Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier: TUv9Vmwh13hXn93CPXc2cHbhgXDzG/FSt/UN3meGtks=
Subject key identifier: A2:03:E2:D7:62:58:05:04:CC:B0:5B:67:87:79:05:36:D6:9E:FF:63
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 01969E9B2F35F35AD6076CACF88F2B5A060F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 04:01:32 +0000
Manifest this update: Mon 05 May 2025 04:01:32 +0000
Manifest next update: Tue 06 May 2025 04:01:32 +0000
Files and hashes: 1: 7Ih44HEchM76fosssYsDhPW80DM.roa (hash: fUnotk/PUA4nwBmKa2OkgoRu1RIyYVBHFgrPwz0Fmwc=)
2: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: P481fRydhS578M84ZfbkAhM1jNjkVXEgnlehdusZaK4=)
3: tnLXZpAcdsupjiIll_iKlzExQoQ.roa (hash: mDoarqNRra8hpVT2LOO1TVGYi/0LvJxSxAQ/O0wAR7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9b:2f:35:f3:5a:d6:07:6c:ac:f8:8f:2b:5a:06:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: May 5 04:01:32 2025 GMT
Not After : May 6 04:01:32 2025 GMT
Subject: CN=a203e2d762580504ccb05b6787790536d69eff63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:ab:5b:11:fe:95:b9:cc:45:14:3a:df:6f:
74:82:98:3a:34:18:c5:46:ec:88:3c:38:72:15:1f:
f5:0a:40:a4:dd:73:18:eb:28:b1:de:5a:05:52:b6:
4b:a7:9f:78:64:73:c3:4f:7c:85:b9:a2:33:38:d0:
ad:ae:7c:1d:43:0a:1b:f7:6c:c2:92:60:27:2f:a0:
64:7f:f0:08:bc:0b:65:35:6a:d1:6b:37:72:0a:ec:
86:35:b4:13:4a:31:96:60:6a:a8:af:7b:7c:88:e8:
49:8a:ce:b4:a6:c0:f4:92:bd:b6:9b:d7:8c:5d:f1:
73:f8:4e:06:04:a8:82:ef:45:ad:1e:96:c0:3a:7a:
c3:2d:cc:a0:85:8c:f3:ce:dd:4e:17:dd:c5:10:f7:
47:83:5a:5e:5e:e3:a2:f3:50:dc:6d:f1:be:10:e3:
f8:4a:b4:94:c9:2c:59:66:a7:0f:00:b4:91:a1:f2:
8f:91:0d:3c:e6:b5:a4:b0:ce:d1:3e:9c:ba:cc:aa:
40:c0:3c:bc:e4:9e:e5:af:ab:8a:10:d9:c5:3d:f7:
af:5a:d2:00:a2:b2:3d:05:76:7e:67:7e:e0:52:48:
72:5c:4b:3a:6b:50:a3:4c:c5:a8:69:90:d2:48:2e:
f8:58:fe:05:63:f0:c3:e8:be:31:c8:af:cc:f8:34:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:E2:D7:62:58:05:04:CC:B0:5B:67:87:79:05:36:D6:9E:FF:63
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a3:de:e0:de:8b:07:98:b0:80:ba:3c:e9:c5:b7:a8:67:78:
a3:96:e0:9f:c6:54:33:dd:fb:57:89:7c:9b:49:de:33:9a:a3:
83:5f:79:c6:f2:25:23:e9:cf:47:8e:6f:a0:15:7b:11:fc:c1:
d0:19:3f:88:35:66:f6:db:27:e7:49:45:6f:9e:5e:93:0e:d3:
6b:b7:e4:a5:7b:a7:65:69:38:44:47:eb:a9:c7:59:c1:dd:fb:
3a:42:38:f0:fb:26:5e:d3:3c:44:0b:16:e7:84:5f:98:b8:f4:
50:1e:79:0e:2e:d3:a1:1c:6c:41:cf:96:4a:16:c9:f5:6c:53:
0a:64:99:52:16:5b:76:b4:28:fd:7c:71:b6:a9:e2:50:97:f5:
4f:c2:ab:b5:a4:8d:22:01:7f:48:08:3c:ce:46:d5:30:5a:b7:
5b:be:7e:35:50:95:9d:d8:71:46:52:c9:c5:5d:22:a9:ab:9e:
4f:d0:c8:31:56:2a:ef:d5:30:08:d8:54:b0:8d:e9:38:01:b6:
b8:df:a4:aa:cf:fa:c0:1e:59:8d:9e:6f:8d:c3:08:79:f3:2b:
08:ac:33:cc:b3:bb:f2:a1:b4:5d:93:51:e4:01:69:37:99:41:
77:6c:96:06:19:cc:38:44:6d:cf:d9:8b:19:50:6b:5b:38:55:
26:84:79:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemy8181rWB2ys+I8rWgYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzAzY2MyYWY4Mzg3ODk2NTI3NzFjMzQ1ZTA3ZGYzZTgw
ZDU0NGYwHhcNMjUwNTA1MDQwMTMyWhcNMjUwNTA2MDQwMTMyWjAzMTEwLwYDVQQD
EyhhMjAzZTJkNzYyNTgwNTA0Y2NiMDViNjc4Nzc5MDUzNmQ2OWVmZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4qrWxH+lbnMRRQ63290gpg6NBjF
RuyIPDhyFR/1CkCk3XMY6yix3loFUrZLp594ZHPDT3yFuaIzONCtrnwdQwob92zC
kmAnL6Bkf/AIvAtlNWrRazdyCuyGNbQTSjGWYGqor3t8iOhJis60psD0kr22m9eM
XfFz+E4GBKiC70WtHpbAOnrDLcyghYzzzt1OF93FEPdHg1peXuOi81DcbfG+EOP4
SrSUySxZZqcPALSRofKPkQ085rWksM7RPpy6zKpAwDy85J7lr6uKENnFPfevWtIA
orI9BXZ+Z37gUkhyXEs6a1CjTMWoaZDSSC74WP4FY/DD6L4xyK/M+DQvUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKID4tdiWAUEzLBbZ4d5BTbWnv9jMB8GA1UdIwQY
MBaAFI4wPMKvg4eJZSdxw0XgffPoDVRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85ZDFhNGItNTA5YS00OTEzLWI5Mzct
ZDBhZGIxMWRlZDM0LzEvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85ZDFhNGItNTA5YS00OTEzLWI5MzctZDBhZGIxMWRlZDM0
LzEvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaPe4N6L
B5iwgLo86cW3qGd4o5bgn8ZUM937V4l8m0neM5qjg195xvIlI+nPR45voBV7EfzB
0Bk/iDVm9tsn50lFb55ekw7Ta7fkpXunZWk4REfrqcdZwd37OkI48PsmXtM8RAsW
54RfmLj0UB55Di7ToRxsQc+WShbJ9WxTCmSZUhZbdrQo/XxxtqniUJf1T8KrtaSN
IgF/SAg8zkbVMFq3W75+NVCVndhxRlLJxV0iqaueT9DIMVYq79UwCNhUsI3pOAG2
uN+kqs/6wB5ZjZ5vjcMIefMrCKwzzLO78qG0XZNR5AFpN5lBd2yWBhnMOERtz9mL
GVBrWzhVJoR5NA==
-----END CERTIFICATE-----
Generated at Mon May 5 10:00:14 2025 by rpki-client