Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: pBtfZJXpZW9UUca6FTsMvuNS7YXhzunC8JtqbMh7uqs=
Subject key identifier: 7D:3D:CC:9B:02:6B:38:FD:40:90:F6:B3:65:FC:26:97:52:50:ED:C8
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 019683FF85F346A7D9BB6C5B36C95A343E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 0101
Signing time: Wed 30 Apr 2025 00:01:23 +0000
Manifest this update: Wed 30 Apr 2025 00:01:23 +0000
Manifest next update: Thu 01 May 2025 00:01:23 +0000
Files and hashes: 1: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: IXxqd9Dq+LhdYUzjOHs3/t9a0OKP9ijsTthdnuJRFnE=)
2: rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa (hash: uIRWM7da9ucOHpupG9xSr3AJa0DcVZ8DVpjTgYL4B3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:85:f3:46:a7:d9:bb:6c:5b:36:c9:5a:34:3e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Apr 30 00:01:23 2025 GMT
Not After : May 1 00:01:23 2025 GMT
Subject: CN=7d3dcc9b026b38fd4090f6b365fc26975250edc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:a4:e3:8e:ef:a1:b5:62:b5:f7:ac:20:5b:
24:17:83:89:2f:9f:c0:2c:47:11:50:85:43:6d:5b:
a9:68:af:f0:e9:c2:19:c4:80:a8:bd:ba:bc:d4:f9:
b3:1e:18:3d:3e:c2:3a:8b:aa:ce:61:04:61:48:7b:
2b:45:e0:18:02:7c:13:88:d1:0d:1f:32:e9:73:1e:
e5:20:56:58:d7:22:a8:fc:22:18:c3:c2:d9:4f:9a:
83:b8:bd:d1:e7:7b:3e:16:45:39:dd:03:2f:39:12:
51:d8:d5:e4:83:92:fd:44:83:f0:c6:2f:66:47:e7:
18:c1:d2:2a:df:42:5c:e1:0e:4b:bd:60:f0:95:4c:
b3:6f:c8:19:92:72:aa:75:2b:02:4b:3d:da:ad:44:
e8:b7:b8:6b:9e:42:a7:d6:7e:31:15:85:76:af:b3:
4d:b9:1c:a5:4a:56:71:d6:00:84:20:44:04:c9:82:
63:75:29:ea:c5:a8:79:9c:f7:8c:e3:f6:61:95:4a:
09:7b:38:11:c3:4b:01:f3:e5:f6:76:b8:fe:12:c9:
0e:05:4b:1a:be:bd:d1:5b:8e:c0:2d:f6:e0:b1:38:
f8:2e:09:ed:dc:4d:1a:4b:cc:47:f0:17:f2:3b:7f:
d4:86:68:66:98:36:36:3d:d9:b8:14:35:62:b6:02:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3D:CC:9B:02:6B:38:FD:40:90:F6:B3:65:FC:26:97:52:50:ED:C8
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f8:5e:97:10:10:83:0b:e1:e5:6b:12:fa:aa:b2:2d:b1:03:
8f:eb:ac:3f:aa:3b:50:39:80:02:3b:19:14:87:de:7a:c3:92:
cb:4d:ff:0a:6f:31:f8:c7:f3:00:03:f6:5e:96:be:fc:65:db:
46:ae:3d:6c:a7:07:05:7a:63:79:b6:3e:29:1d:98:42:3c:3a:
07:c4:18:91:57:fc:5a:a0:e9:9e:8e:d4:63:73:10:3d:29:b7:
05:3c:8a:80:be:e9:24:6f:10:3e:93:1f:5f:c8:fd:39:5a:9b:
94:c8:d9:0e:92:b2:16:cb:0e:53:8f:72:3b:60:be:94:cf:e4:
95:d6:a4:67:cf:af:3a:3d:43:f0:f4:e8:5f:ef:bf:b7:cb:1c:
0f:06:2d:1d:28:1a:6a:31:c2:ad:80:8a:47:3c:8e:be:20:61:
f0:b8:d8:fd:86:fe:01:3d:08:aa:aa:d3:f5:7a:72:df:c9:1c:
c5:a3:87:9f:11:67:3f:15:bf:d0:b3:b2:25:de:9e:a4:08:a7:
16:7c:ee:38:94:03:92:7e:2e:15:e4:d0:68:54:a3:ae:cc:88:
cd:aa:6a:7f:74:3e:92:fc:fa:8b:03:35:a9:8a:f1:50:57:e4:
8c:8b:cb:ac:18:26:ed:9d:a8:83:0f:f5:4a:e6:5a:f9:14:f9:
90:c7:60:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaD/4XzRqfZu2xbNslaND4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYTE3NTg2MWNlZDBjZjcwZDUxNjQ3OWIzZmE4ODA3NjI2
YWMzMWYwHhcNMjUwNDMwMDAwMTIzWhcNMjUwNTAxMDAwMTIzWjAzMTEwLwYDVQQD
Eyg3ZDNkY2M5YjAyNmIzOGZkNDA5MGY2YjM2NWZjMjY5NzUyNTBlZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojWk447vobVitfesIFskF4OJL5/A
LEcRUIVDbVupaK/w6cIZxICovbq81PmzHhg9PsI6i6rOYQRhSHsrReAYAnwTiNEN
HzLpcx7lIFZY1yKo/CIYw8LZT5qDuL3R53s+FkU53QMvORJR2NXkg5L9RIPwxi9m
R+cYwdIq30Jc4Q5LvWDwlUyzb8gZknKqdSsCSz3arUTot7hrnkKn1n4xFYV2r7NN
uRylSlZx1gCEIEQEyYJjdSnqxah5nPeM4/ZhlUoJezgRw0sB8+X2drj+EskOBUsa
vr3RW47ALfbgsTj4Lgnt3E0aS8xH8BfyO3/UhmhmmDY2Pdm4FDVitgKvOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH09zJsCazj9QJD2s2X8JpdSUO3IMB8GA1UdIwQY
MBaAFI6hdYYc7Qz3DVFkebP6iAdiasMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lYmZhYzgtNTdiNS00OGE0LWE2OTAt
ZGFlZDhmMWU3NDhiLzEvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lYmZhYzgtNTdiNS00OGE0LWE2OTAtZGFlZDhmMWU3NDhi
LzEvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/helxAQ
gwvh5WsS+qqyLbEDj+usP6o7UDmAAjsZFIfeesOSy03/Cm8x+MfzAAP2Xpa+/GXb
Rq49bKcHBXpjebY+KR2YQjw6B8QYkVf8WqDpno7UY3MQPSm3BTyKgL7pJG8QPpMf
X8j9OVqblMjZDpKyFssOU49yO2C+lM/kldakZ8+vOj1D8PToX++/t8scDwYtHSga
ajHCrYCKRzyOviBh8LjY/Yb+AT0IqqrT9Xpy38kcxaOHnxFnPxW/0LOyJd6epAin
FnzuOJQDkn4uFeTQaFSjrsyIzapqf3Q+kvz6iwM1qYrxUFfkjIvLrBgm7Z2ogw/1
SuZa+RT5kMdgfA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:43:54 2025 by rpki-client