Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
File: j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json)
Hash identifier: seQxfG9KI2oEeV3IyUkHC0sj9LTJRdsJYI/XDyaSWdQ=
Subject key identifier: 67:4D:25:8B:95:22:F8:AC:AF:4D:9B:60:6C:3C:1C:0E:EF:51:78:1D
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 01969D87F1E970962A387D7C413B95A70BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
Manifest number: 1524
Signing time: Sun 04 May 2025 23:00:54 +0000
Manifest this update: Sun 04 May 2025 23:00:54 +0000
Manifest next update: Mon 05 May 2025 23:00:54 +0000
Files and hashes: 1: GI5eR-bcyPUXcabh8oF3ym-w-jY.roa (hash: HMe9khM1DXfAv5MN/QlZDROBBZj6X8B6CZKWjkcWcFY=)
2: f1jshjvqQC1or_SUp4VaHxnz0vg.roa (hash: HU3zUMPmn0Fu+40+47r6GzF5dnxd/KAN0UXFve0A1sw=)
3: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: pjkRyRjsjFZkiihJmxucZdK8iBu3WVA8G+Ihh9iBkLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:f1:e9:70:96:2a:38:7d:7c:41:3b:95:a7:0b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: May 4 23:00:54 2025 GMT
Not After : May 5 23:00:54 2025 GMT
Subject: CN=674d258b9522f8acaf4d9b606c3c1c0eef51781d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:61:e9:5a:15:48:15:e4:9a:c3:2b:a4:7f:
95:d0:1e:a9:25:e4:2e:81:8d:32:14:cb:57:fe:33:
a7:24:7a:e4:94:ab:7b:53:70:7e:62:21:a5:d4:0b:
7d:96:9a:2e:de:a7:f8:fe:76:70:d5:1d:3b:06:a4:
5f:fe:57:23:fe:ec:11:0f:92:fb:80:d0:c0:b3:ab:
c6:59:23:74:d5:99:bc:49:38:0a:be:28:cc:f7:9b:
1a:dd:36:b3:cb:a7:d2:74:b3:02:9f:19:a4:9f:92:
b9:41:72:db:8d:fe:e0:72:2e:c7:2c:c4:9b:7b:f6:
64:8d:61:6c:48:65:f7:b3:29:b9:03:ad:bf:df:56:
03:4f:ad:92:f5:a4:6d:4d:69:1f:02:a5:62:1c:ec:
10:14:18:da:2d:fc:44:0b:27:16:3f:a3:31:6e:3f:
03:fe:39:2a:46:d9:c1:e0:5a:ab:d5:f3:4d:8e:c0:
78:84:d0:f2:d2:3b:97:1a:ad:53:00:cc:5f:b3:95:
ae:05:ff:62:28:65:b3:e3:38:d6:16:ea:af:f0:36:
e9:20:bc:90:40:ed:dc:ac:7f:a4:27:e4:ba:b9:85:
b5:33:82:94:78:26:d2:6a:b5:b2:4f:65:82:d1:8a:
c7:1a:ee:f6:79:dd:f5:f4:32:79:84:d9:b1:a2:13:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4D:25:8B:95:22:F8:AC:AF:4D:9B:60:6C:3C:1C:0E:EF:51:78:1D
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b8:90:5a:a6:3c:44:23:64:79:c2:c1:a8:81:c1:5f:79:d0:
56:6f:1c:2e:69:e6:95:36:14:69:ae:f9:27:3b:f1:1c:de:dd:
0a:60:c4:b5:0d:64:84:75:53:58:68:68:ca:01:18:d0:43:e6:
d1:76:a8:11:a6:ac:79:ba:4f:ff:1d:a0:01:d9:c5:8a:8a:c6:
87:98:c3:cb:0b:83:40:7f:64:33:69:2b:8c:14:af:17:31:5e:
57:83:e4:80:2e:1e:95:62:7e:42:a5:e4:40:99:89:7d:ad:d8:
b5:eb:c1:ef:aa:1c:29:a8:ce:62:8b:4d:7d:0d:53:76:18:dd:
ce:f0:95:65:2f:ee:52:12:1a:cd:d9:14:35:af:47:5a:94:95:
08:79:2e:fc:b7:62:5c:c5:a5:f4:e5:b7:d5:ae:04:b5:52:bd:
1c:e2:7d:5f:9a:2c:30:5b:f9:6b:81:d3:79:cf:a2:00:af:41:
32:e9:20:26:da:4c:53:e0:13:46:24:76:17:a7:ca:f8:23:cb:
ca:49:35:7f:aa:d1:48:d6:8c:43:7f:15:6e:99:0b:e7:4f:e3:
5b:f8:36:a1:42:51:ac:87:ac:ee:0b:50:a3:8c:b5:3f:e8:a6:
17:8b:57:1a:65:34:12:16:bd:23:93:d1:bf:30:ae:83:87:39:
97:84:c2:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadh/HpcJYqOH18QTuVpwvfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNWVhODM3OWJjYTQ0ZjRmNmE3ZjRiNjk4NjRjZDliMDJh
MjdiMTIwHhcNMjUwNTA0MjMwMDU0WhcNMjUwNTA1MjMwMDU0WjAzMTEwLwYDVQQD
Eyg2NzRkMjU4Yjk1MjJmOGFjYWY0ZDliNjA2YzNjMWMwZWVmNTE3ODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25Vh6VoVSBXkmsMrpH+V0B6pJeQu
gY0yFMtX/jOnJHrklKt7U3B+YiGl1At9lpou3qf4/nZw1R07BqRf/lcj/uwRD5L7
gNDAs6vGWSN01Zm8STgKvijM95sa3Tazy6fSdLMCnxmkn5K5QXLbjf7gci7HLMSb
e/ZkjWFsSGX3sym5A62/31YDT62S9aRtTWkfAqViHOwQFBjaLfxECycWP6Mxbj8D
/jkqRtnB4Fqr1fNNjsB4hNDy0juXGq1TAMxfs5WuBf9iKGWz4zjWFuqv8DbpILyQ
QO3crH+kJ+S6uYW1M4KUeCbSarWyT2WC0YrHGu72ed319DJ5hNmxohNYdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdNJYuVIvisr02bYGw8HA7vUXgdMB8GA1UdIwQY
MBaAFI9eqDebykT09qf0tphkzZsConsSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgt
ZWNiYjk0NDJmNTg5LzEvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny80MDJkNDMtZTk5Yy00MTEyLWEwMzgtZWNiYjk0NDJmNTg5
LzEvajE2b041dktSUFQycF9TMm1HVE5td0tpZXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLiQWqY8
RCNkecLBqIHBX3nQVm8cLmnmlTYUaa75JzvxHN7dCmDEtQ1khHVTWGhoygEY0EPm
0XaoEaasebpP/x2gAdnFiorGh5jDywuDQH9kM2krjBSvFzFeV4PkgC4elWJ+QqXk
QJmJfa3YtevB76ocKajOYotNfQ1TdhjdzvCVZS/uUhIazdkUNa9HWpSVCHku/Ldi
XMWl9OW31a4EtVK9HOJ9X5osMFv5a4HTec+iAK9BMukgJtpMU+ATRiR2F6fK+CPL
ykk1f6rRSNaMQ38VbpkL50/jW/g2oUJRrIes7gtQo4y1P+imF4tXGmU0Eha9I5PR
vzCug4c5l4TCsw==
-----END CERTIFICATE-----
Generated at Mon May 5 09:54:52 2025 by rpki-client