Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File: INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier: brYNAlh7qOcfuF5PgA7kvVBTBMi5od7xq3A7eS/Kmyw=
Subject key identifier: 76:60:6E:2F:E9:D1:E1:1C:DE:8B:DC:35:98:92:FF:41:DD:62:38:5C
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer: /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial: 019676B0D84542E6BF196B04EFFD35EFE762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number: 0987
Signing time: Sun 27 Apr 2025 10:00:23 +0000
Manifest this update: Sun 27 Apr 2025 10:00:23 +0000
Manifest next update: Mon 28 Apr 2025 10:00:23 +0000
Files and hashes: 1: 5OMr3xKs8jvtoFSwFc24Cwr8qm0.roa (hash: yTyBz+xUzE60EnbY56LmeruhsoeDG36ww4aSRH8th0I=)
2: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: Km+ib398EQpcOPZLNnnk1SzoKflBXBud+DsE5KXNwsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:d8:45:42:e6:bf:19:6b:04:ef:fd:35:ef:e7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Validity
Not Before: Apr 27 10:00:23 2025 GMT
Not After : Apr 28 10:00:23 2025 GMT
Subject: CN=76606e2fe9d1e11cde8bdc359892ff41dd62385c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:ff:ef:c2:cb:cf:e4:cd:72:d1:07:cb:72:
0b:59:ba:67:18:72:35:f4:33:e5:4b:11:a1:92:f2:
4d:fd:e4:0d:55:36:4a:97:c1:a0:da:fb:84:ce:2e:
7c:17:7a:38:3d:f7:e3:f9:62:9f:d1:68:89:34:df:
b2:57:e4:ed:af:cd:38:19:fd:c2:aa:25:6c:e5:a7:
cb:39:94:8c:c2:9a:cb:a0:c5:db:38:7b:58:90:9f:
87:ff:35:9b:3c:9b:68:9c:45:91:df:b3:06:f1:fc:
4f:4c:50:7d:71:71:49:3c:54:31:df:44:1d:23:2a:
ca:c0:2d:24:f0:c2:0b:30:dd:95:fe:82:71:5c:c0:
67:ed:5e:94:98:e6:09:5c:a0:fb:58:16:f1:b1:f9:
14:14:30:00:ed:dc:08:4f:8d:cf:51:21:06:96:fd:
e6:7c:f5:e8:95:fa:35:43:60:3c:16:27:62:01:b2:
6a:f4:69:e5:fe:09:f2:69:48:95:52:e9:9f:f0:6b:
44:19:8a:3d:f1:00:a6:c2:ae:9b:65:1a:d5:a8:08:
7f:40:6f:a6:20:40:58:5c:8f:a9:84:91:65:d4:f0:
6f:eb:b0:eb:ca:0e:88:87:2b:12:5e:f1:89:0d:77:
7f:01:c8:8c:56:cc:5e:1e:8b:51:79:b4:06:2a:80:
53:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:60:6E:2F:E9:D1:E1:1C:DE:8B:DC:35:98:92:FF:41:DD:62:38:5C
X509v3 Authority Key Identifier:
keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2b:ec:7c:2a:cb:d2:a1:ca:79:38:f8:7c:74:21:61:c6:4b:
99:cb:92:4a:2c:d8:6a:b1:86:10:1e:51:bd:fc:8f:70:0a:3f:
6d:7b:58:dc:2e:6a:67:dd:51:07:ab:26:b0:89:ed:f4:50:ce:
62:bc:6d:5a:7c:1c:03:94:b8:c1:ea:b9:6e:e6:da:9b:69:ca:
41:b4:21:f9:03:44:e2:ea:0e:dd:9b:a4:93:77:2e:a3:27:89:
fe:32:01:79:e5:1e:3c:ca:8e:e1:91:8b:72:ea:71:16:25:19:
62:86:e5:31:42:90:d5:ab:b5:63:35:87:18:df:5b:d6:2d:0a:
70:e6:55:4d:41:cc:11:24:2c:5b:ad:24:6a:30:46:64:0f:34:
2f:10:71:28:bc:0b:bc:95:b1:c8:16:cc:ae:25:f3:2d:f7:cb:
48:66:8e:63:45:a3:8b:2b:1f:0f:bf:56:fd:b8:04:34:2f:82:
9d:9e:48:66:59:1a:46:ee:83:68:e5:4d:a5:a7:96:fa:23:57:
1f:7e:83:10:04:87:36:2f:a7:cc:b1:36:4b:ae:bb:b2:b2:4f:
22:2b:56:cd:f8:47:3c:f1:d8:e8:9b:f8:55:a5:87:ff:48:58:
bf:b2:e9:a6:ee:c7:cd:1d:ba:13:91:80:47:05:e9:97:ec:a0:
e9:c4:26:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sNhFQua/GWsE7/017+diMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDI2MzNiZmZiMTZkYTJkNzVlZGFmNDliYzgyMTE4N2Nm
Yjg4ZWYwHhcNMjUwNDI3MTAwMDIzWhcNMjUwNDI4MTAwMDIzWjAzMTEwLwYDVQQD
Eyg3NjYwNmUyZmU5ZDFlMTFjZGU4YmRjMzU5ODkyZmY0MWRkNjIzODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20j/78LLz+TNctEHy3ILWbpnGHI1
9DPlSxGhkvJN/eQNVTZKl8Gg2vuEzi58F3o4Pffj+WKf0WiJNN+yV+Ttr804Gf3C
qiVs5afLOZSMwprLoMXbOHtYkJ+H/zWbPJtonEWR37MG8fxPTFB9cXFJPFQx30Qd
IyrKwC0k8MILMN2V/oJxXMBn7V6UmOYJXKD7WBbxsfkUFDAA7dwIT43PUSEGlv3m
fPXolfo1Q2A8FidiAbJq9Gnl/gnyaUiVUumf8GtEGYo98QCmwq6bZRrVqAh/QG+m
IEBYXI+phJFl1PBv67Dryg6IhysSXvGJDXd/AciMVsxeHotRebQGKoBTSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZgbi/p0eEc3ovcNZiS/0HdYjhcMB8GA1UdIwQY
MBaAFCDSYzv/sW2i117a9JvIIRh8+4jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAt
MWNkNmM4NzFjMWU4LzEvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAtMWNkNmM4NzFjMWU4
LzEvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOivsfCrL
0qHKeTj4fHQhYcZLmcuSSizYarGGEB5RvfyPcAo/bXtY3C5qZ91RB6smsInt9FDO
YrxtWnwcA5S4weq5bubam2nKQbQh+QNE4uoO3Zukk3cuoyeJ/jIBeeUePMqO4ZGL
cupxFiUZYoblMUKQ1au1YzWHGN9b1i0KcOZVTUHMESQsW60kajBGZA80LxBxKLwL
vJWxyBbMriXzLffLSGaOY0WjiysfD79W/bgENC+CnZ5IZlkaRu6DaOVNpaeW+iNX
H36DEASHNi+nzLE2S667srJPIitWzfhHPPHY6Jv4VaWH/0hYv7Lppu7HzR26E5GA
RwXpl+yg6cQm5w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:35 2025 by rpki-client