Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
File: JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft (raw, json)
Hash identifier: XGdqcIWstRVBypNSCwNAhqKxmu62F6dcxhFItKFY/CA=
Subject key identifier: 18:76:CE:42:03:3D:0C:3C:AA:E0:89:6F:96:74:6A:90:31:84:5B:4D
Authority key identifier: 25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
Certificate issuer: /CN=258906554d8c8b428ede8cb35026860d3d7771df
Certificate serial: 0196C984D89C7B63CBEF927B3CB4A190C882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
Manifest number: 0C1A
Signing time: Tue 13 May 2025 12:00:48 +0000
Manifest this update: Tue 13 May 2025 12:00:48 +0000
Manifest next update: Wed 14 May 2025 12:00:48 +0000
Files and hashes: 1: JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl (hash: UhX7p764WHbZoWWZ9KmGmjrJAuCqJr2voRv8xsc9oLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:d8:9c:7b:63:cb:ef:92:7b:3c:b4:a1:90:c8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258906554d8c8b428ede8cb35026860d3d7771df
Validity
Not Before: May 13 12:00:48 2025 GMT
Not After : May 14 12:00:48 2025 GMT
Subject: CN=1876ce42033d0c3caae0896f96746a9031845b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:84:66:2c:f1:89:db:33:6b:e0:38:cc:f3:
c4:4d:df:7d:6a:75:f3:d3:02:e4:fb:7a:9a:df:d0:
2b:50:97:1b:f4:38:81:d4:2c:dc:0c:a5:13:8e:5c:
24:88:7b:12:d3:9e:6c:12:fe:ab:d0:08:f7:d6:3f:
29:83:80:33:3e:ed:e1:67:69:cc:0d:87:ea:44:de:
e4:34:bb:fe:34:c6:a6:76:21:29:83:28:e7:a9:d3:
6e:83:58:37:8b:24:cb:11:f3:6c:d3:5e:69:7d:80:
1e:60:f6:90:20:65:13:d7:d6:65:38:9a:9e:23:05:
31:1f:50:09:82:e1:fa:a2:07:58:55:7e:7e:13:6f:
e5:d0:7d:9a:4c:e2:56:eb:88:e7:45:d6:4c:ae:7d:
dc:80:12:8a:6d:a5:71:4e:71:28:25:55:67:e3:15:
47:15:e6:b9:d8:a6:1e:b8:bd:68:d7:25:99:ba:36:
ff:06:d5:66:2c:c8:2a:2e:8d:ba:1f:61:9d:de:5e:
c2:1d:a8:02:9a:db:d8:86:5a:2d:41:a5:e3:f8:4a:
52:66:98:3c:0d:16:ad:4e:fd:f6:7c:b1:8d:39:f8:
37:d1:12:d5:49:d4:85:cd:79:88:90:4d:a6:8e:bc:
98:4c:ae:f3:8d:c0:da:7c:fe:26:14:fb:f4:c3:ae:
07:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:76:CE:42:03:3D:0C:3C:AA:E0:89:6F:96:74:6A:90:31:84:5B:4D
X509v3 Authority Key Identifier:
keyid:25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8d:eb:0e:5d:09:e4:2f:f7:d6:11:22:06:58:b0:7f:c5:36:
7a:0c:5d:51:3e:a2:50:09:04:95:10:a7:f2:af:42:ce:4e:77:
c7:16:63:89:58:55:4b:23:bb:6f:18:f6:4c:70:a7:aa:cd:bc:
91:a3:52:11:02:47:b5:b1:3f:01:05:aa:d6:33:a3:fb:0c:be:
c0:df:d9:0a:f8:e7:eb:3f:94:b9:b5:dd:a0:32:e0:94:c1:38:
f7:4e:9d:12:80:21:42:df:64:a4:0e:51:92:ba:0c:8e:74:d1:
72:b3:d6:8f:d8:b8:f3:de:c1:cd:82:76:d0:a4:82:70:f1:06:
41:fa:0e:81:ea:c9:d1:5c:ff:91:a6:4b:cc:fc:59:fe:7a:dd:
3b:db:d4:e2:0b:f2:41:ed:65:91:dc:92:58:09:21:72:6b:d6:
c6:a6:a6:f5:cf:17:9c:73:e9:52:d6:79:f6:e4:b6:1a:d3:f5:
fd:5f:59:98:95:74:86:a4:62:f4:94:c7:f3:82:d3:f4:e4:1d:
d5:8a:a3:ca:6b:f9:ea:44:6d:45:06:63:4f:13:35:9f:ca:23:
9b:a7:d1:20:58:53:67:8b:21:97:c3:0c:cd:43:48:aa:8c:90:
51:7e:f6:a6:76:33:cf:e6:e2:69:0a:26:5a:34:97:30:e8:2a:
81:3b:c5:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJhNice2PL75J7PLShkMiCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ODkwNjU1NGQ4YzhiNDI4ZWRlOGNiMzUwMjY4NjBkM2Q3
NzcxZGYwHhcNMjUwNTEzMTIwMDQ4WhcNMjUwNTE0MTIwMDQ4WjAzMTEwLwYDVQQD
EygxODc2Y2U0MjAzM2QwYzNjYWFlMDg5NmY5Njc0NmE5MDMxODQ1YjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnKEZizxidsza+A4zPPETd99anXz
0wLk+3qa39ArUJcb9DiB1CzcDKUTjlwkiHsS055sEv6r0Aj31j8pg4AzPu3hZ2nM
DYfqRN7kNLv+NMamdiEpgyjnqdNug1g3iyTLEfNs015pfYAeYPaQIGUT19ZlOJqe
IwUxH1AJguH6ogdYVX5+E2/l0H2aTOJW64jnRdZMrn3cgBKKbaVxTnEoJVVn4xVH
Fea52KYeuL1o1yWZujb/BtVmLMgqLo26H2Gd3l7CHagCmtvYhlotQaXj+EpSZpg8
DRatTv32fLGNOfg30RLVSdSFzXmIkE2mjryYTK7zjcDafP4mFPv0w64HaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBh2zkIDPQw8quCJb5Z0apAxhFtNMB8GA1UdIwQY
MBaAFCWJBlVNjItCjt6Ms1Amhg09d3HfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSllrR1ZVMk1pMEtPM295elVDYUdEVDEzY2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YjU3YWItNmNhMi00YWE4LTgzODct
YWZkZDUzODI3ZTkzLzEvSllrR1ZVMk1pMEtPM295elVDYUdEVDEzY2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85YjU3YWItNmNhMi00YWE4LTgzODctYWZkZDUzODI3ZTkz
LzEvSllrR1ZVMk1pMEtPM295elVDYUdEVDEzY2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXo3rDl0J
5C/31hEiBliwf8U2egxdUT6iUAkElRCn8q9Czk53xxZjiVhVSyO7bxj2THCnqs28
kaNSEQJHtbE/AQWq1jOj+wy+wN/ZCvjn6z+UubXdoDLglME4906dEoAhQt9kpA5R
kroMjnTRcrPWj9i4897BzYJ20KSCcPEGQfoOgerJ0Vz/kaZLzPxZ/nrdO9vU4gvy
Qe1lkdySWAkhcmvWxqam9c8XnHPpUtZ59uS2GtP1/V9ZmJV0hqRi9JTH84LT9OQd
1Yqjymv56kRtRQZjTxM1n8ojm6fRIFhTZ4shl8MMzUNIqoyQUX72pnYzz+biaQom
WjSXMOgqgTvFqw==
-----END CERTIFICATE-----
Generated at Tue May 13 13:36:03 2025 by rpki-client