Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
File: 0jxZJVkZvdmrA73hxceIBixLmfM.mft (raw, json)
Hash identifier: Ewzoj/ZvfF3EivkeyGWvCPitanSRjtNMVhGATW6GRA8=
Subject key identifier: 73:1A:42:22:81:A4:B4:49:CA:2B:CC:C3:C0:DA:A3:67:30:90:DB:09
Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
Certificate issuer: /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Certificate serial: 0196C2701DE3A0CD7DDEBB95B1FC0D5820B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
Manifest number: 0669
Signing time: Mon 12 May 2025 03:00:49 +0000
Manifest this update: Mon 12 May 2025 03:00:49 +0000
Manifest next update: Tue 13 May 2025 03:00:49 +0000
Files and hashes: 1: 0jxZJVkZvdmrA73hxceIBixLmfM.crl (hash: O819xoE4fRu2mknr/GpQGigX0Rg5zbpIbeM5peJR4nc=)
2: JC586knHAJCWuyAHAdSdP6vCZvc.roa (hash: 5tWj8kAF7Tk8U+7sz2E535dJcNrZC7NIfrQwoPJI7rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:70:1d:e3:a0:cd:7d:de:bb:95:b1:fc:0d:58:20:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Validity
Not Before: May 12 03:00:49 2025 GMT
Not After : May 13 03:00:49 2025 GMT
Subject: CN=731a422281a4b449ca2bccc3c0daa3673090db09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:3e:27:0f:e6:9f:32:a4:cd:60:59:38:84:
92:40:d1:11:b9:28:65:56:32:81:8f:83:23:d5:20:
b8:0b:54:f5:68:f0:07:0e:76:0e:43:bf:84:e3:c5:
a1:e3:2c:f4:cb:f0:f5:96:ec:b2:bf:7b:fd:67:72:
55:8f:6d:f4:5d:71:5d:2f:6c:86:7c:02:a9:86:e1:
8f:d0:cc:58:ab:4d:9d:c2:e4:a9:f0:ed:e0:e1:24:
73:86:9c:e1:8f:d8:ad:3c:b4:1f:89:f6:38:4e:80:
26:37:2e:11:fa:1d:b5:0b:9c:03:0a:44:6b:10:4b:
b5:a3:83:63:1b:30:4c:42:0a:6b:92:85:32:c3:bb:
e7:30:0f:eb:4a:c4:d4:89:34:d3:f3:ef:51:ee:50:
b3:12:fc:d9:8c:a4:b3:2e:2b:9c:d9:4d:28:3f:3f:
c2:df:bb:8c:ad:04:1f:05:48:87:5a:ae:23:c0:64:
69:42:48:fc:10:83:13:c4:82:4a:29:df:bd:cb:f9:
52:a3:e6:ad:15:a4:13:47:04:a0:39:47:aa:46:e4:
bc:ce:07:03:b3:5a:20:59:71:eb:00:c5:af:06:18:
15:6a:77:d3:ca:9f:82:b0:34:fb:16:d0:c4:7c:a6:
9a:8b:23:2b:04:25:75:5c:98:db:ef:7e:55:3e:14:
76:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1A:42:22:81:A4:B4:49:CA:2B:CC:C3:C0:DA:A3:67:30:90:DB:09
X509v3 Authority Key Identifier:
keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c2:9d:8b:ce:51:eb:04:34:35:70:a8:cb:23:00:24:91:58:
