Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
File: JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft (raw, json)
Hash identifier: B4/56ZucaShDVYfUKhkPDk6bYU7hHPt2TzdCzQAkCOY=
Subject key identifier: 33:21:0A:B0:69:BB:05:B5:91:C1:D6:FE:9F:31:15:56:56:D0:1E:9C
Authority key identifier: 24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
Certificate issuer: /CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Certificate serial: 019677557EC5AF95DE09740732BAA1409EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
Manifest number: 0EEB
Signing time: Sun 27 Apr 2025 13:00:13 +0000
Manifest this update: Sun 27 Apr 2025 13:00:13 +0000
Manifest next update: Mon 28 Apr 2025 13:00:13 +0000
Files and hashes: 1: 89L3qYgunLwQpom3bGdwccQduKU.roa (hash: Wmvi3Nv4a5j2YSCNbxxtOShkpYW766qjpODSUqcoafA=)
2: JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl (hash: 2THBsanaPf78Ddwu8CjlEL0qXV+mERjEY3Zdb9AwSDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:7e:c5:af:95:de:09:74:07:32:ba:a1:40:9e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Validity
Not Before: Apr 27 13:00:13 2025 GMT
Not After : Apr 28 13:00:13 2025 GMT
Subject: CN=33210ab069bb05b591c1d6fe9f31155656d01e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:5c:55:11:ac:ef:1a:05:3f:55:65:9d:70:
b1:7a:9a:d7:0e:d2:29:11:1c:ca:c9:a2:42:45:0a:
b2:01:36:01:dd:8a:81:23:e8:b8:00:34:e0:f3:07:
9c:9a:ee:55:ab:ab:b7:7f:39:96:a6:f3:14:40:53:
80:de:ab:94:58:54:11:f5:db:77:5a:4d:a6:46:42:
43:bc:9d:f4:d3:a6:09:c0:c1:f1:76:c0:10:e6:10:
dc:bd:1e:9d:26:12:8e:52:dc:32:58:86:93:82:e8:
b3:10:f7:d4:ec:f5:dc:92:11:45:c9:9f:51:06:25:
e4:75:71:26:33:d7:2d:b0:1d:e3:ee:c1:55:60:de:
a7:eb:5f:2f:3e:01:e5:7c:0e:ed:0c:97:3e:76:73:
61:36:df:2d:33:4b:b4:0d:30:6b:d5:29:6e:10:69:
15:f8:6a:d7:12:b6:74:76:6a:0c:0c:cd:bd:82:47:
3e:e5:dc:e2:f3:3e:9a:09:a4:c7:55:01:57:cb:10:
a4:62:30:e6:c0:92:3b:55:9e:45:ee:de:3f:9b:2f:
3a:ce:9c:ee:36:a0:11:96:0f:e6:ad:01:44:96:c0:
be:91:6f:9c:d6:c3:10:9b:95:aa:e0:22:ff:a0:58:
c6:55:47:75:29:34:e9:b1:6c:82:56:5b:ab:4b:60:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:0A:B0:69:BB:05:B5:91:C1:D6:FE:9F:31:15:56:56:D0:1E:9C
X509v3 Authority Key Identifier:
keyid:24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:df:13:98:9d:08:94:f8:8b:14:86:5c:5e:e7:17:89:f1:8a:
79:7a:90:29:05:85:02:fb:49:7c:47:d4:bf:73:eb:b5:66:1d:
6b:95:71:32:f1:2d:0f:21:93:8b:0c:50:c2:bf:1c:b5:48:ba:
ce:a2:d3:d9:26:7a:51:4a:61:07:f6:cb:75:4b:3e:c0:f7:07:
12:29:4d:c6:8a:41:c3:de:37:99:26:27:23:43:5a:91:fd:9c:
b8:9c:8e:6f:4c:1f:72:6c:41:12:ec:e0:72:58:7f:6a:2f:f4:
62:aa:31:52:c9:48:c6:6d:4e:26:06:79:98:6c:fc:fa:85:1b:
a1:79:20:d9:56:3f:87:b8:f2:71:df:d3:4b:99:0f:bd:9b:01:
3f:dc:e4:75:af:d5:6b:ce:3f:8a:d8:f0:9c:42:37:29:4e:aa:
42:39:36:23:9c:31:87:c0:ed:e2:64:07:03:b1:63:34:b8:64:
5f:26:7b:18:5b:11:30:72:bb:06:bb:45:ee:34:6b:d0:09:0b:
e0:16:d2:2b:1d:ca:8d:0b:0d:66:53:de:6a:9a:55:b1:fe:4d:
c7:73:a7:02:05:74:e4:55:77:13:f4:f4:5b:bd:44:44:10:ab:
a8:2d:2f:f3:79:05:33:2e:1a:30:60:e2:c3:52:fc:a6:79:94:
b9:6c:75:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3VX7Fr5XeCXQHMrqhQJ6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzNhODZiYmM1YzJiYWI0NTJmZjAzZjQ1YTllYWYwYTYx
MGM0MGMwHhcNMjUwNDI3MTMwMDEzWhcNMjUwNDI4MTMwMDEzWjAzMTEwLwYDVQQD
EygzMzIxMGFiMDY5YmIwNWI1OTFjMWQ2ZmU5ZjMxMTU1NjU2ZDAxZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPBcVRGs7xoFP1VlnXCxeprXDtIp
ERzKyaJCRQqyATYB3YqBI+i4ADTg8wecmu5Vq6u3fzmWpvMUQFOA3quUWFQR9dt3
Wk2mRkJDvJ3006YJwMHxdsAQ5hDcvR6dJhKOUtwyWIaTguizEPfU7PXckhFFyZ9R
BiXkdXEmM9ctsB3j7sFVYN6n618vPgHlfA7tDJc+dnNhNt8tM0u0DTBr1SluEGkV
+GrXErZ0dmoMDM29gkc+5dzi8z6aCaTHVQFXyxCkYjDmwJI7VZ5F7t4/my86zpzu
NqARlg/mrQFElsC+kW+c1sMQm5Wq4CL/oFjGVUd1KTTpsWyCVlurS2D02wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMhCrBpuwW1kcHW/p8xFVZW0B6cMB8GA1UdIwQY
MBaAFCQzqGu8XCurRS/wP0Wp6vCmEMQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMGYyZDAtMjczOC00ZWQ0LThhZDkt
MDViNmM5YzE2NDQxLzEvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mMGYyZDAtMjczOC00ZWQ0LThhZDktMDViNmM5YzE2NDQx
LzEvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP98TmJ0I
lPiLFIZcXucXifGKeXqQKQWFAvtJfEfUv3PrtWYda5VxMvEtDyGTiwxQwr8ctUi6
zqLT2SZ6UUphB/bLdUs+wPcHEilNxopBw943mSYnI0Nakf2cuJyOb0wfcmxBEuzg
clh/ai/0YqoxUslIxm1OJgZ5mGz8+oUboXkg2VY/h7jycd/TS5kPvZsBP9zkda/V
a84/itjwnEI3KU6qQjk2I5wxh8Dt4mQHA7FjNLhkXyZ7GFsRMHK7BrtF7jRr0AkL
4BbSKx3KjQsNZlPeappVsf5Nx3OnAgV05FV3E/T0W71ERBCrqC0v83kFMy4aMGDi
w1L8pnmUuWx1tA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:57:17 2025 by rpki-client