Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: 2UJE6bKy0ZUlKG+EwJX4UuE9ixqPPHcWmYdWA4+kcDU=
Subject key identifier: 37:93:BF:2C:19:18:78:C2:F7:B3:40:C2:D0:6F:87:88:DA:59:AF:88
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 01968F28177410F4AD300FA97097B1DFE341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 137C
Signing time: Fri 02 May 2025 04:01:31 +0000
Manifest this update: Fri 02 May 2025 04:01:31 +0000
Manifest next update: Sat 03 May 2025 04:01:31 +0000
Files and hashes: 1: 3WjmScxyPShGMsEmfTcZS4RZUd0.roa (hash: 5cWtsZDvpUp+XvqnrWOkzcAs96EsLhbvVP+8UGNRG5Q=)
2: Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa (hash: DTiudzjdSu7JP8slciOiBe/Ykx5OQa6RusVSJBvKWj0=)
3: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: dfrp5Qj5AqSjmUbZKkhvGuIc7ATT4RPar7qJ7UZ+7cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:28:17:74:10:f4:ad:30:0f:a9:70:97:b1:df:e3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: May 2 04:01:31 2025 GMT
Not After : May 3 04:01:31 2025 GMT
Subject: CN=3793bf2c191878c2f7b340c2d06f8788da59af88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:76:97:2d:a3:6e:d2:50:08:79:0e:44:84:
56:04:c9:08:e2:cd:04:63:88:e1:8f:5b:c0:6c:a8:
3e:c9:0a:03:91:b9:da:b1:9b:b8:58:b3:7e:ae:e5:
17:0e:d1:97:85:ce:c1:af:9f:f8:1d:70:f2:e1:17:
f0:bd:04:a8:2f:ad:91:c8:8b:de:0c:2b:a1:98:4f:
49:a2:1a:ed:bf:f0:12:ab:ad:3d:e5:1d:d7:c0:1a:
4c:b3:d0:ae:c4:d0:f8:be:12:1d:1b:2f:1c:cf:b5:
af:8b:7a:e1:9d:32:aa:81:9c:c8:c0:26:91:9f:94:
ae:0c:15:36:90:62:58:1e:53:79:0e:23:d2:f3:01:
5d:05:df:36:56:a4:9b:ec:79:3b:c0:6c:38:fb:b0:
20:8d:cb:e8:c5:cf:a1:21:97:f3:a3:39:6c:12:3b:
d6:01:68:7b:45:7f:a3:86:a1:50:7f:99:7f:ec:97:
a8:70:69:d1:4d:33:8f:78:d3:f0:d1:a8:ce:61:15:
99:52:83:62:8b:0d:82:9c:6a:5e:07:bb:c2:33:57:
4e:f4:81:62:21:6e:80:49:f4:1b:58:b0:08:18:fe:
a7:22:fc:75:c7:86:2c:55:b1:35:13:04:9f:01:55:
b2:02:ad:b2:2a:0d:a2:45:41:7c:97:d5:ff:26:e7:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:93:BF:2C:19:18:78:C2:F7:B3:40:C2:D0:6F:87:88:DA:59:AF:88
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cb:31:aa:8d:05:a8:bc:7e:91:f8:3d:ca:b8:89:37:04:f5:
b5:b8:e4:35:91:d9:9a:89:a2:08:96:a8:13:e4:ab:9d:3d:e0:
b4:b7:9d:c2:de:e9:ac:51:e3:28:57:e6:b1:2b:ec:e7:56:05:
b9:6f:3f:df:ef:df:d7:5a:c2:b2:0c:5f:f3:38:74:70:97:f2:
b1:1e:02:b9:eb:16:6b:59:03:86:a7:b3:34:a9:95:0f:0b:b7:
26:06:70:00:f9:c6:d9:34:c3:0c:26:90:92:08:df:74:57:57:
0b:f7:56:b3:d6:c6:7f:3f:dc:01:6e:e6:04:f3:25:69:f0:26:
f5:48:aa:a0:36:94:e0:ee:f8:7d:24:d2:36:af:cb:88:33:47:
e2:86:a8:81:47:81:8e:e4:a1:b8:fb:f5:90:68:d4:16:cc:fb:
aa:83:b5:d9:a4:24:a5:6e:f8:d3:6f:78:c9:c3:03:03:8d:7d:
b6:3a:31:2a:96:8f:34:d7:da:f2:ec:89:e3:04:3e:fb:df:38:
4f:d2:23:20:2f:4b:8f:c2:47:f3:26:d1:51:25:f0:cf:26:fb:
3a:50:0b:d9:49:69:37:9e:09:e3:43:42:e2:50:f5:c8:dc:53:
d5:a0:ba:a9:52:56:14:da:88:07:2a:d6:26:01:9d:5d:99:33:
31:49:fc:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPKBd0EPStMA+pcJex3+NBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NGQ5MWNmYTBhNmRiOWJmZDkxNTRhNDQxODU4ZTAwZTM4
YmRiZDYwHhcNMjUwNTAyMDQwMTMxWhcNMjUwNTAzMDQwMTMxWjAzMTEwLwYDVQQD
EygzNzkzYmYyYzE5MTg3OGMyZjdiMzQwYzJkMDZmODc4OGRhNTlhZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAd2ly2jbtJQCHkORIRWBMkI4s0E
Y4jhj1vAbKg+yQoDkbnasZu4WLN+ruUXDtGXhc7Br5/4HXDy4RfwvQSoL62RyIve
DCuhmE9Johrtv/ASq6095R3XwBpMs9CuxND4vhIdGy8cz7Wvi3rhnTKqgZzIwCaR
n5SuDBU2kGJYHlN5DiPS8wFdBd82VqSb7Hk7wGw4+7Agjcvoxc+hIZfzozlsEjvW
AWh7RX+jhqFQf5l/7JeocGnRTTOPeNPw0ajOYRWZUoNiiw2CnGpeB7vCM1dO9IFi
IW6ASfQbWLAIGP6nIvx1x4YsVbE1EwSfAVWyAq2yKg2iRUF8l9X/JufIAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeTvywZGHjC97NAwtBvh4jaWa+IMB8GA1UdIwQY
MBaAFCdNkc+gptub/ZFUpEGFjgDji9vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYt
OTc4MjM0YzNiYjcwLzEvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYtOTc4MjM0YzNiYjcw
LzEvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMsxqo0F
qLx+kfg9yriJNwT1tbjkNZHZmomiCJaoE+SrnT3gtLedwt7prFHjKFfmsSvs51YF
uW8/3+/f11rCsgxf8zh0cJfysR4CuesWa1kDhqezNKmVDwu3JgZwAPnG2TTDDCaQ
kgjfdFdXC/dWs9bGfz/cAW7mBPMlafAm9UiqoDaU4O74fSTSNq/LiDNH4oaogUeB
juShuPv1kGjUFsz7qoO12aQkpW740294ycMDA419tjoxKpaPNNfa8uyJ4wQ++984
T9IjIC9Lj8JH8ybRUSXwzyb7OlAL2UlpN54J40NC4lD1yNxT1aC6qVJWFNqIByrW
JgGdXZkzMUn8Yg==
-----END CERTIFICATE-----
Generated at Fri May 2 13:36:52 2025 by rpki-client