Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: E1onYr79oyDw657eD/eG0UQ2CCtcBSxfI90bN6gao9U=
Subject key identifier: 1C:48:C1:39:46:61:96:42:C7:F0:2B:D9:8A:EA:15:EC:3B:D9:67:52
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 01969F07E84CA49BDF6A45F43B024DFEC556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 06:00:17 +0000
Manifest this update: Mon 05 May 2025 06:00:17 +0000
Manifest next update: Tue 06 May 2025 06:00:17 +0000
Files and hashes: 1: IjluqbVdM5zm7wvPSgQZOmXQjag.roa (hash: QKwqMUOeWOJatNvuP/XT/XSpsSd9RiOppxhqX3P9KPo=)
2: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: if+wIGpRyskXgV3/wVTawbzyhMcI4OzT46QeudFgOn8=)
3: YY-hoyGXDDo8SiePezL_ZO2nNOw.roa (hash: A3j7uoljgavovkzwgqN6nFVhnXRD4UmTm39D3QvLFO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:e8:4c:a4:9b:df:6a:45:f4:3b:02:4d:fe:c5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: May 5 06:00:17 2025 GMT
Not After : May 6 06:00:17 2025 GMT
Subject: CN=1c48c13946619642c7f02bd98aea15ec3bd96752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:a1:6a:d9:15:ca:8f:19:f6:dc:a3:bd:ae:
cf:c5:8d:c0:48:6f:1d:b7:33:0e:93:1e:68:9b:6f:
3c:e2:e7:ec:73:94:88:ad:4e:b1:84:1d:27:65:b4:
82:78:c9:b3:45:6e:95:8d:37:46:7d:99:de:f1:f5:
80:12:d4:22:01:e3:b6:cc:ec:48:ed:00:f6:64:c0:
fe:70:c3:cd:1e:32:c6:80:41:3f:64:f4:da:d2:8f:
05:9d:69:cb:da:7e:51:07:11:c6:be:d3:43:18:b4:
7e:00:f0:ff:fd:87:88:a9:23:a8:f3:ed:d7:30:10:
fa:ab:73:cb:1b:22:3f:e8:2f:57:4c:ad:eb:ab:68:
0c:f3:6f:6c:27:a3:8f:4f:53:ed:3f:85:86:97:76:
7c:a0:60:0a:43:73:04:30:b9:de:76:19:e3:b5:1c:
4e:51:be:9c:43:4b:a6:e6:c3:80:bf:d7:51:92:75:
9c:5c:06:8b:ac:e6:43:f1:2c:40:e5:d1:4a:7d:c0:
1f:37:46:6b:26:53:fa:90:2d:5a:55:10:39:84:be:
78:98:3f:58:42:fb:3c:54:0b:6a:04:ba:1e:26:ec:
9b:d2:8e:13:d9:16:9d:6d:8e:ab:49:86:c9:5d:af:
e7:aa:f6:77:21:90:3d:44:cf:cf:ae:f0:58:8d:81:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:48:C1:39:46:61:96:42:C7:F0:2B:D9:8A:EA:15:EC:3B:D9:67:52
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a3:c0:f9:dc:2e:d1:96:6f:9a:08:64:86:45:6f:b9:a3:f9:
23:70:1d:f2:c6:1c:8a:59:28:97:76:df:99:60:ae:6a:49:16:
00:f2:81:57:9f:80:29:1e:08:a2:a1:8a:77:8c:f7:04:0e:cf:
8b:ac:d2:4f:ee:bb:2f:fb:4b:b6:d6:90:75:78:7a:93:f2:02:
5a:1d:1e:e4:cc:f1:e8:25:ba:b1:10:f5:42:e0:cf:29:1e:9e:
24:f4:f6:9b:c7:67:8c:f0:af:29:5c:25:07:c5:c8:31:32:15:
f9:a4:de:8f:8e:d7:5e:59:42:52:a8:29:90:dd:75:2c:b0:94:
9f:48:3c:91:d6:97:a8:15:b8:40:1c:6b:5e:9f:32:1f:71:da:
75:a1:9f:2b:30:63:cc:b6:94:89:d3:38:2b:2c:81:15:77:73:
44:94:c4:7b:b0:f1:58:54:52:e1:3d:31:d8:29:4e:5c:e9:54:
ba:fa:db:e1:f2:b8:d7:30:58:2d:52:66:84:fc:d7:0a:bf:b2:
88:95:3f:b7:7b:da:61:9c:eb:7e:37:bd:7a:87:8b:b9:d3:49:
02:3d:7f:c7:30:5c:7b:60:3b:7a:74:45:33:91:ca:b1:bd:cb:
76:54:67:c4:84:96:a5:2b:df:ae:71:6c:e7:54:09:d7:47:e1:
57:d3:64:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafB+hMpJvfakX0OwJN/sVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTBmN2JiYmU0MDMxYTI0ZWYxYjlkYjE5NmFhYjA2NDJl
ODRhMDYwHhcNMjUwNTA1MDYwMDE3WhcNMjUwNTA2MDYwMDE3WjAzMTEwLwYDVQQD
EygxYzQ4YzEzOTQ2NjE5NjQyYzdmMDJiZDk4YWVhMTVlYzNiZDk2NzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhyhatkVyo8Z9tyjva7PxY3ASG8d
tzMOkx5om2884ufsc5SIrU6xhB0nZbSCeMmzRW6VjTdGfZne8fWAEtQiAeO2zOxI
7QD2ZMD+cMPNHjLGgEE/ZPTa0o8FnWnL2n5RBxHGvtNDGLR+APD//YeIqSOo8+3X
MBD6q3PLGyI/6C9XTK3rq2gM829sJ6OPT1PtP4WGl3Z8oGAKQ3MEMLnedhnjtRxO
Ub6cQ0um5sOAv9dRknWcXAaLrOZD8SxA5dFKfcAfN0ZrJlP6kC1aVRA5hL54mD9Y
Qvs8VAtqBLoeJuyb0o4T2RadbY6rSYbJXa/nqvZ3IZA9RM/PrvBYjYE71wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxIwTlGYZZCx/Ar2YrqFew72WdSMB8GA1UdIwQY
MBaAFCfg97u+QDGiTvG52xlqqwZC6EoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYt
MzQ2YTNlYzE4NjhjLzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYtMzQ2YTNlYzE4Njhj
LzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6PA+dwu
0ZZvmghkhkVvuaP5I3Ad8sYcilkol3bfmWCuakkWAPKBV5+AKR4IoqGKd4z3BA7P
i6zST+67L/tLttaQdXh6k/ICWh0e5Mzx6CW6sRD1QuDPKR6eJPT2m8dnjPCvKVwl
B8XIMTIV+aTej47XXllCUqgpkN11LLCUn0g8kdaXqBW4QBxrXp8yH3HadaGfKzBj
zLaUidM4KyyBFXdzRJTEe7DxWFRS4T0x2ClOXOlUuvrb4fK41zBYLVJmhPzXCr+y
iJU/t3vaYZzrfje9eoeLudNJAj1/xzBce2A7enRFM5HKsb3LdlRnxISWpSvfrnFs
51QJ10fhV9NkWg==
-----END CERTIFICATE-----
Generated at Mon May 5 11:48:38 2025 by rpki-client