Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier: E0nuJLMSDIBTVecz0qTRg2BLOZss7Jwy9nRf54lBZF8=
Subject key identifier: 4F:BE:45:A0:FD:AE:D7:3D:A5:48:76:6F:0A:0E:F3:CE:51:F1:5B:8C
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 01969F07DE93CEAE976DBF1778A40A64B38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number: 09FE
Signing time: Mon 05 May 2025 06:00:15 +0000
Manifest this update: Mon 05 May 2025 06:00:15 +0000
Manifest next update: Tue 06 May 2025 06:00:15 +0000
Files and hashes: 1: 2PPfPp92gP7ZN1XYTs05NdeNFe0.roa (hash: VL63d4eCMXJ85KSNT/DG966gx4kgp15bsn+i+OHsgV4=)
2: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: LeRSxYO036hAMS5HsOm7JeB1mpEB5OwGwrrVsgC2FrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:de:93:ce:ae:97:6d:bf:17:78:a4:0a:64:b3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: May 5 06:00:15 2025 GMT
Not After : May 6 06:00:15 2025 GMT
Subject: CN=4fbe45a0fdaed73da548766f0a0ef3ce51f15b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:07:3a:d0:0a:64:9f:0e:5c:d2:bd:bf:61:
ed:be:af:ee:86:32:08:d2:61:a5:89:70:08:f6:d9:
79:ed:2f:19:4e:0d:2a:c2:3f:f5:f1:d3:57:10:d6:
2f:f7:dd:44:e7:00:37:09:10:cb:cf:f9:5f:19:df:
c2:3f:ab:9e:9f:0a:3e:ad:c1:00:bd:1b:9d:a9:38:
18:88:15:81:16:42:d0:ad:61:70:f4:d6:ef:65:5b:
a3:9e:f1:cc:d3:62:21:6e:be:6a:87:60:68:ba:94:
3b:83:f9:a9:b6:71:b1:0d:54:6f:23:37:59:05:16:
d1:ea:a5:38:21:d5:bd:32:d9:e7:06:96:67:79:80:
25:b9:9a:6b:08:b7:f0:63:29:21:e6:64:2b:41:76:
81:a5:97:0b:d3:09:bc:d5:22:be:21:9e:df:72:f1:
e9:57:20:46:d7:f9:84:15:b0:8e:34:0a:7d:17:70:
5b:ae:01:dc:1b:c5:59:4d:1d:06:07:e8:ec:54:43:
6c:a6:c0:0b:4d:75:31:dd:fa:d0:cc:ce:02:0d:ed:
e2:e1:38:03:55:44:be:35:c1:f2:26:6f:56:5d:41:
cc:85:5b:44:de:88:bb:0f:6b:98:74:e2:2f:9b:4d:
7b:ff:51:0a:1b:cc:44:bb:ac:ba:8b:a3:0e:1e:27:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BE:45:A0:FD:AE:D7:3D:A5:48:76:6F:0A:0E:F3:CE:51:F1:5B:8C
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cd:65:5f:13:a9:3f:54:c3:64:32:da:48:f5:97:ad:ec:e7:
ee:bd:5b:13:05:a9:4e:28:5a:38:d6:47:86:87:d5:07:99:97:
1d:17:6e:4a:21:38:14:50:3f:86:05:ff:d7:5b:4a:b0:74:92:
f1:08:f5:e5:e0:30:2c:06:3c:0f:7f:93:a5:38:93:ac:4f:55:
7c:00:8f:37:d3:4c:42:52:5e:d6:1b:9b:cc:53:06:7a:7f:7a:
ee:3f:25:38:a4:59:bb:70:ef:68:dd:79:1d:19:d7:c5:03:c6:
6a:9f:bb:3e:2e:b7:6e:10:d9:ee:8f:c3:ed:c6:fe:a6:41:71:
e6:ed:03:4d:7f:1f:f3:17:35:35:da:77:63:48:f0:c0:15:4b:
90:a7:27:38:32:b6:22:f1:9c:d2:fb:fa:8e:08:8d:f4:14:20:
ca:7f:30:39:fc:2a:16:b0:4a:77:8c:76:01:49:a0:5c:80:d9:
c0:a5:71:68:56:e5:51:86:91:e9:18:9c:77:ff:8d:5b:e5:14:
f7:4e:4f:c7:a1:2a:1f:5d:e3:83:62:b4:2b:41:9a:9f:51:da:
40:07:2c:f6:6d:88:53:d6:ff:40:b5:5c:1d:86:78:d4:42:3a:
56:c9:0e:ec:81:94:01:9e:19:b2:20:59:6a:f6:26:97:3b:b5:
7d:a4:c5:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafB96Tzq6Xbb8XeKQKZLOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NTE2ZDIwZWJlZmQxMmYwNzJkNDEzYzRkMjYwNmJkYjI1
ODY5MWEwHhcNMjUwNTA1MDYwMDE1WhcNMjUwNTA2MDYwMDE1WjAzMTEwLwYDVQQD
Eyg0ZmJlNDVhMGZkYWVkNzNkYTU0ODc2NmYwYTBlZjNjZTUxZjE1YjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t0HOtAKZJ8OXNK9v2Htvq/uhjII
0mGliXAI9tl57S8ZTg0qwj/18dNXENYv991E5wA3CRDLz/lfGd/CP6uenwo+rcEA
vRudqTgYiBWBFkLQrWFw9NbvZVujnvHM02Ihbr5qh2BoupQ7g/mptnGxDVRvIzdZ
BRbR6qU4IdW9MtnnBpZneYAluZprCLfwYykh5mQrQXaBpZcL0wm81SK+IZ7fcvHp
VyBG1/mEFbCONAp9F3BbrgHcG8VZTR0GB+jsVENspsALTXUx3frQzM4CDe3i4TgD
VUS+NcHyJm9WXUHMhVtE3oi7D2uYdOIvm017/1EKG8xEu6y6i6MOHifwZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE++RaD9rtc9pUh2bwoO885R8VuMMB8GA1UdIwQY
MBaAFCdRbSDr79EvBy1BPE0mBr2yWGkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYt
NzkwMjQ0NTA4ZGY0LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYtNzkwMjQ0NTA4ZGY0
LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVM1lXxOp
P1TDZDLaSPWXrezn7r1bEwWpTihaONZHhofVB5mXHRduSiE4FFA/hgX/11tKsHSS
8Qj15eAwLAY8D3+TpTiTrE9VfACPN9NMQlJe1hubzFMGen967j8lOKRZu3DvaN15
HRnXxQPGap+7Pi63bhDZ7o/D7cb+pkFx5u0DTX8f8xc1Ndp3Y0jwwBVLkKcnODK2
IvGc0vv6jgiN9BQgyn8wOfwqFrBKd4x2AUmgXIDZwKVxaFblUYaR6Ricd/+NW+UU
905Px6EqH13jg2K0K0Gan1HaQAcs9m2IU9b/QLVcHYZ41EI6VskO7IGUAZ4ZsiBZ
avYmlzu1faTF3A==
-----END CERTIFICATE-----
Generated at Mon May 5 15:47:11 2025 by rpki-client