Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
File: JygMxTRRbRwdnqAk6q-9Af3GjJc.mft (raw, json)
Hash identifier: a+w3XQe8myikpjV5RY2WTFvuG1kpmMtoV2/1rt97Jh4=
Subject key identifier: AD:88:1D:EE:F5:E5:D8:4C:DB:EE:CC:90:D5:4A:FB:DD:93:BA:4D:09
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 0196BB92696E24C0ACB90943FF37D8F109D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
Manifest number: 1536
Signing time: Sat 10 May 2025 19:00:56 +0000
Manifest this update: Sat 10 May 2025 19:00:56 +0000
Manifest next update: Sun 11 May 2025 19:00:56 +0000
Files and hashes: 1: JygMxTRRbRwdnqAk6q-9Af3GjJc.crl (hash: PxbS+CmMVh0oJ0PBLhlnxfzmt6YXHvkfeB3umX/7uaU=)
2: VGpF_n1XPkcrX19VIZfEe9zTBfU.roa (hash: ZCWW25MvdyoXZn5hf+wK4mNxI/epLix5Iz9z1Fs5NMw=)
3: o8N6mibH7HzRPfXSA-XguojRJmE.roa (hash: S9PmnI9ypR0hM3nIMCtKN9FHZAy4nsAZ63XidEySrCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:69:6e:24:c0:ac:b9:09:43:ff:37:d8:f1:09:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: May 10 19:00:56 2025 GMT
Not After : May 11 19:00:56 2025 GMT
Subject: CN=ad881deef5e5d84cdbeecc90d54afbdd93ba4d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:5c:4b:9d:6a:80:9e:cb:1f:a5:eb:82:21:
03:24:b3:c2:ea:bf:f7:c1:3d:bb:d9:06:10:a4:10:
99:86:9c:7a:25:8c:aa:fe:22:33:9e:6a:6a:1c:c9:
4a:22:65:96:cd:35:6d:b9:02:4f:af:fa:78:8c:9c:
07:5d:15:fe:23:1d:62:62:8c:aa:51:f3:30:38:8d:
63:bf:0e:d6:1d:98:cf:e4:44:7d:03:f1:a7:e8:05:
4a:69:92:a7:15:04:8a:6f:fe:e9:89:da:74:f8:87:
cf:27:d4:76:1b:47:55:8c:48:42:63:bc:fb:84:77:
34:d2:9f:81:8a:8f:7f:43:71:11:e2:6b:2f:36:7a:
d8:77:9e:f7:c8:de:bc:a2:36:05:47:da:76:19:79:
f3:f9:0d:4a:d5:93:36:e4:2a:46:ca:bb:af:d4:de:
7c:c9:1a:89:17:73:9f:3d:95:44:21:e7:03:fa:17:
98:7f:e0:43:76:32:39:9a:27:2c:bf:d9:ba:47:f4:
39:6e:89:83:e9:2f:a0:16:9c:cd:e3:60:92:c8:8b:
a0:43:e6:b4:46:38:8f:34:1f:01:26:09:0f:02:2e:
82:12:a4:0d:af:f9:8e:5b:68:4f:fd:d5:ca:28:07:
18:41:fe:65:5d:b9:06:d5:2f:1a:bf:f0:65:db:da:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:88:1D:EE:F5:E5:D8:4C:DB:EE:CC:90:D5:4A:FB:DD:93:BA:4D:09
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fa:fb:d1:a0:58:7a:f3:f5:17:f1:78:bc:b2:07:bf:d9:c3:
a6:c5:8b:79:3f:80:46:05:83:fc:e5:30:05:45:f2:59:c0:37:
