Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: jAtOhJZ+IuTCIjtG4XuHYmh+pwPbIefFIYGQnC8QmuQ=
Subject key identifier: DF:1F:99:9B:4A:B8:A6:78:D3:12:31:3E:78:FE:F7:20:59:00:83:1C
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 01967530B6FF5D6576E4CE8E43438212E561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 0625
Signing time: Sun 27 Apr 2025 03:00:48 +0000
Manifest this update: Sun 27 Apr 2025 03:00:48 +0000
Manifest next update: Mon 28 Apr 2025 03:00:48 +0000
Files and hashes: 1: EmWFQT9EIlKM8K10K5cWz3oRk8c.roa (hash: mVuZgTV0YIvEIlEbhmtrwLHhCh+ETHzlqM+RSaYL3ls=)
2: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: ynnD3Nc73v9UKczddEy8M3Dl6+vzlLWNdiyl+Hu5fWs=)
3: vOuw-thqqsBDOxSUXEaJasEA7qM.roa (hash: 5FoG4V28mx1fz8vugdFd18SYEUDw3t0Z7vgkJvX8GgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:b6:ff:5d:65:76:e4:ce:8e:43:43:82:12:e5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Apr 27 03:00:48 2025 GMT
Not After : Apr 28 03:00:48 2025 GMT
Subject: CN=df1f999b4ab8a678d312313e78fef7205900831c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:4e:13:33:9f:72:ea:85:d8:07:15:1d:06:
34:1f:84:ab:f3:d1:66:99:9e:5a:57:0b:5e:cd:72:
06:36:3f:70:ba:9f:b6:a5:65:3a:fc:46:29:9b:26:
bb:8b:59:8d:f7:81:0e:0b:a8:4c:19:27:00:76:21:
60:e1:3e:4e:f5:75:3c:df:3f:54:77:6d:79:8c:4b:
61:45:51:7d:93:d8:dc:a6:9a:fd:88:71:f5:02:5c:
e1:27:65:cf:52:57:a7:32:31:50:92:6a:cf:73:27:
1b:54:96:fb:80:74:d9:b0:79:22:37:7f:e7:b4:79:
b7:e8:da:42:e7:7f:a6:df:c9:e1:a8:29:db:e1:bc:
71:49:99:63:1b:c8:dc:18:1f:72:be:8c:48:93:ad:
a7:e0:ee:00:fd:97:39:1c:ab:a0:14:db:26:fb:c9:
6d:71:c7:68:61:4e:34:f7:f9:be:be:65:f9:9a:da:
71:14:ee:bf:8c:72:13:f5:94:18:0c:a4:e5:31:78:
ba:88:52:c9:e1:db:38:cd:4b:6d:9f:62:52:e2:02:
9a:d2:3c:18:0a:be:4d:c8:08:1d:b4:12:0c:84:2d:
b0:e8:43:7e:ef:a5:ad:14:88:ec:2a:d2:74:d7:f8:
31:fd:2c:6a:fe:f5:c7:34:9f:5b:3b:8e:4a:70:a3:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1F:99:9B:4A:B8:A6:78:D3:12:31:3E:78:FE:F7:20:59:00:83:1C
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:15:76:24:59:72:e4:2d:ef:13:be:bc:74:8d:46:c9:0a:c0:
50:34:51:90:56:f1:a6:78:42:f3:4a:70:5e:31:ae:6b:d0:1c:
ee:cd:30:87:a2:04:cc:67:98:22:18:4a:aa:a8:a8:9a:cf:13:
70:c5:0a:f9:c1:a6:04:e1:fd:53:1a:fa:ab:15:1f:83:3a:03:
3f:bc:f0:af:2a:a6:63:62:4c:31:e6:97:83:db:4a:e0:84:10:
6b:93:6d:db:ee:5d:4a:56:7a:a6:7c:c9:1f:75:dd:1b:b5:1e:
fc:8b:c8:85:0c:93:c3:44:1b:dd:13:a9:75:bc:df:08:54:0a:
79:4e:23:39:28:5c:a6:97:98:9c:04:7a:1f:7f:d6:ff:00:68:
c1:7f:b6:2a:58:bf:c6:11:ed:a9:16:a1:9d:b8:ae:fe:70:43:
6d:21:42:80:00:e3:28:b2:35:bc:f8:af:40:c5:dd:52:28:ac:
8c:ed:96:a7:b8:80:29:35:d2:6a:ab:85:7a:74:64:bd:1f:fb:
c2:37:47:b5:ea:a0:72:aa:b3:76:f4:fa:10:81:c9:b1:aa:59:
5d:5b:ac:1a:12:22:dd:7c:84:d1:81:d5:19:b9:68:54:8e:44:
f8:bc:11:3d:f3:c3:de:dd:31:55:fb:97:33:37:80:9c:62:c5:
89:87:07:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MLb/XWV25M6OQ0OCEuVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMTE3OWYwYTM1Y2YwN2MxNjI5NjcyNjYyODY2Y2EwMDFm
NzViZDMwHhcNMjUwNDI3MDMwMDQ4WhcNMjUwNDI4MDMwMDQ4WjAzMTEwLwYDVQQD
EyhkZjFmOTk5YjRhYjhhNjc4ZDMxMjMxM2U3OGZlZjcyMDU5MDA4MzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFdOEzOfcuqF2AcVHQY0H4Sr89Fm
mZ5aVwtezXIGNj9wup+2pWU6/EYpmya7i1mN94EOC6hMGScAdiFg4T5O9XU83z9U
d215jEthRVF9k9jcppr9iHH1AlzhJ2XPUlenMjFQkmrPcycbVJb7gHTZsHkiN3/n
tHm36NpC53+m38nhqCnb4bxxSZljG8jcGB9yvoxIk62n4O4A/Zc5HKugFNsm+8lt
ccdoYU409/m+vmX5mtpxFO6/jHIT9ZQYDKTlMXi6iFLJ4ds4zUttn2JS4gKa0jwY
Cr5NyAgdtBIMhC2w6EN+76WtFIjsKtJ01/gx/Sxq/vXHNJ9bO45KcKMe8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8fmZtKuKZ40xIxPnj+9yBZAIMcMB8GA1UdIwQY
MBaAFI4RefCjXPB8FilnJmKGbKAB91vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAt
NGNiYzY3MjE5YjRhLzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAtNGNiYzY3MjE5YjRh
LzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBV2JFly
5C3vE768dI1GyQrAUDRRkFbxpnhC80pwXjGua9Ac7s0wh6IEzGeYIhhKqqioms8T
cMUK+cGmBOH9Uxr6qxUfgzoDP7zwryqmY2JMMeaXg9tK4IQQa5Nt2+5dSlZ6pnzJ
H3XdG7Ue/IvIhQyTw0Qb3ROpdbzfCFQKeU4jOShcppeYnAR6H3/W/wBowX+2Kli/
xhHtqRahnbiu/nBDbSFCgADjKLI1vPivQMXdUiisjO2Wp7iAKTXSaquFenRkvR/7
wjdHteqgcqqzdvT6EIHJsapZXVusGhIi3XyE0YHVGbloVI5E+LwRPfPD3t0xVfuX
MzeAnGLFiYcHxA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:41 2025 by rpki-client