Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: ETzDo8hWbXB/CrE8qMHl5avFJAK6qGulDTcHxMQ8Qso=
Subject key identifier: 74:9B:4F:11:AF:C2:F3:C4:11:89:C9:B5:2D:D1:5D:91:07:DF:09:EA
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 0196741EC8BBCCAB1A062C8AED9E7DF622C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 0E3A
Signing time: Sat 26 Apr 2025 22:01:36 +0000
Manifest this update: Sat 26 Apr 2025 22:01:36 +0000
Manifest next update: Sun 27 Apr 2025 22:01:36 +0000
Files and hashes: 1: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (hash: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: /yei9dwD+WzS3aCUJe0Oc7Tv6ndBCYt4bL9yAjvZ7FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:c8:bb:cc:ab:1a:06:2c:8a:ed:9e:7d:f6:22:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Apr 26 22:01:36 2025 GMT
Not After : Apr 27 22:01:36 2025 GMT
Subject: CN=749b4f11afc2f3c41189c9b52dd15d9107df09ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:8d:d0:50:3b:d6:fd:c4:fb:40:f7:41:6c:
60:91:9e:bd:52:47:04:6d:df:b7:e8:1c:2e:3d:d3:
76:20:73:28:fc:0b:b5:db:e0:1b:4f:53:38:c8:89:
db:7e:2f:f8:fa:7d:9c:ed:b9:d4:1e:3e:c5:9d:93:
5f:61:3a:61:90:78:1c:24:b4:3a:10:b7:ac:90:f9:
5c:cb:91:6d:73:a1:10:ee:1a:f2:a2:92:f6:ec:e6:
5d:26:6c:f5:d4:86:85:b9:60:b1:50:9d:1f:21:4e:
8d:20:f8:58:a3:63:e3:88:17:21:a3:c0:cd:74:64:
29:e5:ee:a5:50:5a:37:1f:54:ea:8d:12:c8:3f:fa:
ff:1e:25:b5:03:55:c9:83:9f:af:fd:fb:9f:05:71:
3e:75:cf:ee:f4:e9:ca:be:88:1b:2a:27:9b:72:95:
1d:c4:cf:14:49:3b:c4:e3:6a:b3:d4:72:a9:4f:5c:
58:43:74:f1:05:76:82:d7:ec:c2:21:d7:3d:58:8c:
79:20:68:6d:3d:9c:c4:9c:0c:1a:c2:30:f9:b8:a8:
7e:ec:aa:44:81:5d:82:54:13:28:77:c9:7e:f6:b8:
d1:c4:4d:f9:5b:97:4d:30:53:6c:0f:2b:bf:5b:77:
60:a5:db:2f:57:05:1f:66:e6:48:f2:8a:13:83:ee:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9B:4F:11:AF:C2:F3:C4:11:89:C9:B5:2D:D1:5D:91:07:DF:09:EA
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4e:e5:52:85:97:d6:34:0d:1b:39:5b:c9:3f:75:13:68:43:
59:c8:ff:59:db:ad:a8:d2:09:3b:99:df:58:66:c2:90:c8:3f:
fb:bd:d0:75:f6:59:e4:23:8a:5d:db:69:13:84:83:b8:2e:3d:
a3:01:91:59:96:36:23:b0:55:b8:af:02:ff:04:d6:60:6e:f4:
fa:0b:d5:ff:c0:18:60:2d:24:c2:11:0f:7d:ed:53:94:ed:df:
fc:b6:cf:cc:65:af:2e:53:d3:e5:ac:13:ca:cc:ae:33:48:fe:
b6:2c:0f:06:0d:99:73:24:83:0e:66:f7:64:98:50:76:4c:09:
6c:68:73:15:bd:84:30:d3:dc:6e:2d:e8:2c:db:b0:eb:fe:d0:
52:64:45:d9:84:9f:91:58:a1:db:ea:25:39:06:d8:c3:16:de:
af:8f:76:6f:81:22:a7:55:22:fb:c9:82:8a:04:70:6a:9c:24:
5a:8c:ad:26:ea:41:ec:b6:dc:a2:92:a6:7f:75:6f:80:62:d2:
19:92:9a:30:87:c2:59:b3:8d:5b:9d:a6:49:c4:a7:92:d0:77:
69:0e:76:53:68:d8:3d:a5:24:4f:77:de:ce:cc:08:75:45:84:
c5:cf:f9:eb:4a:bc:8a:33:fe:c2:b9:45:fa:15:e2:4a:70:79:
09:6c:ad:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0Hsi7zKsaBiyK7Z599iLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzAyYTYxNmMwNDk0MWUyYzlmMDcxNjUxZTQ5YzVkZjNh
ZWQwYjEwHhcNMjUwNDI2MjIwMTM2WhcNMjUwNDI3MjIwMTM2WjAzMTEwLwYDVQQD
Eyg3NDliNGYxMWFmYzJmM2M0MTE4OWM5YjUyZGQxNWQ5MTA3ZGYwOWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxSN0FA71v3E+0D3QWxgkZ69UkcE
bd+36BwuPdN2IHMo/Au12+AbT1M4yInbfi/4+n2c7bnUHj7FnZNfYTphkHgcJLQ6
ELeskPlcy5Ftc6EQ7hryopL27OZdJmz11IaFuWCxUJ0fIU6NIPhYo2PjiBcho8DN
dGQp5e6lUFo3H1TqjRLIP/r/HiW1A1XJg5+v/fufBXE+dc/u9OnKvogbKiebcpUd
xM8USTvE42qz1HKpT1xYQ3TxBXaC1+zCIdc9WIx5IGhtPZzEnAwawjD5uKh+7KpE
gV2CVBMod8l+9rjRxE35W5dNMFNsDyu/W3dgpdsvVwUfZuZI8ooTg+5MHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSbTxGvwvPEEYnJtS3RXZEH3wnqMB8GA1UdIwQY
MBaAFI5wKmFsBJQeLJ8HFlHknF3zrtCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMt
Y2Q2MGM4OTEwMDFiLzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMtY2Q2MGM4OTEwMDFi
LzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXE7lUoWX
1jQNGzlbyT91E2hDWcj/WdutqNIJO5nfWGbCkMg/+73QdfZZ5COKXdtpE4SDuC49
owGRWZY2I7BVuK8C/wTWYG70+gvV/8AYYC0kwhEPfe1TlO3f/LbPzGWvLlPT5awT
ysyuM0j+tiwPBg2ZcySDDmb3ZJhQdkwJbGhzFb2EMNPcbi3oLNuw6/7QUmRF2YSf
kVih2+olOQbYwxber492b4Eip1Ui+8mCigRwapwkWoytJupB7LbcopKmf3VvgGLS
GZKaMIfCWbONW52mScSnktB3aQ52U2jYPaUkT3fezswIdUWExc/560q8ijP+wrlF
+hXiSnB5CWytxA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:38:24 2025 by rpki-client