Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
File: JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json)
Hash identifier: sZBXBYFpriBbKVYIGwMilcJH+qWcuRWkI7AO39jpTuc=
Subject key identifier: 31:0E:9D:3E:09:3A:D0:C5:D4:1B:B4:94:DA:C0:F8:BE:83:21:2E:B5
Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
Certificate issuer: /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Certificate serial: 0196C3F0E9D2B7D21704847AD751150504B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
Manifest number: 0174
Signing time: Mon 12 May 2025 10:01:07 +0000
Manifest this update: Mon 12 May 2025 10:01:07 +0000
Manifest next update: Tue 13 May 2025 10:01:07 +0000
Files and hashes: 1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: q2y2Iahw/LLskXOAKKnnGLsE9lamv8O56VZ47SAiaPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:e9:d2:b7:d2:17:04:84:7a:d7:51:15:05:04:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Validity
Not Before: May 12 10:01:07 2025 GMT
Not After : May 13 10:01:07 2025 GMT
Subject: CN=310e9d3e093ad0c5d41bb494dac0f8be83212eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4c:83:1d:b6:19:53:50:20:69:5c:12:dc:9b:
3c:3a:86:7c:00:9f:58:c6:15:73:ef:c9:bb:c3:04:
27:8f:55:49:f9:9b:47:aa:60:5a:af:37:7a:ea:87:
25:31:0a:a9:89:64:ff:e1:ce:b9:4d:b8:f9:ae:c6:
19:fe:af:77:32:10:5f:18:74:9f:05:f2:d1:38:9c:
03:97:78:f1:30:28:44:d9:4f:bd:06:a9:c0:8e:b4:
0e:51:58:e1:53:80:6f:05:9b:00:13:0e:08:3a:3d:
4c:25:2a:bd:b9:f5:af:a0:08:14:40:3b:90:fa:23:
b8:ab:ef:92:6c:d3:fb:1d:2e:e0:27:44:af:15:13:
11:a6:c4:d1:74:8d:89:49:8b:8a:9a:75:fa:9a:0f:
dc:52:88:e1:2a:2c:70:37:4c:ff:59:5c:87:a8:1f:
80:5b:ba:41:ec:7b:fc:b8:03:75:d1:6c:7a:ca:62:
b0:cd:40:a9:a6:cd:6f:1e:fc:3d:54:ff:11:4f:66:
b7:14:e0:6e:24:01:20:a5:87:a8:94:af:c6:e6:82:
97:13:72:73:8d:5b:cd:09:c3:cc:04:fc:e0:d8:89:
c8:62:f7:10:96:11:25:a7:e6:35:f5:5d:42:88:15:
6f:7d:19:c7:e6:7e:52:4a:ed:0d:8f:c2:43:ea:03:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:9D:3E:09:3A:D0:C5:D4:1B:B4:94:DA:C0:F8:BE:83:21:2E:B5
X509v3 Authority Key Identifier:
keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5a:50:54:df:1f:66:77:d0:20:e8:94:63:f9:c7:25:83:5f:
13:99:56:a1:ee:99:ea:55:53:3b:36:90:24:ff:94:5e:3c:0a:
be:17:91:b8:68:bd:41:a4:9a:1a:30:ba:c7:58:a3:c7:38:88:
be:fc:85:b8:43:96:a1:13:e2:b4:d6:74:34:11:52:1e:66:05:
fc:7c:e4:07:82:de:da:5c:fb:32:6c:dc:f5:58:ab:29:ad:ec:
4a:dd:c1:c5:44:68:30:5f:9d:ed:a3:2c:af:9f:0f:4a:76:ae:
f4:d4:d2:d7:45:c4:6f:48:04:42:35:3f:82:14:7c:9e:cd:1a:
4d:f8:05:d9:ab:10:eb:e4:dd:aa:d2:e2:ef:76:77:1a:58:a6:
44:4e:3b:f1:ba:89:6d:9f:b6:4b:b4:81:2d:78:d4:18:48:87:
20:f2:d5:68:cf:e6:7c:61:2f:29:64:be:41:fd:19:8b:2b:cd:
bc:68:4a:2b:f8:a1:cc:af:28:ea:52:d9:b9:c8:77:8d:73:b7:
ef:b2:3d:99:26:07:c3:6c:13:3a:86:09:58:2e:b9:4f:9f:df:
6a:a4:c4:1b:05:64:8a:f8:d7:46:3a:6f:8c:aa:35:34:13:91:
5d:34:83:84:38:44:94:b2:bd:31:6d:3e:f4:5c:d1:6c:34:04:
8e:6f:5e:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbD8OnSt9IXBIR611EVBQS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MjQ4MDRhMDI3NzcwMzljNGNmZDhjMDBkYzI5ZmE5MWQ4
YTM5MGMwHhcNMjUwNTEyMTAwMTA3WhcNMjUwNTEzMTAwMTA3WjAzMTEwLwYDVQQD
EygzMTBlOWQzZTA5M2FkMGM1ZDQxYmI0OTRkYWMwZjhiZTgzMjEyZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UyDHbYZU1AgaVwS3Js8OoZ8AJ9Y
xhVz78m7wwQnj1VJ+ZtHqmBarzd66oclMQqpiWT/4c65Tbj5rsYZ/q93MhBfGHSf
BfLROJwDl3jxMChE2U+9BqnAjrQOUVjhU4BvBZsAEw4IOj1MJSq9ufWvoAgUQDuQ
+iO4q++SbNP7HS7gJ0SvFRMRpsTRdI2JSYuKmnX6mg/cUojhKixwN0z/WVyHqB+A
W7pB7Hv8uAN10Wx6ymKwzUCpps1vHvw9VP8RT2a3FOBuJAEgpYeolK/G5oKXE3Jz
jVvNCcPMBPzg2InIYvcQlhElp+Y19V1CiBVvfRnH5n5SSu0Nj8JD6gPsiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEOnT4JOtDF1Bu0lNrA+L6DIS61MB8GA1UdIwQY
MBaAFCQkgEoCd3A5xM/YwA3Cn6kdijkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQt
ZDAwYjU4MjJjY2VmLzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQtZDAwYjU4MjJjY2Vm
LzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVpQVN8f
ZnfQIOiUY/nHJYNfE5lWoe6Z6lVTOzaQJP+UXjwKvheRuGi9QaSaGjC6x1ijxziI
vvyFuEOWoRPitNZ0NBFSHmYF/HzkB4Le2lz7Mmzc9VirKa3sSt3BxURoMF+d7aMs
r58PSnau9NTS10XEb0gEQjU/ghR8ns0aTfgF2asQ6+TdqtLi73Z3GlimRE478bqJ
bZ+2S7SBLXjUGEiHIPLVaM/mfGEvKWS+Qf0ZiyvNvGhKK/ihzK8o6lLZuch3jXO3
77I9mSYHw2wTOoYJWC65T5/faqTEGwVkivjXRjpvjKo1NBORXTSDhDhElLK9MW0+
9FzRbDQEjm9eqQ==
-----END CERTIFICATE-----
Generated at Mon May 12 13:45:35 2025 by rpki-client