Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File: j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier: W4poF+cY4YX2sslCWSZJJ9zjxdFcG2vQUWZy0MuF+z0=
Subject key identifier: 89:05:1D:7A:57:A9:A8:AF:D4:E5:6B:C5:CE:3F:E4:66:54:80:E6:27
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 019771511A0C8A875B2F9BE85D18AFCFA099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number: 126C
Signing time: Sun 15 Jun 2025 02:00:29 +0000
Manifest this update: Sun 15 Jun 2025 02:00:29 +0000
Manifest next update: Mon 16 Jun 2025 02:00:29 +0000
Files and hashes: 1: Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa (hash: N4jarbfAl3jZNu3gv2b+Z58QVCigDfUQbqsuaDI8gko=)
2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: dC2jE/rRVUYQmz4wMpaBSU1V9Mj55aoDFW8FAx3h96Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:1a:0c:8a:87:5b:2f:9b:e8:5d:18:af:cf:a0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Jun 15 02:00:29 2025 GMT
Not After : Jun 16 02:00:29 2025 GMT
Subject: CN=89051d7a57a9a8afd4e56bc5ce3fe4665480e627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:12:c2:7a:40:0c:b2:f4:c4:40:99:08:52:
46:52:2e:88:51:5e:82:cb:8c:ea:84:ce:ac:aa:79:
a4:73:43:af:21:97:37:5f:d5:cb:e1:f3:7f:5b:65:
e6:5c:53:c6:83:26:40:a0:32:51:b9:56:60:f1:dc:
a4:01:97:09:ba:ed:10:23:1d:d8:62:9a:14:9f:c5:
18:08:1e:53:24:5e:8a:b3:d8:c2:66:4d:76:f0:d8:
57:72:b2:b7:ad:6d:40:67:b5:98:82:c5:8c:a8:98:
e3:3d:c1:13:a4:c5:ba:0d:f0:65:cc:ab:22:1e:49:
e9:43:5b:75:6e:b0:37:0c:02:37:1e:1b:ae:c2:79:
ce:59:4b:26:c4:b0:9c:6e:f7:88:5b:d7:51:ee:39:
3d:c9:2e:ce:9d:ae:c5:67:1e:63:8a:e7:33:a7:74:
27:18:95:20:06:41:f8:08:58:41:9b:63:4d:1b:4a:
c7:0f:d1:17:84:d1:77:d2:95:0d:38:4a:5f:9f:0f:
77:1a:65:3a:7a:d2:b3:c0:12:e4:77:a4:7c:bd:34:
dc:e2:6c:28:fa:f8:d8:22:93:52:d5:27:7c:ff:f1:
ea:50:4b:f2:b7:2d:7d:b8:1a:5e:d2:ba:81:78:b8:
c7:a9:6e:a9:22:ef:78:46:09:1e:d9:f0:e9:0a:4d:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:1D:7A:57:A9:A8:AF:D4:E5:6B:C5:CE:3F:E4:66:54:80:E6:27
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:11:68:2b:77:70:56:ba:72:25:bc:7e:3b:84:20:87:ef:2c:
b5:79:81:af:ef:90:ba:b6:e8:8a:a6:c6:e1:0d:45:78:fe:e8:
bb:4c:d5:6c:3f:64:2c:90:41:09:9b:e8:20:52:c4:1b:84:e6:
6b:93:2a:d9:d2:51:2a:14:e0:2b:56:e8:40:cf:fe:59:73:48:
a6:8f:9c:6e:ed:98:19:3f:94:8a:79:2a:ab:eb:24:e9:c3:e3:
16:3b:be:27:fd:c8:68:fe:3e:e0:f0:d1:d3:09:82:fa:46:10:
ba:fa:47:a9:cf:08:f1:78:45:71:13:d8:c4:63:01:e3:f3:21:
a7:a3:67:50:98:bf:68:e9:f7:b3:78:06:dc:0b:19:fe:2c:e8:
0e:bb:be:8e:c8:f3:fc:55:f5:0f:2c:90:24:2f:93:31:5a:e7:
e0:af:03:2e:9e:de:be:dc:94:8d:8c:72:12:67:d2:2b:8d:8c:
11:cd:c4:67:7d:ec:74:7a:71:9d:e4:89:52:34:95:83:c1:c6:
f5:e6:dd:81:e1:34:0a:7a:4e:d0:65:35:51:5a:3b:f9:81:db:
1a:c6:92:d4:b5:60:88:6b:da:6b:7d:49:37:7a:71:d5:62:aa:
2e:f3:28:ca:6c:39:85:0e:07:d6:b7:3e:9e:4c:bf:16:56:c5:
2b:20:e0:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxURoMiodbL5voXRivz6CZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOGQ3ZWE0N2QxYjcwMGMzZDZiNzk5MzU4YWE3ZWE1ZWNh
OGIzZDIwHhcNMjUwNjE1MDIwMDI5WhcNMjUwNjE2MDIwMDI5WjAzMTEwLwYDVQQD
Eyg4OTA1MWQ3YTU3YTlhOGFmZDRlNTZiYzVjZTNmZTQ2NjU0ODBlNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSESwnpADLL0xECZCFJGUi6IUV6C
y4zqhM6sqnmkc0OvIZc3X9XL4fN/W2XmXFPGgyZAoDJRuVZg8dykAZcJuu0QIx3Y
YpoUn8UYCB5TJF6Ks9jCZk128NhXcrK3rW1AZ7WYgsWMqJjjPcETpMW6DfBlzKsi
HknpQ1t1brA3DAI3HhuuwnnOWUsmxLCcbveIW9dR7jk9yS7Ona7FZx5jiuczp3Qn
GJUgBkH4CFhBm2NNG0rHD9EXhNF30pUNOEpfnw93GmU6etKzwBLkd6R8vTTc4mwo
+vjYIpNS1Sd8//HqUEvyty19uBpe0rqBeLjHqW6pIu94Rgke2fDpCk2Q8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkFHXpXqaiv1OVrxc4/5GZUgOYnMB8GA1UdIwQY
MBaAFI+NfqR9G3AMPWt5k1iqfqXsqLPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEt
MjA1MjBlNmI2MTdhLzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEtMjA1MjBlNmI2MTdh
LzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtRFoK3dw
VrpyJbx+O4Qgh+8stXmBr++QurboiqbG4Q1FeP7ou0zVbD9kLJBBCZvoIFLEG4Tm
a5Mq2dJRKhTgK1boQM/+WXNIpo+cbu2YGT+Uinkqq+sk6cPjFju+J/3IaP4+4PDR
0wmC+kYQuvpHqc8I8XhFcRPYxGMB4/Mhp6NnUJi/aOn3s3gG3AsZ/izoDru+jsjz
/FX1DyyQJC+TMVrn4K8DLp7evtyUjYxyEmfSK42MEc3EZ33sdHpxneSJUjSVg8HG
9ebdgeE0CnpO0GU1UVo7+YHbGsaS1LVgiGvaa31JN3px1WKqLvMoymw5hQ4H1rc+
nky/FlbFKyDgTg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:26 2025 by rpki-client