Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File: jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier: JwfrhLSxHtT+KuN0FtVUSmilVlHocVVsTuKbU1TShhw=
Subject key identifier: EF:90:5A:D4:69:BF:5F:07:DB:D2:9B:67:6B:4E:85:E8:AE:C3:24:48
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial: 0196C2A704D1C5F89D11FC39BF7A3A2A879C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number: 11C9
Signing time: Mon 12 May 2025 04:00:47 +0000
Manifest this update: Mon 12 May 2025 04:00:47 +0000
Manifest next update: Tue 13 May 2025 04:00:47 +0000
Files and hashes: 1: Af23iU2cOAjf5HW9zn9fh70-n50.roa (hash: KFEfbZsYVTLnLOFsm4vXZoNvNqznJDGo1YKGYJ8NDjc=)
2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: kuWUYLNF2x2h3mBfoNxfGsjPc+LOH03xJJXcuGIXaMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:04:d1:c5:f8:9d:11:fc:39:bf:7a:3a:2a:87:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Validity
Not Before: May 12 04:00:47 2025 GMT
Not After : May 13 04:00:47 2025 GMT
Subject: CN=ef905ad469bf5f07dbd29b676b4e85e8aec32448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:27:29:b1:f1:93:0e:e1:64:b8:fa:13:2e:
8e:91:d5:ea:89:59:5c:1c:ce:5f:34:38:83:63:2a:
1d:a1:6f:08:9d:4a:36:b8:5c:f8:77:8d:98:9b:37:
8f:ab:a9:4d:96:ef:35:e9:95:ff:98:97:e6:f4:e4:
cb:2e:87:b5:90:16:96:fa:8f:30:2a:90:fc:1a:f8:
84:57:e7:57:e6:97:e9:55:8c:ad:99:4d:47:51:f2:
3e:98:35:c0:e2:0f:36:92:53:b8:de:6c:ba:59:8b:
b2:3b:af:cd:bc:cf:15:b0:7c:18:7f:15:0d:d7:e1:
34:8d:0b:b1:10:b0:cb:62:f6:0f:5a:77:82:e7:5b:
2b:f0:3b:13:4b:b7:3e:1c:bf:68:6e:02:a6:e2:5d:
8f:b5:73:79:10:3f:37:67:0a:76:93:37:fa:3a:81:
ed:80:f5:12:ec:a6:93:f3:41:b1:a3:dd:64:c7:cb:
a9:cf:a9:04:25:18:8b:59:cb:b8:5c:37:c7:ba:1f:
fe:0b:66:ef:e6:8d:37:04:3c:5d:66:8c:2c:39:f4:
93:06:27:1e:94:06:d4:5c:80:4a:12:b6:ca:cd:69:
54:06:6e:1f:6e:17:a1:18:f6:ab:08:1e:12:c8:a9:
38:b7:06:95:39:4a:84:47:05:2e:b3:2c:df:80:3c:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:90:5A:D4:69:BF:5F:07:DB:D2:9B:67:6B:4E:85:E8:AE:C3:24:48
X509v3 Authority Key Identifier:
keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c9:17:e9:f8:23:a2:93:08:7c:17:cd:31:2e:e4:e5:24:19:
a6:73:c6:71:46:44:83:6f:df:91:1e:9c:c7:9c:60:ac:04:c0:
bf:18:2e:4d:54:98:6a:f5:c4:bd:c1:15:56:c0:a4:ab:7c:cf:
8e:46:bc:d4:e5:17:e4:01:5f:50:a9:29:cd:c8:c5:88:12:ab:
01:40:86:c8:66:ff:00:32:1c:94:b6:63:70:52:56:9a:e4:f8:
f3:c7:39:b9:55:05:20:41:09:1f:f0:27:95:8b:0b:e6:b1:fa:
61:61:61:1b:bd:c6:f6:0b:79:38:c8:d7:1d:79:e8:56:b3:c3:
fa:67:0a:70:3d:a2:fa:c6:ab:66:ca:7d:a1:ae:a8:70:d9:a7:
90:d8:a7:39:4a:db:31:14:e7:dd:a7:2a:c4:36:53:be:ec:55:
ad:49:c2:a9:4b:2e:e9:3d:99:4f:cb:31:ff:11:8b:a3:20:77:
11:6a:b2:e1:6c:5e:44:20:ce:8f:e6:fe:00:5d:62:7c:7b:fc:
9a:c2:eb:1f:0e:e5:05:ab:1a:fd:90:a2:27:f0:dc:43:50:a4:
74:e7:00:de:65:3c:1f:94:6b:7b:2d:24:65:40:4c:15:b9:fe:
96:b7:3d:12:9c:49:c3:85:d2:c7:f4:cf:d7:4e:95:20:03:28:
47:81:a4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCpwTRxfidEfw5v3o6KoecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzNkZGNlYWIxNTRiZGY2M2U3ODlmNDQ0MzQ4NGFkNTU0
ODY2NGMwHhcNMjUwNTEyMDQwMDQ3WhcNMjUwNTEzMDQwMDQ3WjAzMTEwLwYDVQQD
EyhlZjkwNWFkNDY5YmY1ZjA3ZGJkMjliNjc2YjRlODVlOGFlYzMyNDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7snKbHxkw7hZLj6Ey6OkdXqiVlc
HM5fNDiDYyodoW8InUo2uFz4d42YmzePq6lNlu816ZX/mJfm9OTLLoe1kBaW+o8w
KpD8GviEV+dX5pfpVYytmU1HUfI+mDXA4g82klO43my6WYuyO6/NvM8VsHwYfxUN
1+E0jQuxELDLYvYPWneC51sr8DsTS7c+HL9obgKm4l2PtXN5ED83Zwp2kzf6OoHt
gPUS7KaT80Gxo91kx8upz6kEJRiLWcu4XDfHuh/+C2bv5o03BDxdZowsOfSTBice
lAbUXIBKErbKzWlUBm4fbhehGParCB4SyKk4twaVOUqERwUusyzfgDypzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+QWtRpv18H29KbZ2tOheiuwyRIMB8GA1UdIwQY
MBaAFIwz3c6rFUvfY+eJ9EQ0hK1VSGZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzQ1MTYtMWI5NC00NWFiLWIxNjEt
ZjJiMGZkM2MzMTM3LzEvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jYzQ1MTYtMWI5NC00NWFiLWIxNjEtZjJiMGZkM2MzMTM3
LzEvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYckX6fgj
opMIfBfNMS7k5SQZpnPGcUZEg2/fkR6cx5xgrATAvxguTVSYavXEvcEVVsCkq3zP
jka81OUX5AFfUKkpzcjFiBKrAUCGyGb/ADIclLZjcFJWmuT488c5uVUFIEEJH/An
lYsL5rH6YWFhG73G9gt5OMjXHXnoVrPD+mcKcD2i+sarZsp9oa6ocNmnkNinOUrb
MRTn3acqxDZTvuxVrUnCqUsu6T2ZT8sx/xGLoyB3EWqy4WxeRCDOj+b+AF1ifHv8
msLrHw7lBasa/ZCiJ/DcQ1CkdOcA3mU8H5Rrey0kZUBMFbn+lrc9EpxJw4XSx/TP
106VIAMoR4Gk9g==
-----END CERTIFICATE-----
Generated at Mon May 12 13:23:57 2025 by rpki-client