Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier: lCjNhrcKdvLqfwTsH0HZeOB9Xz5hon82sTeJ14Wbwoo=
Subject key identifier: 7E:9D:1E:45:08:B9:D6:D1:EB:1C:36:B8:1E:28:E5:63:CA:E4:4A:30
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 01967A8DFD3BC822A834375D5E2A9CBC361E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number: 1575
Signing time: Mon 28 Apr 2025 04:00:47 +0000
Manifest this update: Mon 28 Apr 2025 04:00:47 +0000
Manifest next update: Tue 29 Apr 2025 04:00:47 +0000
Files and hashes: 1: J5hR6qbnwqDQorjgQKA4nS-MMic.roa (hash: K6vNh4g2g+c8tlGqdXpR0r75yDquSeuJCke6e2iRcws=)
2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: urLP1Daog2/ImR8sbRFOU5Fq2PrXOAQ+zICFi06+v0E=)
3: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=)
4: uGyfl12bvyJ2eV3o7doqVU6voOE.roa (hash: a09UlLa9GmADfOkOHhG1EZH/uY1F2w2X5XhkL2/q/aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:fd:3b:c8:22:a8:34:37:5d:5e:2a:9c:bc:36:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Apr 28 04:00:47 2025 GMT
Not After : Apr 29 04:00:47 2025 GMT
Subject: CN=7e9d1e4508b9d6d1eb1c36b81e28e563cae44a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:b4:6f:55:e4:50:3a:52:e2:44:72:c0:03:
08:53:3a:20:ba:00:c9:53:73:0e:ba:5b:70:78:fc:
2e:76:78:ca:e8:60:f0:dc:86:30:28:14:2f:1c:9b:
82:55:d8:0d:93:6f:83:74:2f:f6:6c:f9:e9:b2:40:
95:c4:13:2d:50:f7:89:03:60:fb:45:2a:ca:6a:f7:
6b:0c:3d:ac:68:f2:b9:e8:c3:52:19:b3:f0:06:76:
fa:ba:e1:3d:ba:cc:9e:7b:b7:ec:e2:ec:4b:24:87:
56:b7:67:d3:b2:f8:e0:ff:23:0e:d3:75:16:39:48:
87:d3:6b:e3:ad:fc:26:2a:95:fa:12:8d:9c:65:6f:
56:27:21:c2:f9:bd:08:d9:11:60:5a:d8:34:d2:45:
4c:91:d2:a9:d7:43:bb:6a:24:dc:1d:a8:86:31:be:
57:21:20:00:e5:4b:c5:7e:17:05:f8:b0:b9:6b:97:
da:b8:42:0e:92:ea:53:29:aa:e8:ed:bd:c1:b8:75:
76:1d:1b:5a:2a:4a:37:6f:cc:fb:36:95:bb:45:43:
a9:7d:e7:77:82:d3:a4:91:d8:e6:69:2f:62:bb:31:
18:5c:8d:a0:75:73:97:31:2f:a3:da:6a:d9:29:5f:
8c:d2:22:95:04:bc:f4:70:13:75:7c:0f:88:7e:af:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9D:1E:45:08:B9:D6:D1:EB:1C:36:B8:1E:28:E5:63:CA:E4:4A:30
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bc:ea:c5:ab:77:10:b6:a5:df:f6:fc:75:ff:6f:d8:ff:95:
41:fb:96:3d:f3:41:02:74:a8:95:58:5c:3a:27:a8:78:f0:b7:
59:8e:de:0f:8c:90:6b:be:d9:79:e7:85:0e:31:74:19:80:ba:
58:e3:95:dc:88:fb:7f:cd:ed:7f:ad:bc:0a:d3:75:35:31:8f:
11:d2:bf:ae:64:a7:aa:9d:ac:3a:55:62:a5:f8:a5:c7:f0:ee:
24:c9:c4:0c:c5:eb:02:06:0e:f5:a8:49:43:ae:61:d1:bf:95:
17:42:ed:7e:0e:eb:2d:e3:54:7f:e8:52:6b:70:8e:0e:94:66:
79:ae:c4:f0:ff:7d:56:30:c9:1d:1c:97:19:91:f5:24:96:b6:
c7:6a:73:2b:9e:47:95:69:b3:73:eb:34:b0:3d:0f:c0:37:79:
c7:a8:b8:7c:95:b9:96:72:fc:55:99:42:ba:e3:31:fd:5e:bd:
7a:ab:be:78:ba:00:83:96:a4:e7:65:cc:ea:26:22:9f:bb:03:
70:79:e8:db:4a:4d:dc:88:27:80:d5:2e:1a:eb:18:9f:e8:c9:
9b:81:f7:9c:11:6f:60:3a:39:41:dd:96:39:0f:91:6b:53:eb:
20:0f:84:db:3f:25:e0:a9:35:68:5a:1d:0b:b9:55:d2:f8:19:
89:93:84:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6jf07yCKoNDddXiqcvDYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTQ3YzhiM2YzNzg1MGU5ZjkwNzQ5OTM4NDVjNGUwNjlm
OGVmZTIwHhcNMjUwNDI4MDQwMDQ3WhcNMjUwNDI5MDQwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZTlkMWU0NTA4YjlkNmQxZWIxYzM2YjgxZTI4ZTU2M2NhZTQ0YTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yC0b1XkUDpS4kRywAMIUzogugDJ
U3MOultwePwudnjK6GDw3IYwKBQvHJuCVdgNk2+DdC/2bPnpskCVxBMtUPeJA2D7
RSrKavdrDD2saPK56MNSGbPwBnb6uuE9usyee7fs4uxLJIdWt2fTsvjg/yMO03UW
OUiH02vjrfwmKpX6Eo2cZW9WJyHC+b0I2RFgWtg00kVMkdKp10O7aiTcHaiGMb5X
ISAA5UvFfhcF+LC5a5fauEIOkupTKaro7b3BuHV2HRtaKko3b8z7NpW7RUOpfed3
gtOkkdjmaS9iuzEYXI2gdXOXMS+j2mrZKV+M0iKVBLz0cBN1fA+Ifq/yqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6dHkUIudbR6xw2uB4o5WPK5EowMB8GA1UdIwQY
MBaAFCQUfIs/N4UOn5B0mThFxOBp+O/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEt
YjM1MzViNGNhNTBmLzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEtYjM1MzViNGNhNTBm
LzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLzqxat3
ELal3/b8df9v2P+VQfuWPfNBAnSolVhcOieoePC3WY7eD4yQa77ZeeeFDjF0GYC6
WOOV3Ij7f83tf628CtN1NTGPEdK/rmSnqp2sOlVipfilx/DuJMnEDMXrAgYO9ahJ
Q65h0b+VF0Ltfg7rLeNUf+hSa3CODpRmea7E8P99VjDJHRyXGZH1JJa2x2pzK55H
lWmzc+s0sD0PwDd5x6i4fJW5lnL8VZlCuuMx/V69equ+eLoAg5ak52XM6iYin7sD
cHno20pN3IgngNUuGusYn+jJm4H3nBFvYDo5Qd2WOQ+Ra1PrIA+E2z8l4Kk1aFod
C7lV0vgZiZOEjQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:28:34 2025 by rpki-client