63:c2:35:38:03:11:f9:0b:7d:c9:1f:07:dc:0c:ee:4d:22:bb:
7a:33:c5:5e:e3:80:60:fe:d2:8c:37:e4:9d:14:cd:fe:cf:13:
97:1f:f7:74:54:80:cc:92:cf:72:f5:02:c0:8b:b9:e7:e1:ea:
c0:b2:a3:de:a3:cf:4e:58:98:6d:e1:ec:d7:18:d3:f1:16:5d:
4f:9b:6c:32:ca:be:86:6e:df:8a:83:49:2f:f8:6a:2f:90:40:
e8:5a:d5:a0:d7:ac:57:46:c0:97:6b:eb:3b:af:cf:31:49:68:
58:2e:81:7f:b7:e5:e8:bb:1d:b2:24:bc:a9:72:7b:ae:83:13:
b4:22:dd:29:fe:82:d2:c2:c1:01:7f:f4:08:6b:2e:1a:3f:60:
ce:3d:e0:eb:85:0d:5a:f0:55:f4:82:8c:e9:6e:e6:81:ee:8a:
b1:be:3b:b3:1b:2b:4a:48:1d:ea:20:6c:06:2c:1b:5e:e5:07:
e5:8d:55:0f:c2:84:69:2c:1a:51:d8:b0:23:af:f1:d9:8c:ef:
64:aa:2c:6f:70:24:47:ba:be:3c:30:c4:ed:76:3c:24:9f:08:
cf:12:9d:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kmluJMCsuQlD/zfY8QnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MjgwY2M1MzQ1MTZkMWMxZDllYTAyNGVhYWZiZDAxZmRj
NjhjOTcwHhcNMjUwNTEwMTkwMDU2WhcNMjUwNTExMTkwMDU2WjAzMTEwLwYDVQQD
EyhhZDg4MWRlZWY1ZTVkODRjZGJlZWNjOTBkNTRhZmJkZDkzYmE0ZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvehcS51qgJ7LH6XrgiEDJLPC6r/3
wT272QYQpBCZhpx6JYyq/iIznmpqHMlKImWWzTVtuQJPr/p4jJwHXRX+Ix1iYoyq
UfMwOI1jvw7WHZjP5ER9A/Gn6AVKaZKnFQSKb/7pidp0+IfPJ9R2G0dVjEhCY7z7
hHc00p+Bio9/Q3ER4msvNnrYd573yN68ojYFR9p2GXnz+Q1K1ZM25CpGyruv1N58
yRqJF3OfPZVEIecD+heYf+BDdjI5micsv9m6R/Q5bomD6S+gFpzN42CSyIugQ+a0
RjiPNB8BJgkPAi6CEqQNr/mOW2hP/dXKKAcYQf5lXbkG1S8av/Bl29rLvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2IHe715dhM2+7MkNVK+92Tuk0JMB8GA1UdIwQY
MBaAFCcoDMU0UW0cHZ6gJOqvvQH9xoyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUt
MTViNzliMDI5NDNlLzEvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wY2M2YjUtNTQ3Ny00OTBhLWEyOTUtMTViNzliMDI5NDNl
LzEvSnlnTXhUUlJiUndkbnFBazZxLTlBZjNHakpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPr70aBY
evP1F/F4vLIHv9nDpsWLeT+ARgWD/OUwBUXyWcA3Y8I1OAMR+Qt9yR8H3AzuTSK7
ejPFXuOAYP7SjDfknRTN/s8Tlx/3dFSAzJLPcvUCwIu55+HqwLKj3qPPTliYbeHs
1xjT8RZdT5tsMsq+hm7fioNJL/hqL5BA6FrVoNesV0bAl2vrO6/PMUloWC6Bf7fl
6LsdsiS8qXJ7roMTtCLdKf6C0sLBAX/0CGsuGj9gzj3g64UNWvBV9IKM6W7mge6K
sb47sxsrSkgd6iBsBiwbXuUH5Y1VD8KEaSwaUdiwI6/x2YzvZKosb3AkR7q+PDDE
7XY8JJ8IzxKdjQ==
-----END CERTIFICATE-----
Generated at Sun May 11 01:09:41 2025 by rpki-client