Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: 4urhM7Eqv+loVKZMCys7woBW9YVdetLEDc5htpetckQ=
Subject key identifier: 4F:81:43:AE:FD:B7:91:4D:F1:A1:51:BC:96:19:3E:47:CB:B7:6B:C1
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 01967B32AF47B80803E272B876863636B15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 0D3F
Signing time: Mon 28 Apr 2025 07:00:41 +0000
Manifest this update: Mon 28 Apr 2025 07:00:41 +0000
Manifest next update: Tue 29 Apr 2025 07:00:41 +0000
Files and hashes: 1: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: fa7uU9IGjHp9L3gyJPJqvZCYJH8+CdfA9UgLfx/wXbw=)
2: U98Pywp0SW8RSqZF3Ge6Si9krK0.roa (hash: O0xR8BO72Q1293Dodh+ahx0zgwd8SQ9b7GDuhK6uN4w=)
3: fonqMENkUurdTSsmls1gVlg_WJ4.roa (hash: BkPWWaoPqGMFHcArMOr28SMuQJKUdO9RrrY9l2uEtM4=)
4: hRMqKbI5ZBKlaiDQw_wO9nw88a0.roa (hash: tQTOlSI2XH6rsXW1nhJPPPkXPxhSWEfkvDRnTJEB2Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:af:47:b8:08:03:e2:72:b8:76:86:36:36:b1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Apr 28 07:00:41 2025 GMT
Not After : Apr 29 07:00:41 2025 GMT
Subject: CN=4f8143aefdb7914df1a151bc96193e47cbb76bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:92:d5:64:db:fc:7b:b0:7e:c2:2c:89:0e:
07:15:67:c2:e7:95:7b:71:f3:22:3f:d3:89:51:bd:
e5:8a:a3:65:01:8e:7c:7f:92:79:c9:0b:20:a4:e6:
5b:f8:3a:bf:28:84:15:23:6d:be:5a:f7:48:be:65:
e7:56:2e:56:df:59:f2:be:1c:4e:1a:63:1b:1b:ea:
d3:6f:30:01:3a:2f:31:3e:c8:88:db:c3:6e:3f:6e:
c1:7f:e5:79:d0:33:fa:ed:02:17:2f:0d:9a:80:bb:
b8:c2:31:24:33:f7:22:d5:34:7e:32:9b:c8:44:64:
38:f8:1e:21:c2:06:57:e0:a9:d8:f7:bc:d1:0c:25:
09:64:3e:24:1c:92:15:e1:4b:75:d3:2d:a7:ae:03:
7b:ff:30:07:aa:be:b9:80:3b:63:19:85:62:8f:ea:
e4:c4:b7:bb:fc:42:df:91:09:ce:36:2a:e5:0e:42:
1c:03:96:cf:7c:6f:ee:34:de:9f:09:65:93:be:27:
e0:77:55:51:5c:30:6b:6e:ec:b1:59:e8:ed:d3:17:
3e:02:6f:49:cb:cc:e2:54:ce:41:ef:b8:cc:ad:b0:
01:32:70:ab:21:bf:35:d4:e9:b8:26:44:da:ac:e7:
84:98:55:44:75:ae:64:e5:62:ef:89:e4:6d:73:93:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:81:43:AE:FD:B7:91:4D:F1:A1:51:BC:96:19:3E:47:CB:B7:6B:C1
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:05:7c:6b:be:92:11:ee:6a:d2:9e:78:46:20:34:46:08:7a:
1f:15:d7:3f:57:07:9a:33:f9:21:81:e1:69:df:d2:e6:d5:f9:
bb:9c:62:4c:6b:3f:67:28:16:90:b1:04:f7:84:5e:73:2c:ae:
a9:dd:da:55:1a:fb:41:ce:cf:a8:c3:df:ea:72:58:de:f8:43:
94:9e:3c:c9:81:37:b4:6d:a5:d4:ad:f4:38:e6:5e:f0:33:7b:
c2:b5:f3:97:f7:ff:76:70:e1:de:fb:6a:04:73:c5:47:ef:50:
27:d8:41:67:ef:e7:b0:a6:f2:25:d4:91:00:4f:01:9e:97:03:
df:16:13:a3:94:e3:59:2d:4b:2b:c9:cd:9e:66:6d:18:46:d1:
0f:e2:52:fe:29:c7:90:d0:16:ea:6f:e5:8b:f9:b1:e6:10:bb:
1c:a0:9d:7c:36:c9:32:60:40:09:e9:b8:14:3a:99:e8:b6:b1:
29:31:96:25:cc:43:a6:99:ba:84:27:87:5f:82:32:4d:40:d0:
93:55:75:d1:47:46:b1:55:24:83:3b:f5:b6:f2:87:1b:13:39:
c1:23:66:e1:49:4b:ee:94:f8:ee:ba:a6:8c:71:91:db:52:92:
1e:03:58:f5:ea:f4:d8:e1:7f:2e:62:54:6a:82:4e:5a:d5:69:
55:03:59:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7Mq9HuAgD4nK4doY2NrFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3Zjk1OGMzYjc1OWIyYzc4OTZmNWVkNjYzZTgwNzc4MWYz
ZmY1YTIwHhcNMjUwNDI4MDcwMDQxWhcNMjUwNDI5MDcwMDQxWjAzMTEwLwYDVQQD
Eyg0ZjgxNDNhZWZkYjc5MTRkZjFhMTUxYmM5NjE5M2U0N2NiYjc2YmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9iS1WTb/HuwfsIsiQ4HFWfC55V7
cfMiP9OJUb3liqNlAY58f5J5yQsgpOZb+Dq/KIQVI22+WvdIvmXnVi5W31nyvhxO
GmMbG+rTbzABOi8xPsiI28NuP27Bf+V50DP67QIXLw2agLu4wjEkM/ci1TR+MpvI
RGQ4+B4hwgZX4KnY97zRDCUJZD4kHJIV4Ut10y2nrgN7/zAHqr65gDtjGYVij+rk
xLe7/ELfkQnONirlDkIcA5bPfG/uNN6fCWWTvifgd1VRXDBrbuyxWejt0xc+Am9J
y8ziVM5B77jMrbABMnCrIb811Om4JkTarOeEmFVEda5k5WLvieRtc5PohQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+BQ679t5FN8aFRvJYZPkfLt2vBMB8GA1UdIwQY
MBaAFCf5WMO3WbLHiW9e1mPoB3gfP/WiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYt
YjI5MTA3Yjk4YWNjLzEvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYtYjI5MTA3Yjk4YWNj
LzEvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwV8a76S
Ee5q0p54RiA0Rgh6HxXXP1cHmjP5IYHhad/S5tX5u5xiTGs/ZygWkLEE94Recyyu
qd3aVRr7Qc7PqMPf6nJY3vhDlJ48yYE3tG2l1K30OOZe8DN7wrXzl/f/dnDh3vtq
BHPFR+9QJ9hBZ+/nsKbyJdSRAE8BnpcD3xYTo5TjWS1LK8nNnmZtGEbRD+JS/inH
kNAW6m/li/mx5hC7HKCdfDbJMmBACem4FDqZ6LaxKTGWJcxDppm6hCeHX4IyTUDQ
k1V10UdGsVUkgzv1tvKHGxM5wSNm4UlL7pT47rqmjHGR21KSHgNY9er02OF/LmJU
aoJOWtVpVQNZpg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:55:44 2025 by rpki-client