Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
File: ctjb6kAj1p9H-JvSCC__skZt0qU.mft (raw, json)
Hash identifier: zXw05YjUz36uao/0A2506UEHvqjwIxmVcMZVVgMxdrg=
Subject key identifier: 83:0A:74:B8:4C:2B:95:5B:D9:B2:B9:B2:CA:01:C8:89:9A:97:D1:6C
Authority key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
Certificate issuer: /CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Certificate serial: 019678D6BDB1A49DAF1BDF3B307905ACAB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
Manifest number: 06CF
Signing time: Sun 27 Apr 2025 20:01:01 +0000
Manifest this update: Sun 27 Apr 2025 20:01:01 +0000
Manifest next update: Mon 28 Apr 2025 20:01:01 +0000
Files and hashes: 1: Egv_COpkQ4qE0m0lj_BQmNwIMRA.roa (hash: 7o6c3PTeF8AIq/25Q6USnosQEeLS7MscdEHZbwRxm6I=)
2: ctjb6kAj1p9H-JvSCC__skZt0qU.crl (hash: Nzp3biHk4vdjFIUzXbDfdkazFReY7Bm5wHMJPNgrCcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:bd:b1:a4:9d:af:1b:df:3b:30:79:05:ac:ab:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Validity
Not Before: Apr 27 20:01:01 2025 GMT
Not After : Apr 28 20:01:01 2025 GMT
Subject: CN=830a74b84c2b955bd9b2b9b2ca01c8899a97d16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:0a:2c:68:d4:22:c1:75:51:12:c1:8b:af:
cb:cf:2c:ef:a4:8a:d9:ff:1f:ef:85:ca:21:16:f2:
ea:5c:3a:72:6d:27:b0:46:61:06:fb:31:3e:09:6f:
21:65:99:2b:1c:37:78:41:bf:1d:c1:f6:a9:8e:54:
17:57:52:58:5c:3d:28:f1:3e:d5:df:f2:35:e1:ec:
e3:e4:43:a9:54:14:0d:6d:68:8b:06:5d:6f:0b:4f:
f8:2d:61:90:53:7b:7f:b6:47:d2:97:b8:a7:0e:bc:
b3:cb:a1:bb:9f:4a:e5:4a:db:dc:13:a6:c9:70:42:
f4:63:9f:c3:95:14:5e:e4:02:88:07:4d:03:e9:07:
dc:64:7f:ac:80:4d:5c:e4:86:ff:d5:a2:66:9b:cc:
02:44:16:af:09:ed:e4:5e:a4:f4:67:aa:76:85:a0:
bb:f3:cc:31:bb:81:8d:c7:c0:2b:88:24:7c:44:6c:
18:ff:f2:4a:a6:49:90:b4:d9:44:b7:8b:32:2b:7f:
f4:cd:ba:90:4f:77:e6:2d:df:8b:9c:bd:a7:ac:21:
95:01:16:15:85:6c:4f:27:58:e6:67:c6:21:22:14:
b0:9f:2c:aa:61:1d:e0:34:5f:61:ad:fc:19:f9:06:
07:6d:bf:f5:e8:1a:ba:39:c3:78:98:d6:c7:64:48:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0A:74:B8:4C:2B:95:5B:D9:B2:B9:B2:CA:01:C8:89:9A:97:D1:6C
X509v3 Authority Key Identifier:
keyid:72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:59:a7:52:6c:cb:3d:28:a4:00:b3:34:cf:6b:b3:2d:ec:62:
be:53:d1:f7:9a:08:db:77:23:bf:f3:82:0f:4f:58:3e:72:36:
dc:32:31:20:18:86:e3:d1:7c:63:03:11:49:2f:96:4b:d3:e7:
21:9d:69:5b:ed:3f:74:2e:de:c4:17:69:bf:8d:7a:9e:c2:78:
37:7c:ca:32:98:18:fa:c7:0e:ab:38:c8:06:d9:6b:55:3a:2b:
21:f3:b0:80:63:58:14:ac:1e:a9:5e:a2:d1:5a:f3:4a:f5:0b:
d9:77:6b:8d:20:05:24:15:25:e5:5e:a3:34:d2:a2:d6:01:0d:
1f:6a:cc:e8:4e:fc:53:88:c5:b7:2f:06:96:4d:19:5f:e2:40:
9b:f5:39:e3:82:95:ae:c9:ae:b7:3d:d7:a7:be:ee:0b:c6:7b:
5c:46:03:71:0f:e9:97:c2:0c:aa:3f:1e:e7:1a:c4:0d:1f:41:
f2:08:00:15:b1:47:ae:63:49:f5:ee:f4:dc:b2:7a:2a:3d:44:
80:de:c7:34:b7:82:e5:69:a6:9b:22:79:e6:c6:a5:9f:a4:55:
76:70:cf:86:54:af:eb:80:2d:21:5b:70:d7:00:b9:45:55:40:
1f:20:d2:c1:fa:56:3f:ea:8a:8c:3a:38:cb:df:a7:92:04:60:
2a:b3:8f:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41r2xpJ2vG987MHkFrKsSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDhkYmVhNDAyM2Q2OWY0N2Y4OWJkMjA4MmZmZmIyNDY2
ZGQyYTUwHhcNMjUwNDI3MjAwMTAxWhcNMjUwNDI4MjAwMTAxWjAzMTEwLwYDVQQD
Eyg4MzBhNzRiODRjMmI5NTViZDliMmI5YjJjYTAxYzg4OTlhOTdkMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryIKLGjUIsF1URLBi6/LzyzvpIrZ
/x/vhcohFvLqXDpybSewRmEG+zE+CW8hZZkrHDd4Qb8dwfapjlQXV1JYXD0o8T7V
3/I14ezj5EOpVBQNbWiLBl1vC0/4LWGQU3t/tkfSl7inDryzy6G7n0rlStvcE6bJ
cEL0Y5/DlRRe5AKIB00D6QfcZH+sgE1c5Ib/1aJmm8wCRBavCe3kXqT0Z6p2haC7
88wxu4GNx8AriCR8RGwY//JKpkmQtNlEt4syK3/0zbqQT3fmLd+LnL2nrCGVARYV
hWxPJ1jmZ8YhIhSwnyyqYR3gNF9hrfwZ+QYHbb/16Bq6OcN4mNbHZEjL7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMKdLhMK5Vb2bK5ssoByImal9FsMB8GA1UdIwQY
MBaAFHLY2+pAI9afR/ib0ggv/7JGbdKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hOTA5MWYtMjdhMi00MmEzLTk1MmIt
OWVkMTgwNGYzMjgyLzEvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hOTA5MWYtMjdhMi00MmEzLTk1MmItOWVkMTgwNGYzMjgy
LzEvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1mnUmzL
PSikALM0z2uzLexivlPR95oI23cjv/OCD09YPnI23DIxIBiG49F8YwMRSS+WS9Pn
IZ1pW+0/dC7exBdpv416nsJ4N3zKMpgY+scOqzjIBtlrVTorIfOwgGNYFKweqV6i
0VrzSvUL2XdrjSAFJBUl5V6jNNKi1gENH2rM6E78U4jFty8Glk0ZX+JAm/U544KV
rsmutz3Xp77uC8Z7XEYDcQ/pl8IMqj8e5xrEDR9B8ggAFbFHrmNJ9e703LJ6Kj1E
gN7HNLeC5WmmmyJ55saln6RVdnDPhlSv64AtIVtw1wC5RVVAHyDSwfpWP+qKjDo4
y9+nkgRgKrOPWw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:50:51 2025 by rpki-client