Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft
File: JsmI8h_x7X30KmJjcjImaG08GNY.mft (raw, json)
Hash identifier: UGUj8RewJBrygQtIasfnIVqtenzab2275ZFS5rmonRk=
Subject key identifier: 7F:E4:2E:23:5C:B3:07:FC:31:CA:CE:30:65:9C:5D:3E:D9:CD:25:28
Authority key identifier: 26:C9:88:F2:1F:F1:ED:7D:F4:2A:62:63:72:32:26:68:6D:3C:18:D6
Certificate issuer: /CN=26c988f21ff1ed7df42a6263723226686d3c18d6
Certificate serial: 0196BC6E27C2D7F075F480AD6CB0E82B3B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsmI8h_x7X30KmJjcjImaG08GNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft
Manifest number: 0627
Signing time: Sat 10 May 2025 23:00:57 +0000
Manifest this update: Sat 10 May 2025 23:00:57 +0000
Manifest next update: Sun 11 May 2025 23:00:57 +0000
Files and hashes: 1: 1-807yUmPHz4IsK5x-j_MUOfei3Y.roa (hash: ld615U7g1fyntUuZJsJkyBsfvHeO3Vnx7/PuZx0Y6J0=)
2: JsmI8h_x7X30KmJjcjImaG08GNY.crl (hash: FNjGzhFqNKh/15bv2lryFeszkSdKm1kOhW+UfDkmGuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsmI8h_x7X30KmJjcjImaG08GNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:27:c2:d7:f0:75:f4:80:ad:6c:b0:e8:2b:3b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c988f21ff1ed7df42a6263723226686d3c18d6
Validity
Not Before: May 10 23:00:57 2025 GMT
Not After : May 11 23:00:57 2025 GMT
Subject: CN=7fe42e235cb307fc31cace30659c5d3ed9cd2528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:a1:67:bd:10:00:c6:69:5a:ef:d0:4e:96:
37:db:0f:42:61:b1:40:30:ab:e4:f9:f3:bd:60:7f:
4b:68:54:d4:45:0b:4b:1b:21:c2:4f:78:7d:ed:d6:
d5:99:e8:95:ec:e0:80:62:7f:98:4e:6a:9f:b2:d0:
e3:d1:02:55:12:18:71:df:1b:44:74:18:4f:5e:f0:
b2:43:17:77:0b:d6:61:9c:aa:70:f9:82:20:f1:2b:
b7:24:06:e0:38:c1:84:51:f8:06:32:c5:bb:09:09:
e9:64:40:46:73:d8:1f:d0:77:4d:6d:fa:9a:fa:c4:
18:af:4f:12:cd:8a:0f:54:cb:ae:5d:2c:87:07:1f:
90:7e:99:10:a6:86:e3:65:bd:a5:d1:0b:6d:f1:c8:
53:ca:53:a7:12:42:96:f2:73:0f:f1:19:7c:f8:7c:
b2:c9:61:55:40:7d:60:3e:03:4c:3b:78:f9:27:7d:
a0:13:3d:f2:09:92:73:48:8d:b7:29:a4:80:c2:d7:
d0:d1:96:16:6f:26:c4:6c:d6:1f:1d:ff:ff:a8:14:
d2:a5:d0:32:e2:99:2d:7f:31:fa:25:37:fd:32:4c:
c9:a0:67:c9:82:6b:bf:20:7f:fe:5b:ca:24:c6:c6:
b9:7e:5f:b7:f4:03:e0:a2:83:52:3b:4b:a9:7b:af:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E4:2E:23:5C:B3:07:FC:31:CA:CE:30:65:9C:5D:3E:D9:CD:25:28
X509v3 Authority Key Identifier:
keyid:26:C9:88:F2:1F:F1:ED:7D:F4:2A:62:63:72:32:26:68:6D:3C:18:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsmI8h_x7X30KmJjcjImaG08GNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a7:52:89:56:a6:dd:a9:bd:20:4d:7f:d0:df:41:f2:25:0d:
