Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: WIIs0xaVCtwr80TtxXCn0WQxtJJg29rzow8S3vRzfR0=
Subject key identifier: 8C:54:BB:FE:59:0E:A4:57:A5:CD:DB:E8:A6:21:15:D3:D0:EB:FF:38
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 019683FEFCD3516266C0E7DE9E88D3FD54FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 02C7
Signing time: Wed 30 Apr 2025 00:00:48 +0000
Manifest this update: Wed 30 Apr 2025 00:00:48 +0000
Manifest next update: Thu 01 May 2025 00:00:48 +0000
Files and hashes: 1: TelciHh83ohMZLEiglr17mKx9tQ.roa (hash: WRRAn8x5n/KXtMausaPQfYREHYj3cbcPK0dMlkeLq38=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: S/Hvcx337Pw/CY83yV+24vb8jqiz7oOizW/2PQrv36M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:fe:fc:d3:51:62:66:c0:e7:de:9e:88:d3:fd:54:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Apr 30 00:00:48 2025 GMT
Not After : May 1 00:00:48 2025 GMT
Subject: CN=8c54bbfe590ea457a5cddbe8a62115d3d0ebff38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:e2:cd:27:56:e9:16:4d:a0:f0:e3:bf:3f:
fa:f2:e9:8c:20:2e:0a:70:fc:4c:39:fa:3d:e0:3b:
b7:56:e1:a9:5a:c8:b4:0f:3d:d6:42:42:69:b9:84:
f9:c1:85:29:a0:76:97:96:5a:50:bc:0c:50:72:7c:
6a:c8:5b:f7:d8:cf:bb:f7:8e:f6:b5:c2:1c:04:45:
6c:d8:bb:d8:2b:94:05:98:48:1e:71:01:01:ac:b2:
26:23:8f:3a:8d:42:b0:62:72:73:14:e9:85:6a:8e:
03:d4:08:b4:2d:5f:78:0e:9f:7d:39:d4:cd:9e:85:
4f:4d:a6:d0:65:0f:84:61:3e:cd:04:9d:75:a3:80:
25:12:20:31:83:38:31:fb:e2:eb:c4:3e:0a:7c:5e:
d7:98:54:9e:c4:ac:01:82:dd:bf:67:e5:5d:b9:21:
4f:a1:c5:11:c7:1f:4d:3b:cc:50:8d:2b:3a:b1:a3:
df:59:81:08:fd:fc:f0:ad:28:f7:b7:4e:cc:4d:c3:
6c:f4:58:a1:f6:5f:9b:fc:bf:81:28:92:56:86:e5:
8c:cb:2f:f2:7a:cf:6b:d8:0b:a1:87:51:06:57:c4:
61:87:e9:0f:c5:cf:3b:88:84:58:7c:f9:95:75:23:
b8:de:1c:10:06:13:6a:80:2c:1c:cd:45:77:a4:78:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:54:BB:FE:59:0E:A4:57:A5:CD:DB:E8:A6:21:15:D3:D0:EB:FF:38
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:10:f4:fa:95:f4:a2:d3:a5:70:bf:21:0e:7d:69:e6:cd:4f:
26:c0:fb:ad:07:0c:33:e9:b4:91:6c:98:2d:c5:2d:46:d0:22:
5a:50:55:4d:c2:72:63:15:fe:0e:4f:5e:04:49:fb:91:d2:54:
92:2d:9d:b6:9a:e1:c9:a9:fd:36:e9:76:69:37:91:b0:d6:ac:
d3:08:ce:d6:18:89:f5:29:d6:ce:82:1e:0f:b0:ec:a6:1e:5f:
cb:4a:a6:b9:4e:b4:b0:a9:e2:2b:fa:f3:08:1a:e0:68:07:20:
f2:74:6a:be:36:9f:0d:cd:f1:eb:53:58:92:1b:45:a3:6e:6a:
e8:a3:65:dd:64:2d:01:c3:03:27:32:e4:ae:51:74:f7:c3:ee:
f3:13:69:4d:0c:71:55:4b:cb:25:27:93:4b:46:67:56:70:e4:
4b:f7:b9:f3:05:c2:f7:14:1e:9d:26:aa:f6:d4:8c:f5:bb:87:
fa:53:15:7b:af:32:75:88:e4:7e:9e:e2:ed:65:46:e0:e7:92:
bc:86:a6:2c:ad:33:65:1d:46:fd:a6:74:8f:e9:b0:1b:ca:00:
02:4e:17:83:36:27:b4:40:82:6a:4d:28:85:9e:eb:f1:50:30:
b9:59:69:bd:1c:29:53:52:27:d3:fd:92:d6:24:68:04:bc:78:
93:f9:b2:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaD/vzTUWJmwOfenojT/VT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDU2ZmIxZDY3OTQ3M2IxYWUxYzU3YjBmYzJhMzIzY2Fm
MTcwOWEwHhcNMjUwNDMwMDAwMDQ4WhcNMjUwNTAxMDAwMDQ4WjAzMTEwLwYDVQQD
Eyg4YzU0YmJmZTU5MGVhNDU3YTVjZGRiZThhNjIxMTVkM2QwZWJmZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznbizSdW6RZNoPDjvz/68umMIC4K
cPxMOfo94Du3VuGpWsi0Dz3WQkJpuYT5wYUpoHaXllpQvAxQcnxqyFv32M+79472
tcIcBEVs2LvYK5QFmEgecQEBrLImI486jUKwYnJzFOmFao4D1Ai0LV94Dp99OdTN
noVPTabQZQ+EYT7NBJ11o4AlEiAxgzgx++LrxD4KfF7XmFSexKwBgt2/Z+VduSFP
ocURxx9NO8xQjSs6saPfWYEI/fzwrSj3t07MTcNs9Fih9l+b/L+BKJJWhuWMyy/y
es9r2Auhh1EGV8Rhh+kPxc87iIRYfPmVdSO43hwQBhNqgCwczUV3pHiixQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxUu/5ZDqRXpc3b6KYhFdPQ6/84MB8GA1UdIwQY
MBaAFIzVb7HWeUc7GuHFew/CoyPK8XCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTct
YTc5MmE4OGJhZjEwLzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTctYTc5MmE4OGJhZjEw
LzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxD0+pX0
otOlcL8hDn1p5s1PJsD7rQcMM+m0kWyYLcUtRtAiWlBVTcJyYxX+Dk9eBEn7kdJU
ki2dtprhyan9Nul2aTeRsNas0wjO1hiJ9SnWzoIeD7Dsph5fy0qmuU60sKniK/rz
CBrgaAcg8nRqvjafDc3x61NYkhtFo25q6KNl3WQtAcMDJzLkrlF098Pu8xNpTQxx
VUvLJSeTS0ZnVnDkS/e58wXC9xQenSaq9tSM9buH+lMVe68ydYjkfp7i7WVG4OeS
vIamLK0zZR1G/aZ0j+mwG8oAAk4XgzYntECCak0ohZ7r8VAwuVlpvRwpU1In0/2S
1iRoBLx4k/myDg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 07:10:15 2025 by rpki-client