Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: SMNTKbSt2uvkzEFYW2amV6kVIm5YYbZPjjpRvnwhyqA=
Subject key identifier: 39:0C:4F:BD:F7:12:2F:5D:C7:A3:A4:38:54:04:EA:2C:C5:63:D3:EF
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019675D50F4057DEE4B0A426174650342BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 080A
Signing time: Sun 27 Apr 2025 06:00:19 +0000
Manifest this update: Sun 27 Apr 2025 06:00:19 +0000
Manifest next update: Mon 28 Apr 2025 06:00:19 +0000
Files and hashes: 1: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: xE07KbsFdurDJNiKTDbwUYA71Z5ABTx3gepeZiNEIYo=)
2: nJjrSgE7Va7EKxllkFfukC6fvJY.roa (hash: V3JIEPfJn7JzMttrERHm2nxfQ8d/LYnbQ0isiQmawx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:0f:40:57:de:e4:b0:a4:26:17:46:50:34:2b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Apr 27 06:00:19 2025 GMT
Not After : Apr 28 06:00:19 2025 GMT
Subject: CN=390c4fbdf7122f5dc7a3a4385404ea2cc563d3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:36:13:bc:92:86:9a:d8:aa:b5:7e:f8:a9:
08:96:ae:f9:41:62:d2:59:3a:33:b7:63:45:8e:fd:
1c:de:bf:d4:99:61:89:ad:13:7a:ae:be:8b:66:d0:
3e:09:49:68:77:03:9c:0d:78:f1:a9:76:8f:d7:12:
56:a2:61:8a:fc:ce:5d:99:2a:b5:06:25:2e:d9:80:
d4:53:12:33:b0:14:25:2b:4d:7c:b6:64:50:90:f2:
94:f2:f4:47:9c:bc:9f:26:bf:94:93:2f:9f:a4:d5:
cc:b5:53:02:72:91:a3:8f:c0:9e:05:13:af:f9:78:
03:2e:6a:91:62:b8:f7:9e:f7:80:97:8a:e1:08:89:
ac:0a:5b:12:43:07:7c:eb:07:9f:92:5a:1d:33:e8:
fc:17:62:4d:46:16:a3:89:cc:35:6a:f3:a4:da:6c:
bc:16:e6:07:c1:12:e7:19:ba:44:56:b4:8b:6e:cc:
dd:99:3d:8e:4a:f0:62:50:7f:ba:09:2a:6c:ba:f1:
1d:d2:2e:e5:4b:a1:dc:7f:08:47:11:bf:5c:7b:8c:
98:39:b8:c2:61:bd:b5:20:61:1d:e2:5a:de:43:46:
04:63:db:86:72:40:91:33:d6:79:39:e4:2c:7f:75:
a3:42:8b:7e:42:bc:dc:49:39:51:70:cb:f5:cb:76:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0C:4F:BD:F7:12:2F:5D:C7:A3:A4:38:54:04:EA:2C:C5:63:D3:EF
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fd:f9:50:c7:bd:17:c4:c5:53:43:4a:bd:1c:22:cf:60:da:
f9:96:bb:28:fc:6c:e2:e4:33:ce:ae:ba:5d:1b:6f:81:09:5d:
94:3b:58:ec:c6:66:65:76:e1:e9:be:69:8a:21:25:de:ef:42:
2f:50:58:25:e8:46:68:4f:06:64:d5:91:ed:72:e9:3e:39:cc:
11:9e:be:0a:b2:6e:0b:a0:cd:54:2a:73:76:cc:dd:34:6e:44:
4a:cc:99:ce:c6:7d:16:bd:b2:b5:65:42:d2:d3:07:30:91:1f:
d0:67:56:98:14:e4:21:7b:67:de:c3:ff:3c:50:73:66:1d:ed:
c4:5d:80:87:4c:1a:98:ff:77:47:bf:0a:38:bf:c4:b4:d5:f1:
2e:67:49:ac:1d:4f:ed:4a:3d:23:66:6a:7f:cf:7a:fe:9e:a5:
39:04:72:c2:91:be:39:ca:59:9f:8b:19:37:b8:63:26:ea:ee:
ba:1a:8a:16:88:78:6e:bd:0f:57:e1:54:6b:d8:26:dc:60:91:
b2:a0:a2:f4:ba:88:d0:55:06:67:1b:84:41:97:aa:fc:18:7b:
ba:7c:01:4c:7d:1b:47:bd:05:2f:77:81:8c:01:c4:46:de:fa:
8c:5a:b2:a5:6f:71:0c:56:20:de:e0:bf:e7:b6:f2:69:f7:fa:
bf:0f:ed:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ11Q9AV97ksKQmF0ZQNCv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzBjYzA4Yzk4ZTA1ZjRlMWZiMDQ0MDA4ZDg1MmEyYTRk
YTAwZjAwHhcNMjUwNDI3MDYwMDE5WhcNMjUwNDI4MDYwMDE5WjAzMTEwLwYDVQQD
EygzOTBjNGZiZGY3MTIyZjVkYzdhM2E0Mzg1NDA0ZWEyY2M1NjNkM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx42E7yShprYqrV++KkIlq75QWLS
WTozt2NFjv0c3r/UmWGJrRN6rr6LZtA+CUlodwOcDXjxqXaP1xJWomGK/M5dmSq1
BiUu2YDUUxIzsBQlK018tmRQkPKU8vRHnLyfJr+Uky+fpNXMtVMCcpGjj8CeBROv
+XgDLmqRYrj3nveAl4rhCImsClsSQwd86wefklodM+j8F2JNRhajicw1avOk2my8
FuYHwRLnGbpEVrSLbszdmT2OSvBiUH+6CSpsuvEd0i7lS6HcfwhHEb9ce4yYObjC
Yb21IGEd4lreQ0YEY9uGckCRM9Z5OeQsf3WjQot+QrzcSTlRcMv1y3Y2WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkMT733Ei9dx6OkOFQE6izFY9PvMB8GA1UdIwQY
MBaAFI7AzAjJjgX04fsEQAjYUqKk2gDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAt
MzU3NjlmMDYyOTlhLzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAtMzU3NjlmMDYyOTlh
LzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdf35UMe9
F8TFU0NKvRwiz2Da+Za7KPxs4uQzzq66XRtvgQldlDtY7MZmZXbh6b5piiEl3u9C
L1BYJehGaE8GZNWR7XLpPjnMEZ6+CrJuC6DNVCpzdszdNG5ESsyZzsZ9Fr2ytWVC
0tMHMJEf0GdWmBTkIXtn3sP/PFBzZh3txF2Ah0wamP93R78KOL/EtNXxLmdJrB1P
7Uo9I2Zqf896/p6lOQRywpG+OcpZn4sZN7hjJuruuhqKFoh4br0PV+FUa9gm3GCR
sqCi9LqI0FUGZxuEQZeq/Bh7unwBTH0bR70FL3eBjAHERt76jFqypW9xDFYg3uC/
57byaff6vw/tJg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:48:55 2025 by rpki-client