Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier: DfcLPsFrlZRBeQW0r9JaMrO4wc3vZx1D9GreL83/qcw=
Subject key identifier: 23:E4:64:56:99:FB:94:2E:8E:68:61:AD:75:D6:E7:81:57:A9:D3:74
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial: 01968322C8488A6A78BD045B4B6DF096E1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number: 06A6
Signing time: Tue 29 Apr 2025 20:00:16 +0000
Manifest this update: Tue 29 Apr 2025 20:00:16 +0000
Manifest next update: Wed 30 Apr 2025 20:00:16 +0000
Files and hashes: 1: 1714kp0cfca_poPK5-VjFlBE8Bk.roa (hash: j4eVSfOj5HVSdHjC10lxDRGeLnqFO2C+nkquqN7eUhM=)
2: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: 949rK0L1q5iufVtpGyYIQLQzgJUkcw+wWMSctQoWCV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:c8:48:8a:6a:78:bd:04:5b:4b:6d:f0:96:e1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Validity
Not Before: Apr 29 20:00:16 2025 GMT
Not After : Apr 30 20:00:16 2025 GMT
Subject: CN=23e4645699fb942e8e6861ad75d6e78157a9d374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:26:19:ad:46:e0:05:47:5f:d9:6d:86:d7:
b6:4c:ee:70:44:29:ee:0c:58:5c:e4:6c:80:7d:44:
4c:eb:d2:29:42:5f:98:30:dc:49:04:e4:ff:4a:19:
5a:d9:65:96:14:63:10:54:a7:55:55:8f:38:01:25:
8c:35:7e:19:d6:62:30:38:3f:9e:d5:a1:e9:fc:99:
f7:de:7f:90:09:45:e7:0d:a9:ab:26:e1:3d:b0:e4:
d2:89:a2:01:c6:3b:ff:69:1b:83:e6:f0:af:11:21:
53:eb:26:62:25:2a:71:3a:7d:e2:e9:10:d1:7d:97:
76:74:02:e9:4a:a8:f1:f9:68:e1:5f:7f:85:fd:9e:
15:1f:35:7e:d8:95:e2:bf:f8:c3:3f:44:dc:73:7c:
64:0f:20:6a:34:59:54:bd:bf:cc:eb:74:b4:e2:41:
52:d1:5d:0b:ce:ac:89:7f:3d:84:3f:2b:c9:2e:68:
3a:ff:87:a7:e3:71:e8:24:71:ab:a6:34:ff:dd:1b:
54:f7:88:6d:d1:87:0f:91:a0:a1:a6:a8:83:d3:fd:
b5:7a:70:41:c6:13:ae:5c:26:01:6c:b6:48:72:f2:
38:35:b7:2d:45:c4:f8:ab:6a:2d:10:fc:7a:45:7a:
e1:76:62:91:3c:af:1b:50:bf:69:bf:ff:55:06:68:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E4:64:56:99:FB:94:2E:8E:68:61:AD:75:D6:E7:81:57:A9:D3:74
X509v3 Authority Key Identifier:
keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7b:8e:32:55:34:f0:ae:3a:71:24:ce:b3:04:30:52:0a:7e:
47:fb:1e:a4:38:5b:cc:3a:da:36:5d:69:cf:88:ba:2a:35:02:
ae:95:d8:f5:c5:8b:1a:b2:68:4c:6f:34:4d:fc:b1:d3:50:ab:
fc:70:a6:60:dd:1b:26:6a:7c:2b:b8:3d:85:69:45:17:98:3a:
4b:ac:1f:c4:06:00:c5:9f:17:82:8f:64:ea:df:8d:04:4d:52:
27:d8:04:57:db:75:0f:22:1f:ff:e9:f5:16:50:82:dc:df:6c:
2f:a5:08:b6:18:a4:4c:81:4d:79:04:7e:30:7d:3b:53:0d:d1:
f3:12:25:7b:21:88:c8:f9:af:5d:b2:65:e3:a8:73:b6:fb:81:
3d:e2:34:1e:bb:2b:49:48:e5:4b:04:50:6d:0c:c0:82:0f:70:
2c:24:f2:5f:3d:75:5f:4a:60:01:86:4b:0e:e1:5a:07:cc:47:
a0:0b:49:50:f2:d2:d8:0a:a7:55:fd:d7:85:f4:34:d0:85:6c:
b0:ee:07:57:21:ab:8f:97:e8:17:31:a7:7f:ce:c8:3e:78:a0:
45:c2:c5:00:bf:47:5a:e6:47:42:c1:a4:cd:a2:74:ee:19:c0:
8f:1b:63:73:9f:64:d3:c6:b7:3a:6b:17:73:86:a8:12:01:57:
35:bc:46:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDIshIimp4vQRbS23wluH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NmY5YmU3ODNkNzNkOTVhYjhhYTU0NjE5ZTYwZjkwMTFj
MDRkNjcwHhcNMjUwNDI5MjAwMDE2WhcNMjUwNDMwMjAwMDE2WjAzMTEwLwYDVQQD
EygyM2U0NjQ1Njk5ZmI5NDJlOGU2ODYxYWQ3NWQ2ZTc4MTU3YTlkMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS0mGa1G4AVHX9lthte2TO5wRCnu
DFhc5GyAfURM69IpQl+YMNxJBOT/Shla2WWWFGMQVKdVVY84ASWMNX4Z1mIwOD+e
1aHp/Jn33n+QCUXnDamrJuE9sOTSiaIBxjv/aRuD5vCvESFT6yZiJSpxOn3i6RDR
fZd2dALpSqjx+WjhX3+F/Z4VHzV+2JXiv/jDP0Tcc3xkDyBqNFlUvb/M63S04kFS
0V0LzqyJfz2EPyvJLmg6/4en43HoJHGrpjT/3RtU94ht0YcPkaChpqiD0/21enBB
xhOuXCYBbLZIcvI4NbctRcT4q2otEPx6RXrhdmKRPK8bUL9pv/9VBmgJywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPkZFaZ+5QujmhhrXXW54FXqdN0MB8GA1UdIwQY
MBaAFCRvm+eD1z2Vq4qlRhnmD5ARwE1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWIt
Y2JiZDAxZjJiOTFjLzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWItY2JiZDAxZjJiOTFj
LzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnuOMlU0
8K46cSTOswQwUgp+R/sepDhbzDraNl1pz4i6KjUCrpXY9cWLGrJoTG80Tfyx01Cr
/HCmYN0bJmp8K7g9hWlFF5g6S6wfxAYAxZ8Xgo9k6t+NBE1SJ9gEV9t1DyIf/+n1
FlCC3N9sL6UIthikTIFNeQR+MH07Uw3R8xIleyGIyPmvXbJl46hztvuBPeI0Hrsr
SUjlSwRQbQzAgg9wLCTyXz11X0pgAYZLDuFaB8xHoAtJUPLS2AqnVf3XhfQ00IVs
sO4HVyGrj5foFzGnf87IPnigRcLFAL9HWuZHQsGkzaJ07hnAjxtjc59k08a3OmsX
c4aoEgFXNbxGUw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:09:32 2025 by rpki-client