Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
File: fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft (raw, json)
Hash identifier: ab5GQUOhum359tHVEmvAKXCMz/CrszDl8YADrTVJE6Q=
Subject key identifier: 09:E4:21:C1:E8:63:D9:2E:79:13:D3:51:9A:1E:C9:85:D0:19:57:97
Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
Certificate issuer: /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Certificate serial: 0196827EBB5B9ADC433CF4B3C6915A5BC557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
Manifest number: 086C
Signing time: Tue 29 Apr 2025 17:01:05 +0000
Manifest this update: Tue 29 Apr 2025 17:01:05 +0000
Manifest next update: Wed 30 Apr 2025 17:01:05 +0000
Files and hashes: 1: fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl (hash: FydmkHMkGWtwcg7OB1lmjwJELuPVO8hKISBhbFLjqfQ=)
2: mC5LwElUmLRuYfhtRytHc9ZpqR0.roa (hash: ThX2BNk8xeMGUBx8nMXao6T14FMQBl6CvbjOYDIbLcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:bb:5b:9a:dc:43:3c:f4:b3:c6:91:5a:5b:c5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Validity
Not Before: Apr 29 17:01:05 2025 GMT
Not After : Apr 30 17:01:05 2025 GMT
Subject: CN=09e421c1e863d92e7913d3519a1ec985d0195797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:28:dc:71:f6:49:cd:bf:00:e4:58:d1:61:
d8:fd:84:a0:77:75:d4:14:43:11:a4:d2:98:2e:09:
85:01:12:3d:dd:8b:10:d2:6c:94:ae:cc:98:77:55:
d8:45:fc:63:dc:cb:01:f2:f1:a8:00:9d:d6:9b:c9:
8c:68:75:58:8b:6c:53:2e:0a:97:45:84:48:b3:81:
80:e0:f8:68:f3:a8:88:01:ce:1f:dc:dd:14:bb:f6:
cb:3a:19:e3:96:c6:d5:7c:c1:fc:26:97:fc:c9:0f:
b7:83:91:a3:68:34:86:50:7c:9f:e8:54:0a:78:17:
75:3e:65:d3:3e:f9:0c:07:7e:5a:db:d1:8b:81:39:
2c:32:68:1a:6a:2a:0e:b8:dc:84:7b:5d:6d:18:44:
32:8f:d2:d7:4c:87:f7:0b:24:01:04:2b:10:a0:09:
b6:7f:1e:f6:95:2c:1d:fa:cd:d5:f1:5e:21:2c:97:
03:96:46:d5:4a:96:ea:0c:2b:f9:5e:fe:68:85:df:
a2:c2:23:60:5d:8a:17:fe:ef:9e:7c:61:0c:db:98:
91:7f:2d:3a:3a:c0:91:74:fa:43:e4:30:26:8a:ee:
d4:96:fa:f6:c1:f5:43:b9:b3:79:df:4f:d2:d9:73:
27:88:6c:14:37:c2:93:3b:9a:26:72:d7:fb:b1:35:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E4:21:C1:E8:63:D9:2E:79:13:D3:51:9A:1E:C9:85:D0:19:57:97
X509v3 Authority Key Identifier:
keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c5:34:e1:48:d0:01:be:88:3b:1a:41:a9:9e:5b:b8:20:0a:
f1:73:16:55:26:c9:67:bc:48:c8:ff:45:c1:ce:25:a5:53:20:
d0:cd:70:d8:8e:b4:2e:7d:9b:64:e5:be:79:41:cc:60:2a:af:
2b:49:1d:a8:0a:4d:f0:b2:5c:35:bc:92:6c:74:84:da:96:43:
c6:93:48:4e:06:66:3a:dd:5f:c6:85:06:5a:34:f3:d4:74:e9:
1b:72:ed:92:3c:16:22:d8:0c:4a:be:99:9f:ec:19:5e:a6:ab:
7e:eb:60:64:a3:32:4b:36:a2:bc:fa:3b:ec:79:24:61:87:c2:
86:e3:99:2f:a1:20:04:ee:e3:42:fa:4d:01:13:98:a1:24:ee:
77:bd:91:d7:e8:5a:1c:f1:1c:9a:1a:98:c4:67:87:53:d3:c1:
68:33:99:ec:7f:67:e9:15:7f:e1:b0:4d:21:01:00:d6:99:26:
d1:f9:5d:19:90:9e:ad:d0:d8:ad:35:73:cd:8f:e3:a6:70:b8:
02:70:b9:28:b7:8a:41:9a:02:66:10:ad:d7:1b:cb:07:ff:dc:
6e:6c:2e:a0:90:db:37:30:6f:f2:53:40:96:99:5b:e6:00:49:
77:a2:58:22:ee:f8:d1:97:9c:f4:2f:20:4c:e0:e8:29:ce:e5:
49:a6:b2:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCfrtbmtxDPPSzxpFaW8VXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOTEyOWFhZGIyMDMzNTRkMTVmZjU2YTI3ZThkYmFkYWY4
ZDA3MDUwHhcNMjUwNDI5MTcwMTA1WhcNMjUwNDMwMTcwMTA1WjAzMTEwLwYDVQQD
EygwOWU0MjFjMWU4NjNkOTJlNzkxM2QzNTE5YTFlYzk4NWQwMTk1Nzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhko3HH2Sc2/AORY0WHY/YSgd3XU
FEMRpNKYLgmFARI93YsQ0myUrsyYd1XYRfxj3MsB8vGoAJ3Wm8mMaHVYi2xTLgqX
RYRIs4GA4Pho86iIAc4f3N0Uu/bLOhnjlsbVfMH8Jpf8yQ+3g5GjaDSGUHyf6FQK
eBd1PmXTPvkMB35a29GLgTksMmgaaioOuNyEe11tGEQyj9LXTIf3CyQBBCsQoAm2
fx72lSwd+s3V8V4hLJcDlkbVSpbqDCv5Xv5ohd+iwiNgXYoX/u+efGEM25iRfy06
OsCRdPpD5DAmiu7Ulvr2wfVDubN530/S2XMniGwUN8KTO5omctf7sTWDfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnkIcHoY9kueRPTUZoeyYXQGVeXMB8GA1UdIwQY
MBaAFHyRKarbIDNU0V/1aifo262vjQcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkpFcHF0c2dNMVRSWF9WcUotamJyYS1OQndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82ZTRmZWQtNjZjOC00ZDI0LWFhNjYt
ZjJjNGM5Y2ExNTU2LzEvZkpFcHF0c2dNMVRSWF9WcUotamJyYS1OQndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82ZTRmZWQtNjZjOC00ZDI0LWFhNjYtZjJjNGM5Y2ExNTU2
LzEvZkpFcHF0c2dNMVRSWF9WcUotamJyYS1OQndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcU04UjQ
Ab6IOxpBqZ5buCAK8XMWVSbJZ7xIyP9Fwc4lpVMg0M1w2I60Ln2bZOW+eUHMYCqv
K0kdqApN8LJcNbySbHSE2pZDxpNITgZmOt1fxoUGWjTz1HTpG3LtkjwWItgMSr6Z
n+wZXqarfutgZKMySzaivPo77HkkYYfChuOZL6EgBO7jQvpNAROYoSTud72R1+ha
HPEcmhqYxGeHU9PBaDOZ7H9n6RV/4bBNIQEA1pkm0fldGZCerdDYrTVzzY/jpnC4
AnC5KLeKQZoCZhCt1xvLB//cbmwuoJDbNzBv8lNAlplb5gBJd6JYIu740Zec9C8g
TODoKc7lSaay+g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:33:48 2025 by rpki-client