Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier: 3jvdFLSH8GB9v6/kS5Ml2Zj2TNE0n65SctixVzsubzM=
Subject key identifier: 46:81:79:91:F1:EB:08:23:84:17:FD:45:16:F7:59:CA:06:F3:C7:A0
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial: 0196C5033DCCF43E5A5D75EC7CAA0066E9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 15:00:46 +0000
Manifest this update: Mon 12 May 2025 15:00:46 +0000
Manifest next update: Tue 13 May 2025 15:00:46 +0000
Files and hashes: 1: Gx-ly2juqLldMOF7Xn_MRXBNcbk.roa (hash: vl2kBJo+wEJWBn3iWXf8tuoZvKzL8W4USM3kT2sx3NA=)
2: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (hash: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=)
3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: SvxBv5eU7V4IJiOpJH1OzBABtEkriVD4w39yCRPsYPo=)
4: w-squKUM0pkBXWozorbDSe8zF0U.roa (hash: LdeqPdzvqZ0x54H5/mODQ0shRZ6NKgUzNLLxUs7yuRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:3d:cc:f4:3e:5a:5d:75:ec:7c:aa:00:66:e9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Validity
Not Before: May 12 15:00:46 2025 GMT
Not After : May 13 15:00:46 2025 GMT
Subject: CN=46817991f1eb08238417fd4516f759ca06f3c7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:77:ab:84:dd:78:86:a8:e0:8f:21:13:ed:
19:b3:25:96:ee:d3:d2:2c:a7:c7:bb:37:93:e9:ae:
ac:dd:b8:f3:2b:75:d4:76:bb:df:98:0e:73:9a:ef:
15:99:91:fc:a0:73:b1:7c:82:a1:8a:78:01:cc:9d:
18:a3:db:91:fa:61:96:ec:de:c4:de:a0:56:ea:f2:
ee:74:bc:c6:1f:f6:2a:2d:39:e2:06:f9:30:a9:dc:
c9:36:e4:6d:07:44:7b:fe:12:a0:c5:f2:c6:43:ad:
2b:e5:39:1a:6c:94:3c:a1:a1:3b:ea:e9:c2:7e:13:
22:c0:0d:00:62:8e:d4:25:47:ec:ec:59:bc:21:a1:
39:a5:3f:52:b6:fa:34:46:f8:e3:e0:82:a0:04:56:
03:5b:1d:62:b8:07:8b:66:ea:0a:e5:d3:15:15:de:
1c:98:7b:16:f3:62:8f:68:e7:d8:7a:d5:ec:a9:53:
d1:f5:ed:75:1b:60:cc:a6:32:f1:1d:02:82:84:9e:
07:60:4b:50:35:0d:06:e9:a8:25:83:e0:f1:30:14:
76:b1:b8:e3:91:22:b5:7a:7b:c6:ed:01:67:45:4f:
07:f2:40:c4:6e:9b:78:8a:2f:c6:7d:9f:db:fb:ef:
57:cb:7d:be:3d:ba:5c:78:c5:65:a4:45:38:71:58:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:81:79:91:F1:EB:08:23:84:17:FD:45:16:F7:59:CA:06:F3:C7:A0
X509v3 Authority Key Identifier:
keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bb:84:56:72:55:5a:01:ea:93:98:7f:95:9b:86:9a:c5:4d:
31:aa:02:d5:70:33:08:1a:78:2f:49:3a:c3:b1:8c:22:a3:9a:
2a:11:79:22:ff:49:cd:0c:43:b7:cb:e6:fe:44:6b:be:7c:9e:
a0:d5:72:a7:a5:62:11:af:0d:cc:32:11:81:35:d8:1f:2c:ad:
7c:5c:94:6f:0d:57:ac:3b:8f:6a:63:d9:4e:ff:db:37:1f:d4:
ce:92:97:ca:2a:34:3d:36:70:7e:0f:d9:36:5b:7d:fb:33:60:
46:8f:21:24:00:8f:1b:cd:1a:2f:79:02:68:f9:74:57:3d:f1:
60:51:10:27:b2:38:51:bb:a8:b8:6b:6c:00:ea:c8:82:35:6e:
95:bb:1b:d3:91:50:ff:89:78:f4:7b:31:00:8c:30:03:cb:ed:
fa:2b:68:1c:37:4f:af:7b:de:70:09:a9:5b:86:48:22:e0:d0:
6d:83:88:17:0b:d6:6e:5d:fc:62:86:8a:26:a2:50:4e:04:1c:
ae:8b:2b:6d:e2:7b:86:f9:2c:fe:2c:ec:74:7f:85:e3:fd:c6:
89:2a:83:9a:29:82:bc:d2:fa:5d:f2:33:a0:7c:69:a0:4e:87:
7a:45:6a:6b:b8:31:fe:bd:48:48:15:b2:4b:46:b9:73:45:8c:
5c:32:7b:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFAz3M9D5aXXXsfKoAZumzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2
OWY4YjQwHhcNMjUwNTEyMTUwMDQ2WhcNMjUwNTEzMTUwMDQ2WjAzMTEwLwYDVQQD
Eyg0NjgxNzk5MWYxZWIwODIzODQxN2ZkNDUxNmY3NTljYTA2ZjNjN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv53q4TdeIao4I8hE+0ZsyWW7tPS
LKfHuzeT6a6s3bjzK3XUdrvfmA5zmu8VmZH8oHOxfIKhingBzJ0Yo9uR+mGW7N7E
3qBW6vLudLzGH/YqLTniBvkwqdzJNuRtB0R7/hKgxfLGQ60r5TkabJQ8oaE76unC
fhMiwA0AYo7UJUfs7Fm8IaE5pT9Stvo0Rvjj4IKgBFYDWx1iuAeLZuoK5dMVFd4c
mHsW82KPaOfYetXsqVPR9e11G2DMpjLxHQKChJ4HYEtQNQ0G6aglg+DxMBR2sbjj
kSK1envG7QFnRU8H8kDEbpt4ii/GfZ/b++9Xy32+PbpceMVlpEU4cVhCOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaBeZHx6wgjhBf9RRb3WcoG88egMB8GA1UdIwQY
MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt
ZDg2YjRjYWVkMTFkLzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk
LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7uEVnJV
WgHqk5h/lZuGmsVNMaoC1XAzCBp4L0k6w7GMIqOaKhF5Iv9JzQxDt8vm/kRrvnye
oNVyp6ViEa8NzDIRgTXYHyytfFyUbw1XrDuPamPZTv/bNx/UzpKXyio0PTZwfg/Z
Nlt9+zNgRo8hJACPG80aL3kCaPl0Vz3xYFEQJ7I4UbuouGtsAOrIgjVulbsb05FQ
/4l49HsxAIwwA8vt+itoHDdPr3vecAmpW4ZIIuDQbYOIFwvWbl38YoaKJqJQTgQc
rosrbeJ7hvks/izsdH+F4/3GiSqDmimCvNL6XfIzoHxpoE6HekVqa7gx/r1ISBWy
S0a5c0WMXDJ7+Q==
-----END CERTIFICATE-----
Generated at Mon May 12 20:50:15 2025 by rpki-client