Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier: YCZQjZbicLY+XJQM8p3sedyzkDefwtoka/SB/SiV8tQ=
Subject key identifier: C8:F3:38:E1:FC:1A:EA:D2:54:E0:F3:13:71:40:7B:C0:DE:B6:5B:54
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 0196C796CCB19A5611BA06602DA29BE8E2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number: 1066
Signing time: Tue 13 May 2025 03:01:10 +0000
Manifest this update: Tue 13 May 2025 03:01:10 +0000
Manifest next update: Wed 14 May 2025 03:01:10 +0000
Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: +4rrP2ctVuTJqmUOGaQsM8+Dd4oiB/4NKEI+Rpu1iXs=)
2: _d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa (hash: vnr1x2ojeLhbVafxW9oqVV43qotLr8cLQwIIuErWSfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:cc:b1:9a:56:11:ba:06:60:2d:a2:9b:e8:e2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: May 13 03:01:10 2025 GMT
Not After : May 14 03:01:10 2025 GMT
Subject: CN=c8f338e1fc1aead254e0f31371407bc0deb65b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:b5:52:36:21:22:6b:7a:3b:2b:be:1f:ef:
44:8f:fe:28:31:80:28:b2:6f:05:21:9c:09:b7:72:
fb:8a:d2:cd:1a:a4:b6:b7:87:1a:e2:c2:bb:bb:f4:
d1:b6:d3:1e:5d:b3:9b:78:dc:ac:25:77:0b:75:86:
47:5d:f5:d5:46:4b:2b:86:11:25:92:07:5a:18:24:
81:17:a2:d2:e4:b5:71:62:0c:56:2c:8a:33:68:35:
67:65:f3:41:b8:87:dc:a5:e0:db:21:1e:d3:63:14:
cd:78:11:91:39:2c:b7:42:5c:1c:03:4a:43:b5:d8:
ca:0f:17:54:11:3a:ea:6b:75:21:2a:13:19:3b:6b:
47:ef:48:de:80:36:c6:44:7b:66:aa:e1:5e:f6:8f:
5a:91:18:87:dd:b8:bc:b4:a4:eb:ed:da:f2:43:31:
29:82:71:d1:4f:2a:20:98:81:44:de:96:f1:7c:b4:
ea:d1:39:2c:7f:cd:c1:69:16:d9:d1:8d:c6:91:3e:
dc:88:fe:69:9d:70:cc:2d:a6:b6:7f:c6:39:db:af:
37:6e:ac:97:17:54:aa:d6:57:96:f1:87:b4:3f:6d:
75:40:f0:77:7a:63:d0:cc:a1:cf:4a:71:96:3f:75:
fa:3c:58:11:cb:d4:bd:34:e8:8b:34:1f:dc:73:e9:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F3:38:E1:FC:1A:EA:D2:54:E0:F3:13:71:40:7B:C0:DE:B6:5B:54
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fa:f2:7f:23:5e:83:0b:fe:e6:f7:b6:ee:1b:73:7c:07:a8:
39:6c:b8:c8:33:d5:41:56:53:67:77:1d:fc:54:25:54:96:58:
7b:ce:3e:ec:8f:89:5e:4f:58:95:6c:78:86:13:92:00:40:7f:
22:7c:b7:e8:2f:f1:ab:14:9a:cc:ec:db:a1:0d:16:53:ae:9f:
67:46:f0:41:bc:b3:42:2f:51:97:f2:1f:87:01:b0:2b:8a:b2:
31:d5:7a:e1:72:09:de:31:aa:3e:b0:94:7c:c7:a1:d2:41:a9:
67:7a:5f:c3:0f:84:fe:41:5d:af:f0:7d:69:85:25:94:84:db:
f1:23:c9:be:e0:26:e2:3a:48:8d:b2:6d:cd:84:54:60:b0:dd:
f4:d8:2c:73:db:f9:87:b1:4a:9b:e4:0f:88:b8:e3:99:38:0e:
47:5e:6a:e1:66:3c:a8:b1:13:b3:f9:4f:c9:22:1c:bb:68:3e:
b9:d0:3f:89:99:4e:cc:23:b5:e0:33:28:2d:f5:7b:c8:f6:d2:
88:e3:9b:ce:84:66:fd:1a:24:ee:8d:4e:b7:26:6d:09:41:ae:
4f:84:3a:be:e7:74:91:4c:66:e8:76:6d:d6:32:f3:75:ca:8e:
f8:e0:26:9e:a6:ba:5a:fa:4c:33:e9:4d:6b:6c:5e:50:ec:49:
b3:b6:65:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHlsyxmlYRugZgLaKb6OLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NThmMGE0NTNiMzJmZjNhMjFlNjZhMzFiNzRmZTQ5ZDhl
NDZhMzMwHhcNMjUwNTEzMDMwMTEwWhcNMjUwNTE0MDMwMTEwWjAzMTEwLwYDVQQD
EyhjOGYzMzhlMWZjMWFlYWQyNTRlMGYzMTM3MTQwN2JjMGRlYjY1YjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiK1UjYhImt6Oyu+H+9Ej/4oMYAo
sm8FIZwJt3L7itLNGqS2t4ca4sK7u/TRttMeXbObeNysJXcLdYZHXfXVRksrhhEl
kgdaGCSBF6LS5LVxYgxWLIozaDVnZfNBuIfcpeDbIR7TYxTNeBGROSy3QlwcA0pD
tdjKDxdUETrqa3UhKhMZO2tH70jegDbGRHtmquFe9o9akRiH3bi8tKTr7dryQzEp
gnHRTyogmIFE3pbxfLTq0Tksf83BaRbZ0Y3GkT7ciP5pnXDMLaa2f8Y52683bqyX
F1Sq1leW8Ye0P211QPB3emPQzKHPSnGWP3X6PFgRy9S9NOiLNB/cc+mW8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjzOOH8GurSVODzE3FAe8DetltUMB8GA1UdIwQY
MBaAFCRY8KRTsy/zoh5moxt0/knY5GozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQt
ZWUzNzk1MThjNjg2LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQtZWUzNzk1MThjNjg2
LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfryfyNe
gwv+5ve27htzfAeoOWy4yDPVQVZTZ3cd/FQlVJZYe84+7I+JXk9YlWx4hhOSAEB/
Iny36C/xqxSazOzboQ0WU66fZ0bwQbyzQi9Rl/IfhwGwK4qyMdV64XIJ3jGqPrCU
fMeh0kGpZ3pfww+E/kFdr/B9aYUllITb8SPJvuAm4jpIjbJtzYRUYLDd9Ngsc9v5
h7FKm+QPiLjjmTgOR15q4WY8qLETs/lPySIcu2g+udA/iZlOzCO14DMoLfV7yPbS
iOObzoRm/Rok7o1OtyZtCUGuT4Q6vud0kUxm6HZt1jLzdcqO+OAmnqa6WvpMM+lN
a2xeUOxJs7ZlAA==
-----END CERTIFICATE-----
Generated at Tue May 13 10:16:20 2025 by rpki-client