Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
File: JAy7mUeWHigo2EdLysoem5FVZWA.mft (raw, json)
Hash identifier: I325wcwP6WIQf4zGQFRUG92quYGOAdL0fnP7r4BTuHI=
Subject key identifier: 71:89:E2:09:D2:37:19:D1:19:5C:D4:26:93:E1:ED:10:E7:9A:40:89
Authority key identifier: 24:0C:BB:99:47:96:1E:28:28:D8:47:4B:CA:CA:1E:9B:91:55:65:60
Certificate issuer: /CN=240cbb9947961e2828d8474bcaca1e9b91556560
Certificate serial: 01967CE9FCAEDEFEC4883620D86550B8A8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAy7mUeWHigo2EdLysoem5FVZWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
Manifest number: 124E
Signing time: Mon 28 Apr 2025 15:00:31 +0000
Manifest this update: Mon 28 Apr 2025 15:00:31 +0000
Manifest next update: Tue 29 Apr 2025 15:00:31 +0000
Files and hashes: 1: JAy7mUeWHigo2EdLysoem5FVZWA.crl (hash: wTRq+qnvW+TzzMS9NPLldvm4ZzpJAUp8l9DQWNb6gfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAy7mUeWHigo2EdLysoem5FVZWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:fc:ae:de:fe:c4:88:36:20:d8:65:50:b8:a8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240cbb9947961e2828d8474bcaca1e9b91556560
Validity
Not Before: Apr 28 15:00:31 2025 GMT
Not After : Apr 29 15:00:31 2025 GMT
Subject: CN=7189e209d23719d1195cd42693e1ed10e79a4089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:84:85:12:6f:f4:e3:6a:70:86:e8:b9:be:
e7:24:1d:65:e4:c9:23:ed:97:d2:83:84:19:87:ec:
cf:d5:82:dd:e7:d2:01:bb:e6:2d:07:a6:1e:fd:51:
82:f2:4e:ea:aa:60:af:79:ce:2c:66:f0:28:7f:fa:
ef:f4:5f:79:70:a2:31:bd:ef:e9:a8:e8:94:00:b3:
0e:bd:ea:0e:8f:7e:98:c1:2b:c9:78:97:0f:4e:90:
37:d9:f1:a1:27:31:b6:89:60:de:c2:59:dc:26:75:
5f:a8:06:40:a1:b7:9c:55:33:f4:15:ae:f1:75:c0:
3b:69:d8:f5:08:5d:69:38:20:97:a4:8b:74:75:06:
ae:7f:3c:fc:e8:68:c0:04:fd:a2:84:07:47:73:23:
20:e8:d5:2e:9f:6c:74:ba:dd:1b:06:54:a7:49:39:
a9:55:5d:54:64:de:4f:05:03:e9:c5:93:25:bd:dc:
c9:06:3a:fb:3a:ad:58:8f:9e:35:55:36:94:b8:58:
22:d1:f5:e1:93:fc:82:48:92:23:09:50:b5:ea:9d:
7d:30:f6:ef:54:08:7b:0a:d7:fe:7d:ee:d5:29:b0:
1a:e8:31:2c:c3:c1:10:fa:3a:69:9f:71:2c:54:49:
6d:76:d3:c9:0c:81:8c:04:86:8a:8e:25:2f:b8:f3:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:89:E2:09:D2:37:19:D1:19:5C:D4:26:93:E1:ED:10:E7:9A:40:89
X509v3 Authority Key Identifier:
keyid:24:0C:BB:99:47:96:1E:28:28:D8:47:4B:CA:CA:1E:9B:91:55:65:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAy7mUeWHigo2EdLysoem5FVZWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:35:7a:50:48:89:22:d4:a4:cd:bc:2c:78:eb:3b:d8:f3:7e:
