Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
File: jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json)
Hash identifier: SQSuAubLUlbVJoGWhZSrzsK6lM2181JbZBi4vS96nd4=
Subject key identifier: 49:ED:FD:09:67:4C:08:69:EB:36:A5:24:B8:9A:E2:F1:CF:C4:57:E8
Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
Certificate issuer: /CN=8d843b57d0afcc112fe389668bf675d80d8223da
Certificate serial: 0196B8914F7A53C8ADEFB53F7A505D9B0295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
Manifest number: 0655
Signing time: Sat 10 May 2025 05:00:52 +0000
Manifest this update: Sat 10 May 2025 05:00:52 +0000
Manifest next update: Sun 11 May 2025 05:00:52 +0000
Files and hashes: 1: iKKb1X29tTU2k_RZJyC1P6S0W1I.roa (hash: JYbd5SDgMPm4EIN7ny/Mr7yif1cItUNdM4vZHpLmqsU=)
2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: C8A7JfFuTPEHBpU54A+1xi7F45SHaeqqQQUymJJSOHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:4f:7a:53:c8:ad:ef:b5:3f:7a:50:5d:9b:02:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da
Validity
Not Before: May 10 05:00:52 2025 GMT
Not After : May 11 05:00:52 2025 GMT
Subject: CN=49edfd09674c0869eb36a524b89ae2f1cfc457e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:16:b3:4d:7b:ba:d2:7b:62:d6:1b:e2:77:
50:73:64:62:e7:8f:f3:c7:2a:c2:ac:42:3a:3d:78:
00:d3:4c:07:1c:5d:0c:91:70:81:0e:e1:0d:b1:63:
c6:0a:3e:9d:dc:b5:ec:c3:ac:f2:86:05:2e:61:d6:
6e:b7:01:5a:56:5d:1e:32:65:fa:85:e4:d8:35:33:
3f:41:fe:13:c4:a4:44:42:5d:de:2d:95:ac:55:c4:
ce:b6:60:5e:db:6e:62:7e:cb:7c:8d:71:bc:54:cd:
37:fd:46:7b:74:ff:f1:f0:5d:7e:65:0c:85:a7:b9:
1c:cd:15:49:07:58:99:75:41:22:43:38:87:7b:d8:
a4:3d:d5:21:3f:27:38:0f:5c:49:f8:61:03:10:1d:
0a:95:94:32:26:af:bf:22:ee:06:4c:bf:89:a5:67:
00:c2:9c:bc:96:d1:a3:49:3b:44:4e:39:86:57:a3:
77:60:a8:a9:c9:92:dd:fe:08:43:89:b0:01:f7:67:
cb:20:56:27:d6:7d:4a:bf:4e:a2:ba:c1:b6:7e:70:
aa:4b:91:df:7d:f0:67:75:f6:c5:10:f0:5e:c0:65:
9e:7b:7c:08:21:76:9c:8b:1c:9e:73:eb:70:a2:8a:
a8:cb:6e:df:6c:e0:3e:40:00:94:26:09:34:58:22:
b0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:ED:FD:09:67:4C:08:69:EB:36:A5:24:B8:9A:E2:F1:CF:C4:57:E8
X509v3 Authority Key Identifier:
keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6e:31:d3:c0:b9:e0:e1:97:f0:b9:e9:a4:da:c6:a8:22:99:
b5:0a:ef:03:08:4d:df:66:02:87:06:1f:d3:12:d3:88:61:2b:
