Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
File: JKMLYNI9dOgia81eFdxb93CtMH4.mft (raw, json)
Hash identifier: L6JwAFX50G2Y+SLaLA+kukNzStrz6WS40WIS1oGN/vI=
Subject key identifier: 97:BE:23:F4:34:47:7E:A8:3B:A4:9D:9B:EE:D0:E5:59:BB:83:23:B8
Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
Certificate issuer: /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Certificate serial: 01967C0E098BC58AA1A016BAB9E94D641D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 11:00:16 +0000
Manifest this update: Mon 28 Apr 2025 11:00:16 +0000
Manifest next update: Tue 29 Apr 2025 11:00:16 +0000
Files and hashes: 1: Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa (hash: kLJ19pvLEfn+3aegz32dVtHoMMSBCouRhdwvdRrL0So=)
2: JKMLYNI9dOgia81eFdxb93CtMH4.crl (hash: 92yECqiDsg0b+LzFXK3j0p1krWFUlQKqXz++dDcr9Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:09:8b:c5:8a:a1:a0:16:ba:b9:e9:4d:64:1d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Validity
Not Before: Apr 28 11:00:16 2025 GMT
Not After : Apr 29 11:00:16 2025 GMT
Subject: CN=97be23f434477ea83ba49d9beed0e559bb8323b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:17:e3:0e:6b:88:05:ea:39:10:37:ed:8e:
c2:fc:3b:48:06:b8:81:73:7c:a5:0f:a0:50:19:56:
39:38:08:42:96:a8:b7:97:2c:c8:07:28:db:2f:3e:
1c:7f:16:c6:9d:93:99:c5:15:20:49:15:68:d0:7f:
f1:63:6c:89:a6:38:a5:e7:d9:ca:88:05:f9:77:62:
ec:1c:48:48:16:96:14:30:16:8c:64:3a:7f:56:68:
07:76:08:0a:23:9a:69:a2:b0:fe:05:ae:a4:6c:5d:
14:f5:ee:c9:93:ee:5c:45:db:1d:3f:e3:e0:b9:0b:
d3:24:55:f2:82:6a:15:f8:d5:57:49:98:4d:5d:9d:
ca:f2:ae:e6:e9:a5:eb:1a:c0:aa:47:4b:c6:72:e1:
13:e6:05:c9:a4:55:e7:79:8e:4d:55:87:ee:0a:ed:
8a:51:67:d8:9b:eb:9a:6c:23:45:97:e4:7f:88:cd:
ca:d7:d3:a8:d3:d2:ec:e2:46:8c:1f:b8:af:e9:c5:
91:c9:f2:13:c3:1c:4c:b6:1a:a1:61:3f:7b:c9:a5:
44:5b:a4:24:26:63:70:35:b7:7f:24:c7:5e:7b:7e:
92:bb:c0:0a:92:f7:f2:f9:9e:8a:2f:e9:30:76:d7:
57:d9:e7:60:e9:5f:3f:16:08:fb:46:01:4a:fe:70:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BE:23:F4:34:47:7E:A8:3B:A4:9D:9B:EE:D0:E5:59:BB:83:23:B8
X509v3 Authority Key Identifier:
keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:03:75:e0:e9:35:1f:ed:e0:ca:14:1d:5e:54:bd:ba:7b:80:
57:fd:b6:81:36:76:eb:9a:1d:54:c8:53:7b:c9:22:f8:13:e2:
cf:a9:4b:ad:17:22:b0:96:76:7d:a7:08:74:84:2c:a4:11:91:
9a:36:a5:4e:96:08:43:87:2e:d4:09:27:56:fe:79:ba:8a:6c:
46:d8:b0:26:51:9b:d6:49:8f:5d:bc:1c:fc:c5:2b:bf:27:af:
ef:de:25:a1:52:67:ed:70:58:34:d1:3a:c9:79:dc:73:7e:fa:
45:15:95:b4:18:f9:0d:b9:28:91:47:40:0b:44:f2:9c:66:9d:
99:26:94:ad:f6:04:96:fa:a1:46:0d:99:08:a1:a5:e8:61:2c:
99:3c:05:93:af:58:d4:80:dd:4a:0e:64:77:ed:63:c7:8b:7c:
66:fc:a9:e5:76:ee:b8:34:b1:d5:e8:35:6c:8e:a6:38:9e:a8:
92:c8:86:57:5f:e7:9c:fc:41:83:19:90:ba:6a:c4:65:44:43:
dd:ea:3d:7b:9c:87:5a:13:95:5d:13:f7:82:ff:fa:50:88:77:
46:85:bc:cd:5b:65:9e:2a:0b:09:4c:1c:72:1a:1d:d5:d8:86:
6a:df:69:fc:f1:40:45:83:6a:0c:1b:72:64:66:54:87:eb:02:
d4:8d:a9:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8DgmLxYqhoBa6uelNZB1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTMwYjYwZDIzZDc0ZTgyMjZiY2Q1ZTE1ZGM1YmY3NzBh
ZDMwN2UwHhcNMjUwNDI4MTEwMDE2WhcNMjUwNDI5MTEwMDE2WjAzMTEwLwYDVQQD
Eyg5N2JlMjNmNDM0NDc3ZWE4M2JhNDlkOWJlZWQwZTU1OWJiODMyM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGEX4w5riAXqORA37Y7C/DtIBriB
c3ylD6BQGVY5OAhClqi3lyzIByjbLz4cfxbGnZOZxRUgSRVo0H/xY2yJpjil59nK
iAX5d2LsHEhIFpYUMBaMZDp/VmgHdggKI5pporD+Ba6kbF0U9e7Jk+5cRdsdP+Pg
uQvTJFXygmoV+NVXSZhNXZ3K8q7m6aXrGsCqR0vGcuET5gXJpFXneY5NVYfuCu2K
UWfYm+uabCNFl+R/iM3K19Oo09Ls4kaMH7iv6cWRyfITwxxMthqhYT97yaVEW6Qk
JmNwNbd/JMdee36Su8AKkvfy+Z6KL+kwdtdX2edg6V8/Fgj7RgFK/nDk6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJe+I/Q0R36oO6Sdm+7Q5Vm7gyO4MB8GA1UdIwQY
MBaAFCSjC2DSPXToImvNXhXcW/dwrTB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82YTNkM2UtMjVmZC00MmZmLWE1ZmIt
OGIzYmY4YmY5OGViLzEvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82YTNkM2UtMjVmZC00MmZmLWE1ZmItOGIzYmY4YmY5OGVi
LzEvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQN14Ok1
H+3gyhQdXlS9unuAV/22gTZ265odVMhTe8ki+BPiz6lLrRcisJZ2facIdIQspBGR
mjalTpYIQ4cu1AknVv55uopsRtiwJlGb1kmPXbwc/MUrvyev794loVJn7XBYNNE6
yXncc376RRWVtBj5DbkokUdAC0TynGadmSaUrfYElvqhRg2ZCKGl6GEsmTwFk69Y
1IDdSg5kd+1jx4t8Zvyp5XbuuDSx1eg1bI6mOJ6oksiGV1/nnPxBgxmQumrEZURD
3eo9e5yHWhOVXRP3gv/6UIh3RoW8zVtlnioLCUwcchod1diGat9p/PFARYNqDBty
ZGZUh+sC1I2paA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:28:46 2025 by rpki-client