Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: /s1RY+knxdHYB8RwpeX5WB3YavpRsmDCY1xNuhL8mwI=
Subject key identifier: 4E:AF:1E:9D:1F:D3:1B:80:C5:99:64:D1:08:A8:06:83:B8:23:E9:6A
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 0196759E37629890207C8566C9DE481340AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 1466
Signing time: Sun 27 Apr 2025 05:00:25 +0000
Manifest this update: Sun 27 Apr 2025 05:00:25 +0000
Manifest next update: Mon 28 Apr 2025 05:00:25 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: E5VoF4tv6Ff7EZ9TJ2WUEjyoGCQGIpQ6pRCn9Hq+SYc=)
2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:37:62:98:90:20:7c:85:66:c9:de:48:13:40:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Apr 27 05:00:25 2025 GMT
Not After : Apr 28 05:00:25 2025 GMT
Subject: CN=4eaf1e9d1fd31b80c59964d108a80683b823e96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:c3:fc:16:b5:2d:3e:64:ec:48:4f:81:1c:
05:65:01:89:7d:cb:08:8a:c0:89:0f:97:60:19:4e:
1d:17:a1:16:1a:1d:65:c6:60:a9:5e:0c:49:ce:b0:
50:10:8e:19:23:f1:da:af:51:78:0a:3f:2b:52:c5:
dc:28:49:14:2a:7c:e7:92:f6:f3:51:8b:94:e3:27:
61:97:0b:77:18:ec:6f:30:b8:0e:59:7f:52:58:e5:
cb:a6:38:0f:63:84:3b:3f:09:09:c5:0e:12:aa:59:
f8:20:9e:c6:25:d4:d2:66:03:f3:a2:1d:48:98:ed:
9c:92:48:e7:6a:cd:1d:4a:01:1a:7e:f4:99:74:63:
3c:84:73:3c:7e:a9:6a:5d:1d:01:c7:e5:04:6b:ec:
d6:1c:23:45:0f:48:4f:7e:8c:e4:4d:a2:24:2d:7e:
8a:e3:73:38:08:b3:a8:48:07:7a:91:48:ed:40:c1:
25:9e:76:ab:cf:6f:be:b9:c4:8f:5b:20:0a:52:81:
e0:c3:c9:41:b6:2e:e1:3c:7a:23:e7:e6:51:31:cd:
b5:fc:37:86:7c:2f:33:03:0c:f4:9e:c4:75:7e:ad:
b4:7b:f3:32:ea:df:ed:89:81:bb:95:ae:0b:c5:e4:
b4:ae:1a:87:b8:22:3a:85:8b:82:bb:72:23:3e:93:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AF:1E:9D:1F:D3:1B:80:C5:99:64:D1:08:A8:06:83:B8:23:E9:6A
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:85:d3:e4:98:fb:b0:80:17:81:15:3c:fe:5d:fe:b9:a2:e0:
88:e3:1b:4c:41:05:2d:57:8b:84:12:2f:18:42:34:99:4d:73:
e5:82:58:c4:d2:e2:b0:85:ab:ed:a1:e3:73:e4:f5:78:31:1a:
76:d1:a8:75:c0:ef:c5:c7:a1:b0:bb:08:dc:b5:c0:e2:b4:e8:
2c:b4:e7:bc:13:d5:71:0d:78:bc:47:7a:7b:98:4d:76:ad:93:
9e:f7:fb:f8:2f:ad:9e:b4:87:4b:94:5c:27:f6:2d:8f:12:66:
50:7d:b0:cb:c5:e5:9d:80:8b:43:37:ec:e4:79:47:79:7f:6a:
42:61:61:5b:4f:12:f4:47:ff:7e:e2:b0:88:17:a0:73:70:9c:
42:57:ae:17:06:f8:b7:1d:61:db:de:bb:c2:f7:aa:67:ac:24:
6a:a1:9f:2e:ab:aa:0b:64:80:74:aa:33:bb:58:fd:be:4f:94:
f0:63:bd:4e:83:53:c5:a6:69:fb:c1:3b:6c:29:e1:3f:51:e6:
a6:89:85:8e:35:27:24:d1:45:cf:e4:55:75:cf:6c:89:23:61:
ea:a9:8f:66:5e:f6:6b:37:56:1c:5d:bc:ea:c2:08:a4:c6:b1:
14:de:39:be:41:9a:0d:ea:ed:bb:5d:25:05:81:e4:b5:6f:85:
33:e3:a6:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1njdimJAgfIVmyd5IE0CqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YWIyYTM4Y2FhYzBjZTNjYTAxZmRiODdmZGY5NjM3MmU4
NTk4YjYwHhcNMjUwNDI3MDUwMDI1WhcNMjUwNDI4MDUwMDI1WjAzMTEwLwYDVQQD
Eyg0ZWFmMWU5ZDFmZDMxYjgwYzU5OTY0ZDEwOGE4MDY4M2I4MjNlOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBLD/Ba1LT5k7EhPgRwFZQGJfcsI
isCJD5dgGU4dF6EWGh1lxmCpXgxJzrBQEI4ZI/Har1F4Cj8rUsXcKEkUKnznkvbz
UYuU4ydhlwt3GOxvMLgOWX9SWOXLpjgPY4Q7PwkJxQ4Sqln4IJ7GJdTSZgPzoh1I
mO2ckkjnas0dSgEafvSZdGM8hHM8fqlqXR0Bx+UEa+zWHCNFD0hPfozkTaIkLX6K
43M4CLOoSAd6kUjtQMElnnarz2++ucSPWyAKUoHgw8lBti7hPHoj5+ZRMc21/DeG
fC8zAwz0nsR1fq20e/My6t/tiYG7la4LxeS0rhqHuCI6hYuCu3IjPpOMAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6vHp0f0xuAxZlk0QioBoO4I+lqMB8GA1UdIwQY
MBaAFCarKjjKrAzjygH9uH/fljcuhZi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTkt
NWI5OTQ2ZGQxYmVhLzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTktNWI5OTQ2ZGQxYmVh
LzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIXT5Jj7
sIAXgRU8/l3+uaLgiOMbTEEFLVeLhBIvGEI0mU1z5YJYxNLisIWr7aHjc+T1eDEa
dtGodcDvxcehsLsI3LXA4rToLLTnvBPVcQ14vEd6e5hNdq2Tnvf7+C+tnrSHS5Rc
J/YtjxJmUH2wy8XlnYCLQzfs5HlHeX9qQmFhW08S9Ef/fuKwiBegc3CcQleuFwb4
tx1h2967wveqZ6wkaqGfLquqC2SAdKozu1j9vk+U8GO9ToNTxaZp+8E7bCnhP1Hm
pomFjjUnJNFFz+RVdc9siSNh6qmPZl72azdWHF286sIIpMaxFN45vkGaDertu10l
BYHktW+FM+Omrw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:24:30 2025 by rpki-client