7c:90:ca:3f:8b:3c:1c:73:48:a3:1f:63:45:66:47:e9:74:ed:
1b:22:93:28:12:e1:a4:6c:30:a8:a1:4f:54:26:00:80:9f:e1:
c2:a1:c0:0c:ad:46:14:1f:58:8a:1c:ee:f0:16:27:0a:6e:fe:
46:79:1a:4b:32:74:b9:4d:ee:0a:d1:49:2d:b5:31:c8:f3:c9:
ff:e9:db:a6:19:7e:1a:5b:c5:ed:52:7d:af:e0:5b:a5:f3:ef:
d1:bd:09:fa:24:2c:82:55:be:5f:90:91:6b:a6:04:4e:85:ce:
91:27:5d:b2:33:ab:3a:b6:62:33:fe:0c:fc:e9:88:48:40:11:
c2:6b:95:56:e0:b5:a3:6a:16:60:48:24:07:e8:3e:77:fd:f6:
04:23:1c:d0:34:6b:b5:be:12:a3:11:b1:77:af:e3:f6:6e:c8:
a3:89:1a:3c:40:8d:3a:ea:63:04:dd:a7:10:41:f7:aa:5b:98:
86:91:17:69:97:d3:fb:b0:fd:76:56:50:76:74:89:9a:5f:b5:
df:3f:49:b9:0f:4a:7c:1d:5c:b0:d3:84:b3:11:26:42:b5:89:
c5:e8:dd:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kU96U8it77U/elBdmwKVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODQzYjU3ZDBhZmNjMTEyZmUzODk2NjhiZjY3NWQ4MGQ4
MjIzZGEwHhcNMjUwNTEwMDUwMDUyWhcNMjUwNTExMDUwMDUyWjAzMTEwLwYDVQQD
Eyg0OWVkZmQwOTY3NGMwODY5ZWIzNmE1MjRiODlhZTJmMWNmYzQ1N2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/kWs017utJ7YtYb4ndQc2Ri54/z
xyrCrEI6PXgA00wHHF0MkXCBDuENsWPGCj6d3LXsw6zyhgUuYdZutwFaVl0eMmX6
heTYNTM/Qf4TxKREQl3eLZWsVcTOtmBe225ifst8jXG8VM03/UZ7dP/x8F1+ZQyF
p7kczRVJB1iZdUEiQziHe9ikPdUhPyc4D1xJ+GEDEB0KlZQyJq+/Iu4GTL+JpWcA
wpy8ltGjSTtETjmGV6N3YKipyZLd/ghDibAB92fLIFYn1n1Kv06iusG2fnCqS5Hf
ffBndfbFEPBewGWee3wIIXacixyec+twooqoy27fbOA+QACUJgk0WCKwoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnt/QlnTAhp6zalJLia4vHPxFfoMB8GA1UdIwQY
MBaAFI2EO1fQr8wRL+OJZov2ddgNgiPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallRN1Y5Q3Z6QkV2NDRsbWlfWjEyQTJDSTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xYWMyNzEtNmJlOS00YTE0LTg2MTYt
NDY1YTMzM2FiNDQ0LzEvallRN1Y5Q3Z6QkV2NDRsbWlfWjEyQTJDSTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xYWMyNzEtNmJlOS00YTE0LTg2MTYtNDY1YTMzM2FiNDQ0
LzEvallRN1Y5Q3Z6QkV2NDRsbWlfWjEyQTJDSTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGW4x08C5
4OGX8LnppNrGqCKZtQrvAwhN32YChwYf0xLTiGErfJDKP4s8HHNIox9jRWZH6XTt
GyKTKBLhpGwwqKFPVCYAgJ/hwqHADK1GFB9Yihzu8BYnCm7+RnkaSzJ0uU3uCtFJ
LbUxyPPJ/+nbphl+GlvF7VJ9r+BbpfPv0b0J+iQsglW+X5CRa6YEToXOkSddsjOr
OrZiM/4M/OmISEARwmuVVuC1o2oWYEgkB+g+d/32BCMc0DRrtb4SoxGxd6/j9m7I
o4kaPECNOupjBN2nEEH3qluYhpEXaZfT+7D9dlZQdnSJml+13z9JuQ9KfB1csNOE
sxEmQrWJxejdkA==
-----END CERTIFICATE-----
Generated at Sat May 10 13:51:12 2025 by rpki-client