Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json)
Hash identifier: 0BzUcW0yEDdqHzd+M8rBg5pUNg2vP6TQCtV1rRHww2U=
Subject key identifier: AC:47:09:F3:84:17:EF:89:E2:AE:C4:88:AF:F1:94:31:60:20:50:16
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 019676E82A8E388165202585F7FDDB5E3EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
Manifest number: 025E
Signing time: Sun 27 Apr 2025 11:00:48 +0000
Manifest this update: Sun 27 Apr 2025 11:00:48 +0000
Manifest next update: Mon 28 Apr 2025 11:00:48 +0000
Files and hashes: 1: NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa (hash: a1KXZCaEoxN1UkOcv0YA7zkHr19aSLSv8QON/lo/20Y=)
2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: n+Qvh6N+7Vqh0STEoBCEm4hgB6CeIb9ZaJJwsNx15bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:2a:8e:38:81:65:20:25:85:f7:fd:db:5e:3e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Apr 27 11:00:48 2025 GMT
Not After : Apr 28 11:00:48 2025 GMT
Subject: CN=ac4709f38417ef89e2aec488aff1943160205016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:e0:1c:6e:9c:4d:e4:31:20:f4:4e:73:b6:
14:eb:44:bb:e4:69:79:1c:69:4e:9e:ca:6d:78:24:
a9:fc:e5:4c:60:a5:44:7d:bf:91:87:17:d6:80:1b:
15:94:be:b2:ff:1f:53:85:e5:fd:d9:88:45:a6:f7:
ed:0a:3f:b8:91:9a:f4:96:86:1b:90:a6:e5:83:83:
b8:a4:8d:b1:53:2e:37:37:ac:d8:28:25:8b:c2:50:
21:19:95:1d:f6:75:5b:a5:16:42:92:3e:f8:ff:f4:
60:1a:55:2f:0c:24:45:ea:74:9b:e3:7d:95:40:db:
f5:d0:85:00:4e:b7:44:bc:d2:52:7e:57:a8:39:50:
21:14:ae:2b:09:21:7a:c4:6b:55:96:d4:3e:01:88:
07:3a:d6:3a:a5:42:90:66:9b:78:37:94:2b:5e:6c:
d2:01:78:64:1a:b8:23:4c:f4:9a:5e:f9:2a:bd:30:
e8:68:c7:bf:9d:03:b4:48:ff:8b:8c:de:55:c8:73:
90:6b:17:2d:5f:55:8f:f0:73:62:9e:e1:26:02:77:
45:c2:ab:a6:ce:c3:2d:09:4f:c3:45:3a:12:78:ce:
1f:c9:7f:56:f8:55:dc:70:15:24:b6:e6:89:60:9a:
82:84:3b:46:48:ef:db:90:2f:d2:7f:7f:22:64:fa:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:47:09:F3:84:17:EF:89:E2:AE:C4:88:AF:F1:94:31:60:20:50:16
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7a:4f:98:c3:b5:00:3b:9e:f0:1c:fb:17:8d:15:66:43:78:
46:03:3e:e3:3c:97:83:d3:ba:82:49:9d:2c:0a:05:94:cf:f4:
4d:36:e8:ab:cc:37:a3:fc:6e:2e:ee:ab:ba:3e:ab:5d:f4:09:
f8:41:32:4c:a7:4d:4e:3a:5b:5d:2d:f8:08:c9:47:60:44:4c:
c9:4b:ec:59:97:dd:00:bc:6c:bc:be:b8:a4:15:76:1d:aa:1d:
67:1d:d5:f6:73:c5:c3:6e:2a:05:b4:19:6e:27:3a:0f:2b:dc:
f7:17:eb:bb:45:8d:96:e5:e3:be:c0:60:69:fb:39:36:30:e1:
e5:01:df:8e:94:29:dd:42:63:2b:93:96:e1:c0:28:c0:da:83:
12:e6:67:df:2b:ac:63:d5:03:ac:01:49:29:79:0e:f9:d8:b6:
0d:29:12:2e:47:4d:34:a5:7d:34:62:4f:b9:98:89:8f:98:d0:
6f:a3:aa:a5:70:8d:1e:86:36:7b:6c:59:a8:43:23:4f:7f:33:
b0:31:72:73:86:f3:f9:60:87:45:f2:4c:b3:13:b5:4a:76:c4:
1b:bc:58:e5:79:cd:0c:28:cb:08:e2:a7:ce:12:59:d8:b1:b9:
f5:40:d4:a0:21:06:15:a5:46:39:ec:b8:b0:03:ea:c0:3b:bd:
e9:9b:70:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ26CqOOIFlICWF9/3bXj7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOTgwNWY2NDgwMWRkOTM1OTk0MTRhNjI1MDliMTJhNTQw
MmY4NjgwHhcNMjUwNDI3MTEwMDQ4WhcNMjUwNDI4MTEwMDQ4WjAzMTEwLwYDVQQD
EyhhYzQ3MDlmMzg0MTdlZjg5ZTJhZWM0ODhhZmYxOTQzMTYwMjA1MDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb7gHG6cTeQxIPROc7YU60S75Gl5
HGlOnspteCSp/OVMYKVEfb+RhxfWgBsVlL6y/x9TheX92YhFpvftCj+4kZr0loYb
kKblg4O4pI2xUy43N6zYKCWLwlAhGZUd9nVbpRZCkj74//RgGlUvDCRF6nSb432V
QNv10IUATrdEvNJSfleoOVAhFK4rCSF6xGtVltQ+AYgHOtY6pUKQZpt4N5QrXmzS
AXhkGrgjTPSaXvkqvTDoaMe/nQO0SP+LjN5VyHOQaxctX1WP8HNinuEmAndFwqum
zsMtCU/DRToSeM4fyX9W+FXccBUktuaJYJqChDtGSO/bkC/Sf38iZPqpUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxHCfOEF++J4q7EiK/xlDFgIFAWMB8GA1UdIwQY
MBaAFI+YBfZIAd2TWZQUpiUJsSpUAvhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQt
ZTU4NGNkNWY4ZDExLzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81M2Y5YmQtN2Y1NC00YmQyLWI1YTQtZTU4NGNkNWY4ZDEx
LzEvajVnRjlrZ0IzWk5abEJTbUpRbXhLbFFDLUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHpPmMO1
ADue8Bz7F40VZkN4RgM+4zyXg9O6gkmdLAoFlM/0TTboq8w3o/xuLu6ruj6rXfQJ
+EEyTKdNTjpbXS34CMlHYERMyUvsWZfdALxsvL64pBV2HaodZx3V9nPFw24qBbQZ
bic6Dyvc9xfru0WNluXjvsBgafs5NjDh5QHfjpQp3UJjK5OW4cAowNqDEuZn3yus
Y9UDrAFJKXkO+di2DSkSLkdNNKV9NGJPuZiJj5jQb6OqpXCNHoY2e2xZqEMjT38z
sDFyc4bz+WCHRfJMsxO1SnbEG7xY5XnNDCjLCOKnzhJZ2LG59UDUoCEGFaVGOey4
sAPqwDu96Ztw/Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:14 2025 by rpki-client