Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
File: jMcNehq2zHYirM80kb5xURXYQzo.mft (raw, json)
Hash identifier: 0+uiYWnHuGDpy8qL+G5ZbHQVbz077m7lmyqaibwslE0=
Subject key identifier: 89:11:B5:AF:F5:31:F1:B3:0A:68:FD:59:C2:16:23:E8:63:93:D8:6A
Authority key identifier: 8C:C7:0D:7A:1A:B6:CC:76:22:AC:CF:34:91:BE:71:51:15:D8:43:3A
Certificate issuer: /CN=8cc70d7a1ab6cc7622accf3491be715115d8433a
Certificate serial: 01967FB4EE6FB7EA8AE3FA5D7CA278E97A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMcNehq2zHYirM80kb5xURXYQzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
Manifest number: 0ADC
Signing time: Tue 29 Apr 2025 04:01:25 +0000
Manifest this update: Tue 29 Apr 2025 04:01:25 +0000
Manifest next update: Wed 30 Apr 2025 04:01:25 +0000
Files and hashes: 1: jMcNehq2zHYirM80kb5xURXYQzo.crl (hash: gH5Nj/jejfk94qu5uaxbiY+3s/QtegJBuHHC8vRaP9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMcNehq2zHYirM80kb5xURXYQzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:ee:6f:b7:ea:8a:e3:fa:5d:7c:a2:78:e9:7a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc70d7a1ab6cc7622accf3491be715115d8433a
Validity
Not Before: Apr 29 04:01:25 2025 GMT
Not After : Apr 30 04:01:25 2025 GMT
Subject: CN=8911b5aff531f1b30a68fd59c21623e86393d86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:24:3c:12:92:35:3e:b0:3b:36:2c:1a:3f:
01:cd:22:7c:5c:87:63:71:01:cc:20:67:ea:06:c0:
a6:08:c1:09:42:5a:c7:68:94:5b:30:5e:2a:ce:aa:
2d:c7:03:38:9d:de:d9:bd:30:8e:ab:09:20:26:c7:
7a:fe:a6:7d:70:4b:30:08:13:22:16:a3:d9:ae:84:
21:06:f8:54:98:9c:6e:cd:b7:07:2b:2a:ce:6e:3d:
49:b4:cf:fe:87:17:0a:89:70:b2:2e:b6:14:0d:f6:
02:39:8e:22:62:3a:3d:a7:88:da:6d:8b:d7:39:b7:
73:d4:ca:ed:28:13:73:de:f6:47:6a:c1:eb:cc:9e:
6f:35:e9:10:e5:28:a0:b0:07:a6:ae:50:41:e2:b1:
1b:22:74:05:f2:a8:54:12:d4:4f:b6:84:c7:ed:59:
44:d5:55:72:35:f4:fa:84:e1:42:b7:47:9b:68:d0:
8c:42:76:69:cf:e9:d2:17:0c:e3:29:22:a6:23:67:
0b:67:5d:a7:96:b5:4c:be:77:96:1d:00:a9:87:0e:
c9:27:3a:01:ac:07:1d:98:52:1f:44:bc:2a:bb:a3:
8b:bf:38:90:2d:0f:03:e8:f4:91:3c:02:df:82:3a:
f8:5c:7d:ff:8a:cd:46:9d:9d:76:45:67:ed:75:d3:
77:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:11:B5:AF:F5:31:F1:B3:0A:68:FD:59:C2:16:23:E8:63:93:D8:6A
X509v3 Authority Key Identifier:
keyid:8C:C7:0D:7A:1A:B6:CC:76:22:AC:CF:34:91:BE:71:51:15:D8:43:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMcNehq2zHYirM80kb5xURXYQzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b2d18-9032-42bc-bd63-b8b703258a6c/1/jMcNehq2zHYirM80kb5xURXYQzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4c:b8:a7:68:35:90:24:b8:79:9d:ed:ca:16:02:98:81:66:
