Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
File: j5-COvmTs5lcnl_0wii9-ZRR-4o.mft (raw, json)
Hash identifier: efXRHVCyIpJRGfzOTVamixLmOCfUE9p/FmyfjHwJP4Q=
Subject key identifier: 40:86:EB:54:CF:8D:F1:93:B8:AE:25:75:29:E8:21:BD:58:3B:9D:79
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial: 019678317DAA1C21E6C36A29557B57F4D43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
Manifest number: 02C0
Signing time: Sun 27 Apr 2025 17:00:31 +0000
Manifest this update: Sun 27 Apr 2025 17:00:31 +0000
Manifest next update: Mon 28 Apr 2025 17:00:31 +0000
Files and hashes: 1: 8KsjpNRaIZUXOi8DwLVHVI28dt8.roa (hash: SXYejuZAdmSHLj52AFM2feQKm4GSepnKMI2O57vhHV0=)
2: j5-COvmTs5lcnl_0wii9-ZRR-4o.crl (hash: 6HQKpciQtPqMPyV4EiCyLaQjyrDQCz/7yeZ+H6tXb8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:7d:aa:1c:21:e6:c3:6a:29:55:7b:57:f4:d4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Validity
Not Before: Apr 27 17:00:31 2025 GMT
Not After : Apr 28 17:00:31 2025 GMT
Subject: CN=4086eb54cf8df193b8ae257529e821bd583b9d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:23:fe:a4:57:60:bd:e2:bb:55:1f:03:84:90:
b1:63:08:e9:0e:ce:97:99:78:44:82:cb:25:ca:88:
4a:83:fe:69:9b:15:4f:ee:fd:b6:c5:e9:73:81:f5:
1e:ce:49:58:23:4c:66:fb:c8:d2:da:49:40:53:b5:
8f:32:31:ee:51:d9:5f:c8:05:86:a1:4c:3b:61:e9:
ef:ef:d8:47:b4:02:3d:91:16:50:2a:50:4b:d8:7c:
d3:e8:9a:ec:f2:8f:cd:79:c6:27:5f:1c:85:e5:fd:
b9:fc:5f:64:5e:6c:0b:c1:81:ba:59:b8:c8:90:b5:
2d:d5:4a:e7:29:73:c1:da:14:4f:d6:95:df:4f:a3:
b1:fe:45:5e:e8:08:74:1a:e7:13:66:b6:aa:02:0f:
18:56:30:24:df:ef:72:a6:b7:77:11:d7:23:41:9c:
62:41:1d:3d:32:e5:32:22:30:b7:76:0c:3c:e6:57:
f4:29:b5:55:91:76:c8:57:42:e1:7b:5f:f6:ee:d8:
88:b9:76:ab:9f:ce:c2:9e:5e:e5:27:06:22:15:a9:
a8:ed:91:37:00:43:c8:de:5d:f7:6c:4b:75:a0:15:
a2:7b:e8:ae:dd:69:cf:47:c7:f4:6c:99:f8:9a:d2:
33:24:e1:83:32:cd:19:f8:9b:fa:2a:12:0d:af:d2:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:86:EB:54:CF:8D:F1:93:B8:AE:25:75:29:E8:21:BD:58:3B:9D:79
X509v3 Authority Key Identifier:
keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fd:cb:91:69:35:d3:7b:64:8b:2d:81:7a:36:4d:32:12:88:
a9:3e:be:09:e4:8c:91:b5:ed:5e:25:d5:3f:1d:1b:c6:97:be:
71:77:d4:bf:19:83:70:6b:db:83:1e:a1:7b:56:32:01:b6:97:
a3:55:0b:b4:41:3f:92:ed:4c:e9:27:cd:0e:60:93:11:65:5e:
bb:36:1b:2f:59:19:b4:2c:9c:88:66:cd:55:3f:6c:45:dd:2c:
e9:51:36:76:fb:1f:4c:ad:b0:62:79:35:ed:89:ab:c5:56:9f:
54:a4:f3:ab:26:0c:e8:3f:e0:73:66:a7:16:ea:6e:3f:4e:d4:
d4:b5:bb:2a:94:6d:d5:6d:f8:6a:bc:97:50:51:e0:ab:72:55:
ab:78:4e:21:04:93:ef:d0:1c:0c:e3:8a:33:f3:ac:50:1a:55:
0f:4f:f2:1e:82:31:71:15:d5:1f:fa:0b:b7:d3:2f:1d:7f:58:
0f:5b:5c:54:8c:64:78:20:de:10:36:9c:b0:a6:84:c1:37:5f:
94:b1:5b:2a:e7:aa:09:82:8b:ff:49:f3:a6:46:8a:2c:91:32:
9d:c5:f8:ec:c3:1c:b3:78:20:ad:6d:fc:08:53:a5:92:69:f2:
e7:7a:66:a0:94:c3:27:b9:f8:52:b5:c4:32:f6:e3:51:b0:9a:
e0:ad:57:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4MX2qHCHmw2opVXtX9NQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOWY4MjNhZjk5M2IzOTk1YzllNWZmNGMyMjhiZGY5OTQ1
MWZiOGEwHhcNMjUwNDI3MTcwMDMxWhcNMjUwNDI4MTcwMDMxWjAzMTEwLwYDVQQD
Eyg0MDg2ZWI1NGNmOGRmMTkzYjhhZTI1NzUyOWU4MjFiZDU4M2I5ZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CP+pFdgveK7VR8DhJCxYwjpDs6X
mXhEgsslyohKg/5pmxVP7v22xelzgfUezklYI0xm+8jS2klAU7WPMjHuUdlfyAWG
oUw7Yenv79hHtAI9kRZQKlBL2HzT6Jrs8o/NecYnXxyF5f25/F9kXmwLwYG6WbjI
kLUt1UrnKXPB2hRP1pXfT6Ox/kVe6Ah0GucTZraqAg8YVjAk3+9yprd3EdcjQZxi
QR09MuUyIjC3dgw85lf0KbVVkXbIV0Lhe1/27tiIuXarn87Cnl7lJwYiFamo7ZE3
AEPI3l33bEt1oBWie+iu3WnPR8f0bJn4mtIzJOGDMs0Z+Jv6KhINr9K0WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECG61TPjfGTuK4ldSnoIb1YO515MB8GA1UdIwQY
MBaAFI+fgjr5k7OZXJ5f9MIovfmUUfuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jZTRkODEtZWM1NC00OTJlLWE3NTEt
MTUxMTY4OWMzYzhhLzEvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jZTRkODEtZWM1NC00OTJlLWE3NTEtMTUxMTY4OWMzYzhh
LzEvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATf3LkWk1
03tkiy2BejZNMhKIqT6+CeSMkbXtXiXVPx0bxpe+cXfUvxmDcGvbgx6he1YyAbaX
o1ULtEE/ku1M6SfNDmCTEWVeuzYbL1kZtCyciGbNVT9sRd0s6VE2dvsfTK2wYnk1
7YmrxVafVKTzqyYM6D/gc2anFupuP07U1LW7KpRt1W34aryXUFHgq3JVq3hOIQST
79AcDOOKM/OsUBpVD0/yHoIxcRXVH/oLt9MvHX9YD1tcVIxkeCDeEDacsKaEwTdf
lLFbKueqCYKL/0nzpkaKLJEyncX47MMcs3ggrW38CFOlkmny53pmoJTDJ7n4UrXE
MvbjUbCa4K1XPQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:28:51 2025 by rpki-client