a6:fe:f5:53:ca:bb:ba:a3:04:95:f1:5a:48:60:13:92:d8:a9:
23:a7:b3:28:06:7c:8b:a1:de:41:d8:6d:47:37:6a:94:b4:c3:
91:34:e4:cc:c4:8f:50:43:9b:96:40:57:92:8a:ef:ba:93:ba:
e4:1b:36:5d:5b:00:4e:a2:fe:5f:7d:cd:7c:30:12:ba:28:0a:
62:ad:10:41:af:d8:da:20:67:ca:a4:1c:d1:bd:cd:eb:ae:85:
c5:4f:ac:6d:6e:5a:3a:29:e8:da:2c:e5:9e:e2:13:e1:55:c8:
42:65:f2:44:b6:10:bb:e7:b6:f8:46:29:c7:93:0b:fa:05:da:
86:cb:3b:05:82:36:ee:8a:59:6d:4e:a8:07:05:08:f0:e3:dc:
6e:32:c1:11:66:ac:70:b3:84:79:16:71:a8:7c:1e:c5:c8:09:
b1:f9:11:e8:b0:cb:dc:b8:94:69:e0:ec:92:43:71:66:c0:6a:
0c:d3:d8:07:0b:28:ed:95:5f:a8:45:37:4f:f5:69:b5:ee:65:
7a:65:1d:a2:cd:4b:ae:6e:b6:19:23:f0:2d:8d:d8:f7:78:35:
09:1b:d9:d5:e8:a4:6e:0f:a2:50:82:88:47:70:57:f1:5f:a9:
22:ba:5c:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCcB3joM193ruVsfwNWCCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyM2M1OTI1NTkxOWJkZDlhYjAzYmRlMWM1Yzc4ODA2MmM0
Yjk5ZjMwHhcNMjUwNTEyMDMwMDQ5WhcNMjUwNTEzMDMwMDQ5WjAzMTEwLwYDVQQD
Eyg3MzFhNDIyMjgxYTRiNDQ5Y2EyYmNjYzNjMGRhYTM2NzMwOTBkYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKo+Jw/mnzKkzWBZOISSQNERuShl
VjKBj4Mj1SC4C1T1aPAHDnYOQ7+E48Wh4yz0y/D1luyyv3v9Z3JVj230XXFdL2yG
fAKphuGP0MxYq02dwuSp8O3g4SRzhpzhj9itPLQfifY4ToAmNy4R+h21C5wDCkRr
EEu1o4NjGzBMQgprkoUyw7vnMA/rSsTUiTTT8+9R7lCzEvzZjKSzLiuc2U0oPz/C
37uMrQQfBUiHWq4jwGRpQkj8EIMTxIJKKd+9y/lSo+atFaQTRwSgOUeqRuS8zgcD
s1ogWXHrAMWvBhgVanfTyp+CsDT7FtDEfKaaiyMrBCV1XJjb735VPhR22QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMaQiKBpLRJyivMw8Dao2cwkNsJMB8GA1UdIwQY
MBaAFNI8WSVZGb3ZqwO94cXHiAYsS5nzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZmMzZjYtNmExYS00Y2RjLWExNDct
ZGE4YjJkNTc2YmYxLzEvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZmMzZjYtNmExYS00Y2RjLWExNDctZGE4YjJkNTc2YmYx
LzEvMGp4WkpWa1p2ZG1yQTczaHhjZUlCaXhMbWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsKdi85R
6wQ0NXCoyyMAJJFYpv71U8q7uqMElfFaSGATktipI6ezKAZ8i6HeQdhtRzdqlLTD
kTTkzMSPUEOblkBXkorvupO65Bs2XVsATqL+X33NfDASuigKYq0QQa/Y2iBnyqQc
0b3N666FxU+sbW5aOino2izlnuIT4VXIQmXyRLYQu+e2+EYpx5ML+gXahss7BYI2
7opZbU6oBwUI8OPcbjLBEWascLOEeRZxqHwexcgJsfkR6LDL3LiUaeDskkNxZsBq
DNPYBwso7ZVfqEU3T/Vpte5lemUdos1Lrm62GSPwLY3Y93g1CRvZ1eikbg+iUIKI
R3BX8V+pIrpc+w==
-----END CERTIFICATE-----
Generated at Mon May 12 06:49:09 2025 by rpki-client