4e:38:ec:43:20:b9:9f:b4:1b:98:0a:28:48:74:a5:02:68:dc:
dc:14:d1:fb:24:81:ec:04:ff:d2:fe:a5:83:fa:c0:6f:0c:9b:
c7:c0:b0:3a:3a:3a:51:9a:cd:2b:9c:d1:46:26:8c:2b:d7:46:
d9:75:fe:71:98:10:f9:84:93:24:3d:90:49:c0:d6:8d:39:0b:
fa:74:60:98:39:c7:50:98:af:fe:8e:9b:92:61:ea:b5:ab:02:
3d:36:0c:7e:1d:59:82:d8:7e:f5:8c:73:de:ca:2a:85:d7:cb:
ab:26:18:01:ac:fd:07:40:64:89:7c:a9:e9:3e:34:41:82:79:
c0:a5:c3:0e:73:51:31:c5:b2:1e:cc:93:73:a1:2d:1c:e8:25:
bc:12:f5:73:89:07:79:94:3e:76:99:7a:88:78:ce:a6:b8:e0:
f5:0d:2d:99:cf:9f:ad:78:92:fb:a4:a5:08:e8:07:65:4f:25:
89:31:8c:24:15:8c:63:05:ae:71:96:47:6b:e6:d2:f3:d8:48:
b7:60:85:5c:c6:c8:02:7a:d8:5f:6f:2d:f4:04:93:a8:fa:51:
c6:fc:8c:fb:b0:48:8e:23:75:66:14:80:5d:e9:c1:6c:35:d1:
f6:b8:d6:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tO5vt+qK4/pdfKJ46XokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYzcwZDdhMWFiNmNjNzYyMmFjY2YzNDkxYmU3MTUxMTVk
ODQzM2EwHhcNMjUwNDI5MDQwMTI1WhcNMjUwNDMwMDQwMTI1WjAzMTEwLwYDVQQD
Eyg4OTExYjVhZmY1MzFmMWIzMGE2OGZkNTljMjE2MjNlODYzOTNkODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA134kPBKSNT6wOzYsGj8BzSJ8XIdj
cQHMIGfqBsCmCMEJQlrHaJRbMF4qzqotxwM4nd7ZvTCOqwkgJsd6/qZ9cEswCBMi
FqPZroQhBvhUmJxuzbcHKyrObj1JtM/+hxcKiXCyLrYUDfYCOY4iYjo9p4jabYvX
Obdz1MrtKBNz3vZHasHrzJ5vNekQ5SigsAemrlBB4rEbInQF8qhUEtRPtoTH7VlE
1VVyNfT6hOFCt0ebaNCMQnZpz+nSFwzjKSKmI2cLZ12nlrVMvneWHQCphw7JJzoB
rAcdmFIfRLwqu6OLvziQLQ8D6PSRPALfgjr4XH3/is1GnZ12RWftddN35wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkRta/1MfGzCmj9WcIWI+hjk9hqMB8GA1UdIwQY
MBaAFIzHDXoatsx2IqzPNJG+cVEV2EM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak1jTmVocTJ6SFlpck04MGtiNXhVUlhZUXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81YjJkMTgtOTAzMi00MmJjLWJkNjMt
YjhiNzAzMjU4YTZjLzEvak1jTmVocTJ6SFlpck04MGtiNXhVUlhZUXpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81YjJkMTgtOTAzMi00MmJjLWJkNjMtYjhiNzAzMjU4YTZj
LzEvak1jTmVocTJ6SFlpck04MGtiNXhVUlhZUXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcky4p2g1
kCS4eZ3tyhYCmIFmTjjsQyC5n7QbmAooSHSlAmjc3BTR+ySB7AT/0v6lg/rAbwyb
x8CwOjo6UZrNK5zRRiaMK9dG2XX+cZgQ+YSTJD2QScDWjTkL+nRgmDnHUJiv/o6b
kmHqtasCPTYMfh1Zgth+9Yxz3soqhdfLqyYYAaz9B0BkiXyp6T40QYJ5wKXDDnNR
McWyHsyTc6EtHOglvBL1c4kHeZQ+dpl6iHjOprjg9Q0tmc+frXiS+6SlCOgHZU8l
iTGMJBWMYwWucZZHa+bS89hIt2CFXMbIAnrYX28t9ASTqPpRxvyM+7BIjiN1ZhSA
XenBbDXR9rjWxA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:45:17 2025 by rpki-client