Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier: 39T2aD2KNZhbIMHtZsRv763NOkbuO+ODyALLBcF6OHg=
Subject key identifier: BC:59:81:98:2B:94:BB:1A:3A:5C:94:00:DA:6D:65:7B:B9:60:BC:37
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 0196CC857C4909D38380BF24C7959A49F86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number: 0FA0
Signing time: Wed 14 May 2025 02:00:22 +0000
Manifest this update: Wed 14 May 2025 02:00:22 +0000
Manifest next update: Thu 15 May 2025 02:00:22 +0000
Files and hashes: 1: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: 6VC5x7LYMuNiEljQLfn+SyTf6JXtOpCziL0a2NMRIFw=)
2: YmG5FcsW3S43XyijT62zmWMd610.roa (hash: Sh1sRBIDqrknsDPBNOeRI3CSuT41xnHIPduRy76n3aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:7c:49:09:d3:83:80:bf:24:c7:95:9a:49:f8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: May 14 02:00:22 2025 GMT
Not After : May 15 02:00:22 2025 GMT
Subject: CN=bc5981982b94bb1a3a5c9400da6d657bb960bc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:82:9d:49:a7:70:13:3d:96:38:7d:ee:32:
4b:c2:59:c4:98:db:59:f5:e9:11:f1:a8:46:48:82:
b0:61:a8:21:d5:17:ff:5e:8a:9a:4c:b7:0e:fc:e1:
25:89:ae:f3:ee:b9:6a:22:b6:66:d0:3b:5c:9c:7f:
0c:9e:3d:cc:2f:60:97:26:a7:59:c5:bc:f8:5d:17:
ef:f7:8b:90:fc:47:8a:a8:0e:d3:4c:d5:03:fa:c2:
bd:a1:f9:af:07:ea:3f:8e:c9:8d:29:9e:4b:a4:64:
ad:e8:ed:f9:e8:39:26:01:6f:07:43:5f:59:50:2c:
6f:8a:11:df:78:ed:62:75:a8:df:12:43:99:25:ef:
03:de:ee:60:32:07:fe:fb:10:73:65:c5:b2:d6:5b:
c9:86:1e:f8:63:78:ab:bc:d9:1d:0e:10:f7:bb:06:
fe:6b:f0:1a:9a:b4:29:55:6f:ac:e2:fd:3d:a2:05:
4a:b7:ad:93:a4:fc:bb:a2:68:f3:ba:5f:08:8f:74:
f8:3c:65:65:89:aa:4f:6f:e0:27:dd:b2:86:c5:37:
22:52:b7:39:89:ad:62:a4:ae:70:9d:76:a3:06:e0:
d3:7b:b7:03:c3:24:88:32:45:90:81:df:2a:2c:54:
9a:fa:e2:2a:4a:7e:27:aa:9b:c8:dd:32:03:bb:a6:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:59:81:98:2B:94:BB:1A:3A:5C:94:00:DA:6D:65:7B:B9:60:BC:37
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d4:cc:69:09:90:3d:b5:39:91:86:6f:f7:34:33:f1:be:a6:
ae:23:1f:19:de:b2:37:6a:13:98:49:ce:17:b0:c0:03:4d:eb:
1a:1e:88:6a:cf:5f:96:d5:ad:33:12:37:54:89:85:4c:51:d1:
c3:dc:3d:53:f3:61:f2:f9:b4:f8:7e:9e:bf:6b:a5:7b:fb:1f:
1b:92:f7:35:30:cd:99:82:d4:80:c1:62:0b:f9:f5:6b:bd:6b:
bc:79:9f:05:3a:6e:08:01:8e:f3:c3:d5:0d:ed:da:f1:2c:25:
47:14:49:c1:b9:f9:89:50:bf:1a:e0:d2:69:f9:f8:98:01:cb:
88:18:64:b7:fb:1e:7c:0b:65:f8:fb:ef:4b:e6:bc:25:74:cc:
4e:03:82:f2:6a:bb:91:e5:6f:94:90:1f:ea:c7:8f:41:32:3f:
31:14:37:98:db:f4:95:e8:ff:98:71:1f:de:78:5d:c9:16:f7:
c7:b5:5f:9a:28:da:9a:3b:59:e8:a2:92:c8:71:1a:05:e2:7e:
b7:f8:ed:32:0e:8d:a9:ec:fe:e6:d9:47:12:e8:8d:03:6d:1e:
de:46:9f:99:6c:2c:32:51:73:16:1b:41:0b:02:34:2c:d2:10:
96:d6:f5:23:4e:c4:ea:e5:4e:71:bf:95:11:ac:49:72:8e:2e:
81:72:62:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbMhXxJCdODgL8kx5WaSfhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YjI0ZmQ2NmVmZTZkYzVjM2FhYjJlMmU2NTFhNGUyMDdm
ZTYyZTcwHhcNMjUwNTE0MDIwMDIyWhcNMjUwNTE1MDIwMDIyWjAzMTEwLwYDVQQD
EyhiYzU5ODE5ODJiOTRiYjFhM2E1Yzk0MDBkYTZkNjU3YmI5NjBiYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWGCnUmncBM9ljh97jJLwlnEmNtZ
9ekR8ahGSIKwYagh1Rf/XoqaTLcO/OElia7z7rlqIrZm0DtcnH8Mnj3ML2CXJqdZ
xbz4XRfv94uQ/EeKqA7TTNUD+sK9ofmvB+o/jsmNKZ5LpGSt6O356DkmAW8HQ19Z
UCxvihHfeO1idajfEkOZJe8D3u5gMgf++xBzZcWy1lvJhh74Y3irvNkdDhD3uwb+
a/AamrQpVW+s4v09ogVKt62TpPy7omjzul8Ij3T4PGVliapPb+An3bKGxTciUrc5
ia1ipK5wnXajBuDTe7cDwySIMkWQgd8qLFSa+uIqSn4nqpvI3TIDu6YSmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxZgZgrlLsaOlyUANptZXu5YLw3MB8GA1UdIwQY
MBaAFCeyT9Zu/m3Fw6qy4uZRpOIH/mLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAt
Mzk0ZjUwZDRiYTM4LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAtMzk0ZjUwZDRiYTM4
LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldTMaQmQ
PbU5kYZv9zQz8b6mriMfGd6yN2oTmEnOF7DAA03rGh6Ias9fltWtMxI3VImFTFHR
w9w9U/Nh8vm0+H6ev2ule/sfG5L3NTDNmYLUgMFiC/n1a71rvHmfBTpuCAGO88PV
De3a8SwlRxRJwbn5iVC/GuDSafn4mAHLiBhkt/sefAtl+PvvS+a8JXTMTgOC8mq7
keVvlJAf6sePQTI/MRQ3mNv0lej/mHEf3nhdyRb3x7VfmijamjtZ6KKSyHEaBeJ+
t/jtMg6Nqez+5tlHEuiNA20e3kafmWwsMlFzFhtBCwI0LNIQltb1I07E6uVOcb+V
EaxJco4ugXJiBg==
-----END CERTIFICATE-----
Generated at Wed May 14 09:16:20 2025 by rpki-client