjODhiNGYzN2E1Y2JhZWQy
MTg1ZjAwHhcNMjUwNDI4MTkwMTE1WhcNMjUwNDI5MTkwMTE1WjAzMTEwLwYDVQQD
EyhiN2U2OThlYThlNWMxMGMzYWVjMTY0MTIyOGVmZTVjY2M3NjA2NDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eFUc6EnS7NZSSqUU+2Lm9uRruhK
JN4zj5XbJNBD84lq0odjPBgE4eeyLAdVeyKIeGFtRWeQk/VQI1JoKxBckZIhkYlr
yvuugfsfNGwdAXylCv0Kqb3GDzlA5ux3WMls4WZaE1h2R6UnMAXk0/87ZNPXzjU3
ADDIY9c6wdHVj8HhwWuWRcTfSpegpT36/MlSmnFdJBo1+AbNNIqXsXEJZRMpmFRr
mCIdG0sKjWqXoyjFDp40RN0P7T/zKd2F7QA7CWAGP8GQxkOjd9LDKFr5bUtLbKTo
fFEFkAOo8vIB8mDIoXB06mJl5aSM7HoS82LMN4dQ5IWMDZ5XR18jSzlRowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfmmOqOXBDDrsFkEijv5czHYGR4MB8GA1UdIwQY
MBaAFI8oEJDEAKVhZvyItPN6XLrtIYXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlnUWtNUUFwV0ZtX0lpMDgzcGN1dTBoaGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zMjIyZTItNjQ1Ni00YzZhLWIxOTct
MjA1ODk1OTYxNDkzLzEvanlnUWtNUUFwV0ZtX0lpMDgzcGN1dTBoaGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8zMjIyZTItNjQ1Ni00YzZhLWIxOTctMjA1ODk1OTYxNDkz
LzEvanlnUWtNUUFwV0ZtX0lpMDgzcGN1dTBoaGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoUa0C4f
Nw9V1Msy28i5wcQlN2QXXxmerdQz4Mpj+auwiYSz2qC5RgMeJC1pgb8KiLVXPc4B
fNEvyr6zqH2fZLHDtRiDsPXJuC05yMku/LXsjvN9Gad18WKQi3UAap0fmIZycqUM
3KBWBa6NQme3DdCgWeVxxXefIxPrYAayXCXyK1ddUDMeEEcIQmd3eUdXpMJ2Vfnv
X0iKPRaYApY5hdVu4P0b5NHphv+5pr4jqA6ngvTM8ZGKPy/TJN1cHboTt+Z8jV8i
AQs0bpxjtoJTSKg+68v7fG5EREF4R32kMkhQuiKnluMB+opv4blJLPNOXOM283sQ
6NroUzJ/6YeQ/Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:29 2025 by rpki-client