Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File: jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier: zHEvjl2wLKqWVPGtGwkipsK9P7hf6vodFbYLybBU4tM=
Subject key identifier: 7E:5C:07:78:26:3D:1B:AA:59:1E:52:86:57:24:CF:E0:A6:26:7F:9B
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer: /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial: 019677C36D63B99C6863FF0C4F782BA350EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 15:00:18 +0000
Manifest this update: Sun 27 Apr 2025 15:00:18 +0000
Manifest next update: Mon 28 Apr 2025 15:00:18 +0000
Files and hashes: 1: LMeAQnqXAno2ePthwCoJjGfcb2A.roa (hash: No1WA2LE8faZkFieSxcHhVUWaXGzU/xeEQ1/oG4+fLo=)
2: VTn6EUtQCO3oepKWF0k0ld0XSjA.roa (hash: Tq2gVAAnQassaUGQuCNSlznhLVZoKruMbeiYe+SNasU=)
3: duhqaZfDGitvRaokNyqOu5bk0v8.roa (hash: BL1fv/RwGJqefrtoFnvmlovZ7pP8X3nS9B+9usaWWNI=)
4: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: l+lmjXnU80q19QMWWjINoa5HXQ9CDgtICjEbFXUzZpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:6d:63:b9:9c:68:63:ff:0c:4f:78:2b:a3:50:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
Validity
Not Before: Apr 27 15:00:18 2025 GMT
Not After : Apr 28 15:00:18 2025 GMT
Subject: CN=7e5c0778263d1baa591e52865724cfe0a6267f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:47:37:19:8b:7d:e1:64:cc:c4:0c:1f:c2:
3c:43:4a:dc:9b:9c:19:01:56:cc:b3:dd:73:26:ee:
15:b8:f1:60:6d:cf:0d:2d:62:73:23:16:8e:63:04:
fc:3d:27:5c:dc:b5:d6:88:cc:1f:42:1a:e9:58:ce:
b7:51:34:38:62:f4:53:e3:e4:ab:f9:2b:af:49:19:
b0:a4:e1:cc:f0:3b:3e:5e:c1:f0:af:aa:f4:38:fe:
5c:d5:66:37:5b:da:76:6b:d2:52:ce:fd:b7:6b:70:
c4:ed:3b:0e:db:25:50:e1:d1:87:f6:87:fe:01:e9:
71:4a:5a:ed:2f:75:06:c8:90:82:6a:c9:be:52:2e:
89:dc:a7:8c:ac:0b:fd:ba:5f:5e:a3:d5:8f:52:d6:
d8:28:fd:6c:55:d6:57:f5:fd:5a:ec:19:75:db:c5:
a8:47:7d:d7:47:8e:9a:87:2b:7e:8b:88:67:b8:01:
e2:40:0f:d9:f2:44:bd:ac:c0:35:53:d9:cb:d0:13:
d1:9c:8c:32:36:ce:3f:0d:6e:44:03:10:68:1f:77:
94:f1:6d:81:e2:b4:59:21:cb:95:05:c8:c5:a7:b7:
e3:25:e0:3a:27:3c:c6:01:c8:2d:7a:a1:a6:10:2e:
83:e5:0e:c4:40:8c:95:f3:22:1a:48:71:eb:12:5d:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:07:78:26:3D:1B:AA:59:1E:52:86:57:24:CF:E0:A6:26:7F:9B
X509v3 Authority Key Identifier:
keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:82:99:ab:5a:f7:38:ba:f4:2c:be:ca:1f:e3:de:76:cf:fe:
b4:f3:2f:85:7f:3c:1c:a6:26:0d:ac:e9:9f:b5:02:29:ed:7b:
0b:c7:45:eb:c8:3c:25:32:61:f1:24:e5:6f:c2:45:53:b7:6a:
84:e4:c0:c4:20:2f:1e:42:83:d2:04:11:98:c1:80:3f:c5:86:
8e:7f:e9:c3:b7:f8:0b:11:22:00:47:30:63:6a:9e:e6:e1:43:
f7:8f:28:9d:50:8f:83:a9:c6:17:88:3c:5b:14:65:02:08:ed:
10:41:df:a7:df:e9:15:1e:f5:97:79:ce:26:c7:44:2c:34:93:
d0:eb:c2:a0:cd:de:bc:b7:37:d3:d6:24:1a:e2:6b:0b:c2:3a:
7e:ec:b9:1f:50:32:86:16:ad:04:57:4a:4b:3b:85:aa:f7:1b:
40:55:2c:09:e6:a0:f5:2d:2a:14:15:46:f2:87:fe:17:88:2c:
3a:be:96:65:e9:9e:b7:ff:d9:d4:1c:e9:7d:88:34:c3:04:30:
c2:ec:09:44:71:ed:44:22:1c:2c:9b:c5:3c:bc:65:15:47:2f:
30:58:1f:85:e6:7a:1c:99:59:58:78:a0:77:38:dc:a1:b7:d9:
58:28:fe:d8:ca:7c:52:aa:7a:ac:18:9e:ea:82:c0:2f:ea:2e:
2f:24:3c:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w21juZxoY/8MT3gro1DvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODU2NTU3YzQxNDZhOGI1MGRjNGQ5NDQyNGIwNjY4MGNl
Zjc1NWIwHhcNMjUwNDI3MTUwMDE4WhcNMjUwNDI4MTUwMDE4WjAzMTEwLwYDVQQD
Eyg3ZTVjMDc3ODI2M2QxYmFhNTkxZTUyODY1NzI0Y2ZlMGE2MjY3ZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuElHNxmLfeFkzMQMH8I8Q0rcm5wZ
AVbMs91zJu4VuPFgbc8NLWJzIxaOYwT8PSdc3LXWiMwfQhrpWM63UTQ4YvRT4+Sr
+SuvSRmwpOHM8Ds+XsHwr6r0OP5c1WY3W9p2a9JSzv23a3DE7TsO2yVQ4dGH9of+
AelxSlrtL3UGyJCCasm+Ui6J3KeMrAv9ul9eo9WPUtbYKP1sVdZX9f1a7Bl128Wo
R33XR46ahyt+i4hnuAHiQA/Z8kS9rMA1U9nL0BPRnIwyNs4/DW5EAxBoH3eU8W2B
4rRZIcuVBcjFp7fjJeA6JzzGAcgteqGmEC6D5Q7EQIyV8yIaSHHrEl1BSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5cB3gmPRuqWR5Shlckz+CmJn+bMB8GA1UdIwQY
MBaAFIyFZVfEFGqLUNxNlEJLBmgM73VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEt
MmE2YjlhMGNjYWJkLzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEtMmE2YjlhMGNjYWJk
LzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoKZq1r3
OLr0LL7KH+Peds/+tPMvhX88HKYmDazpn7UCKe17C8dF68g8JTJh8STlb8JFU7dq
hOTAxCAvHkKD0gQRmMGAP8WGjn/pw7f4CxEiAEcwY2qe5uFD948onVCPg6nGF4g8
WxRlAgjtEEHfp9/pFR71l3nOJsdELDST0OvCoM3evLc309YkGuJrC8I6fuy5H1Ay
hhatBFdKSzuFqvcbQFUsCeag9S0qFBVG8of+F4gsOr6WZemet//Z1BzpfYg0wwQw
wuwJRHHtRCIcLJvFPLxlFUcvMFgfheZ6HJlZWHigdzjcobfZWCj+2Mp8Uqp6rBie
6oLAL+ouLyQ8qA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:34:00 2025 by rpki-client