89:01:05:75:02:63:51:d1:ef:6a:c0:4c:d6:14:14:6f:42:3d:
5d:72:aa:3a:3c:82:61:b1:34:e9:b4:41:ac:72:9c:8a:06:0a:
6f:31:ee:19:a3:8b:54:a5:ae:f4:08:f3:49:65:f0:cf:4f:c8:
c9:cf:d1:3d:b6:eb:cc:2f:e8:87:02:cf:f2:16:bd:31:cd:39:
19:d9:07:d8:ca:51:90:4f:ef:a6:e3:94:99:2b:60:c1:5a:ad:
95:b3:ed:9b:45:ac:24:80:d8:39:3a:54:48:fb:13:bd:db:eb:
05:7c:2b:aa:60:9a:6a:90:48:d8:bb:04:7e:c9:46:60:50:f3:
27:0b:85:48:c6:b2:00:90:4c:86:7f:ca:69:68:c7:ab:4a:a6:
39:23:33:84:36:83:a9:05:19:88:84:bd:e8:78:53:33:91:0a:
d3:8a:41:ef:95:35:df:f5:1d:98:de:cc:1b:03:ad:0b:84:26:
40:b5:6b:f0:1f:36:d6:75:35:4e:b5:23:23:fd:62:4b:b8:e9:
a0:8f:ac:9f:5e:07:65:0b:c8:f7:9d:94:37:02:84:ee:71:be:
62:c3:7b:27:a3:b4:eb:c0:86:a5:4a:98:bb:c9:30:5f:da:ed:
ad:b0:1a:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ86fyu3v7EiDYg2GVQuKjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGNiYjk5NDc5NjFlMjgyOGQ4NDc0YmNhY2ExZTliOTE1
NTY1NjAwHhcNMjUwNDI4MTUwMDMxWhcNMjUwNDI5MTUwMDMxWjAzMTEwLwYDVQQD
Eyg3MTg5ZTIwOWQyMzcxOWQxMTk1Y2Q0MjY5M2UxZWQxMGU3OWE0MDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVaEhRJv9ONqcIboub7nJB1l5Mkj
7ZfSg4QZh+zP1YLd59IBu+YtB6Ye/VGC8k7qqmCvec4sZvAof/rv9F95cKIxve/p
qOiUALMOveoOj36YwSvJeJcPTpA32fGhJzG2iWDewlncJnVfqAZAobecVTP0Fa7x
dcA7adj1CF1pOCCXpIt0dQaufzz86GjABP2ihAdHcyMg6NUun2x0ut0bBlSnSTmp
VV1UZN5PBQPpxZMlvdzJBjr7Oq1Yj541VTaUuFgi0fXhk/yCSJIjCVC16p19MPbv
VAh7Ctf+fe7VKbAa6DEsw8EQ+jppn3EsVEltdtPJDIGMBIaKjiUvuPMecQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGJ4gnSNxnRGVzUJpPh7RDnmkCJMB8GA1UdIwQY
MBaAFCQMu5lHlh4oKNhHS8rKHpuRVWVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkF5N21VZVdIaWdvMkVkTHlzb2VtNUZWWldBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85NWRmODEtZmM5ZS00YzVmLWJiNDMt
ZmZiMDI4ZjBhMDJmLzEvSkF5N21VZVdIaWdvMkVkTHlzb2VtNUZWWldBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85NWRmODEtZmM5ZS00YzVmLWJiNDMtZmZiMDI4ZjBhMDJm
LzEvSkF5N21VZVdIaWdvMkVkTHlzb2VtNUZWWldBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDV6UEiJ
ItSkzbwseOs72PN+iQEFdQJjUdHvasBM1hQUb0I9XXKqOjyCYbE06bRBrHKcigYK
bzHuGaOLVKWu9AjzSWXwz0/Iyc/RPbbrzC/ohwLP8ha9Mc05GdkH2MpRkE/vpuOU
mStgwVqtlbPtm0WsJIDYOTpUSPsTvdvrBXwrqmCaapBI2LsEfslGYFDzJwuFSMay
AJBMhn/KaWjHq0qmOSMzhDaDqQUZiIS96HhTM5EK04pB75U13/UdmN7MGwOtC4Qm
QLVr8B821nU1TrUjI/1iS7jpoI+sn14HZQvI952UNwKE7nG+YsN7J6O068CGpUqY
u8kwX9rtrbAasg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:13:49 2025 by rpki-client