Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: fNaeP8AFCNWI/ean6li2A5EwK69Ij7mU8snGPEEnmC4=
Subject key identifier: D3:61:F8:55:81:AC:90:88:66:7E:EC:F0:04:CB:D7:E6:68:E5:01:2B
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 0196B5591F53385D2C1092DFEEC8465A1E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 0365
Signing time: Fri 09 May 2025 14:00:38 +0000
Manifest this update: Fri 09 May 2025 14:00:38 +0000
Manifest next update: Sat 10 May 2025 14:00:38 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: oL6Ozp23s/zEjeyQib832iTtX4SHjN0iBKFkr7o+fcU=)
2: cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (hash: pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=)
3: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (hash: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:59:1f:53:38:5d:2c:10:92:df:ee:c8:46:5a:1e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: May 9 14:00:38 2025 GMT
Not After : May 10 14:00:38 2025 GMT
Subject: CN=d361f85581ac9088667eecf004cbd7e668e5012b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:84:f9:a5:76:d7:48:23:fd:4c:2f:65:3d:
52:9b:3f:5f:2d:8b:7d:32:12:17:23:f4:bf:e8:24:
11:c6:14:b7:5c:7f:d0:92:04:06:6a:df:40:7d:1f:
28:4c:24:19:60:68:ea:b7:a3:3e:ab:5a:48:55:ce:
35:de:dd:6e:04:66:b8:b8:16:77:a7:29:20:af:32:
fd:1a:6c:04:cd:b3:bb:b4:ad:78:b6:4f:bb:95:43:
cd:43:e2:73:94:2d:9f:95:02:ec:66:4c:20:87:cc:
e1:78:6a:5b:26:13:55:29:2d:fc:74:bb:d3:28:f4:
cc:f6:98:59:e5:a9:21:44:31:23:bb:d2:50:8e:99:
63:b4:67:4a:22:93:66:08:2a:9f:94:81:71:4d:8e:
f9:14:f4:aa:77:fb:de:f3:50:73:e3:a6:b9:b3:d5:
3a:da:77:89:1f:f8:14:89:3a:61:6c:62:60:c6:b2:
e1:c5:7f:1e:a7:ce:8c:55:48:cc:36:22:4e:a6:83:
9c:55:d0:68:78:18:f0:3b:80:8d:9d:76:02:95:16:
f1:db:4b:01:7b:f8:59:d9:07:a9:f5:b0:48:32:d4:
a8:71:3d:e4:b2:1f:66:4a:c2:2f:88:8a:0c:d8:da:
1e:d3:a7:1b:94:5a:3a:0b:ee:63:59:f0:39:4b:2e:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:61:F8:55:81:AC:90:88:66:7E:EC:F0:04:CB:D7:E6:68:E5:01:2B
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0b:d2:2d:80:fa:9c:34:e5:16:0e:3b:5c:e1:43:eb:32:7e:
41:c7:b6:5b:b4:64:1c:1e:fb:09:74:25:60:d8:ae:aa:67:90:
be:7e:74:2c:31:ad:d3:6e:df:d8:fa:15:f9:b7:fd:ad:34:7c:
6a:24:e8:06:d6:1c:24:08:6c:75:62:89:b1:9b:30:b6:8d:81:
91:5e:5a:6f:86:e3:62:0d:6a:98:e7:f9:69:2f:07:eb:f8:76:
23:c0:9f:ea:9e:c2:fc:ad:8d:5f:31:bb:99:47:e1:10:bb:85:
30:91:fa:32:76:da:27:d8:5e:a7:e9:dd:60:56:59:d4:78:06:
ee:4a:94:1b:3c:c2:b1:77:19:1e:be:61:af:8a:39:e4:95:73:
71:20:09:fe:2e:2c:29:b8:21:31:11:6e:4e:a7:3d:2a:50:63:
9c:65:81:b5:92:fe:c7:59:84:7c:a3:5e:c2:cc:5b:b8:02:85:
4b:6d:df:d1:28:27:11:c6:68:21:6a:22:63:11:91:0d:2e:42:
b5:b4:d6:3e:39:13:3b:b6:fd:84:41:cb:af:83:b1:fe:c3:c2:
84:30:b9:08:5c:8d:aa:59:fd:52:19:28:ce:9d:8c:f4:5f:e7:
0b:1e:f5:5e:9f:f3:98:2e:46:29:99:88:78:c3:03:60:04:66:
aa:29:7e:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1WR9TOF0sEJLf7shGWh50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTdmNzNiZjAyZjc1NGIxZTYzMTdlZTlhNGYzZTg4NjM3
ZjFhYTcwHhcNMjUwNTA5MTQwMDM4WhcNMjUwNTEwMTQwMDM4WjAzMTEwLwYDVQQD
EyhkMzYxZjg1NTgxYWM5MDg4NjY3ZWVjZjAwNGNiZDdlNjY4ZTUwMTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRiE+aV210gj/UwvZT1Smz9fLYt9
MhIXI/S/6CQRxhS3XH/QkgQGat9AfR8oTCQZYGjqt6M+q1pIVc413t1uBGa4uBZ3
pykgrzL9GmwEzbO7tK14tk+7lUPNQ+JzlC2flQLsZkwgh8zheGpbJhNVKS38dLvT
KPTM9phZ5akhRDEju9JQjpljtGdKIpNmCCqflIFxTY75FPSqd/ve81Bz46a5s9U6
2neJH/gUiTphbGJgxrLhxX8ep86MVUjMNiJOpoOcVdBoeBjwO4CNnXYClRbx20sB
e/hZ2Qep9bBIMtSocT3ksh9mSsIviIoM2Noe06cblFo6C+5jWfA5Sy4HwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNh+FWBrJCIZn7s8ATL1+Zo5QErMB8GA1UdIwQY
MBaAFCRX9zvwL3VLHmMX7ppPPohjfxqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTct
NWZhMzgwNzQ5NDk3LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTctNWZhMzgwNzQ5NDk3
LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgvSLYD6
nDTlFg47XOFD6zJ+Qce2W7RkHB77CXQlYNiuqmeQvn50LDGt027f2PoV+bf9rTR8
aiToBtYcJAhsdWKJsZswto2BkV5ab4bjYg1qmOf5aS8H6/h2I8Cf6p7C/K2NXzG7
mUfhELuFMJH6MnbaJ9hep+ndYFZZ1HgG7kqUGzzCsXcZHr5hr4o55JVzcSAJ/i4s
KbghMRFuTqc9KlBjnGWBtZL+x1mEfKNewsxbuAKFS23f0SgnEcZoIWoiYxGRDS5C
tbTWPjkTO7b9hEHLr4Ox/sPChDC5CFyNqln9Uhkozp2M9F/nCx71Xp/zmC5GKZmI
eMMDYARmqil+rQ==
-----END CERTIFICATE-----
Generated at Fri May 9 18:43:10 2025 by rpki-client