31:07:84:7d:09:8a:67:eb:96:6d:8b:51:0d:de:62:b8:26:eb:
da:26:a0:d8:b9:df:da:aa:a4:be:8b:b5:d0:af:00:87:23:69:
49:ba:c9:87:b1:d6:3c:32:c3:dd:1d:a7:3b:af:c4:95:fc:93:
ce:38:61:5f:33:f2:81:4a:86:a7:4a:04:00:4e:69:c8:87:4d:
57:d3:21:22:2f:d1:bf:b0:9a:70:3a:9e:bc:92:93:7e:79:9d:
53:af:c3:df:06:4f:fb:04:17:3c:b8:7e:83:41:ce:54:6e:59:
90:5c:5f:3c:1a:6e:13:98:20:c2:e5:f6:44:b7:c6:31:6f:cf:
8f:d4:81:da:88:e0:9e:eb:16:42:63:a2:f8:80:d4:b5:72:3c:
66:1b:8d:d3:59:f5:2a:f9:1c:42:7a:fc:fc:c7:c3:d2:0c:da:
c4:22:cd:b9:ff:e1:92:4e:cb:f7:3c:04:6e:46:36:56:f7:ef:
d4:e1:19:a4:9d:27:bd:36:63:67:c5:27:8f:23:91:e6:2b:79:
45:8b:2c:e9:2d:74:46:ab:ea:09:0a:ea:91:ac:fc:ec:6b:fd:
b5:90:d5:3d:20:41:4a:dc:be:fb:9b:03:08:02:b5:0e:e9:f9:
5e:a9:e2:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8bifC1/B19ICtbLDoKztyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Yzk4OGYyMWZmMWVkN2RmNDJhNjI2MzcyMzIyNjY4NmQz
YzE4ZDYwHhcNMjUwNTEwMjMwMDU3WhcNMjUwNTExMjMwMDU3WjAzMTEwLwYDVQQD
Eyg3ZmU0MmUyMzVjYjMwN2ZjMzFjYWNlMzA2NTljNWQzZWQ5Y2QyNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26WhZ70QAMZpWu/QTpY32w9CYbFA
MKvk+fO9YH9LaFTURQtLGyHCT3h97dbVmeiV7OCAYn+YTmqfstDj0QJVEhhx3xtE
dBhPXvCyQxd3C9ZhnKpw+YIg8Su3JAbgOMGEUfgGMsW7CQnpZEBGc9gf0HdNbfqa
+sQYr08SzYoPVMuuXSyHBx+QfpkQpobjZb2l0Qtt8chTylOnEkKW8nMP8Rl8+Hyy
yWFVQH1gPgNMO3j5J32gEz3yCZJzSI23KaSAwtfQ0ZYWbybEbNYfHf//qBTSpdAy
4pktfzH6JTf9MkzJoGfJgmu/IH/+W8okxsa5fl+39APgooNSO0upe6/nXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/kLiNcswf8McrOMGWcXT7ZzSUoMB8GA1UdIwQY
MBaAFCbJiPIf8e199CpiY3IyJmhtPBjWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnNtSThoX3g3WDMwS21KamNqSW1hRzA4R05ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yZDBhNDgtOWY4Ni00OGUwLWEwMWUt
NWIzMjg1YzNhYmFhLzEvSnNtSThoX3g3WDMwS21KamNqSW1hRzA4R05ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yZDBhNDgtOWY4Ni00OGUwLWEwMWUtNWIzMjg1YzNhYmFh
LzEvSnNtSThoX3g3WDMwS21KamNqSW1hRzA4R05ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6dSiVam
3am9IE1/0N9B8iUNMQeEfQmKZ+uWbYtRDd5iuCbr2iag2Lnf2qqkvou10K8AhyNp
SbrJh7HWPDLD3R2nO6/ElfyTzjhhXzPygUqGp0oEAE5pyIdNV9MhIi/Rv7CacDqe
vJKTfnmdU6/D3wZP+wQXPLh+g0HOVG5ZkFxfPBpuE5ggwuX2RLfGMW/Pj9SB2ojg
nusWQmOi+IDUtXI8ZhuN01n1KvkcQnr8/MfD0gzaxCLNuf/hkk7L9zwEbkY2Vvfv
1OEZpJ0nvTZjZ8UnjyOR5it5RYss6S10RqvqCQrqkaz87Gv9tZDVPSBBSty++5sD
CAK1Dun5XqnikQ==
-----END CERTIFICATE-----
Generated at Sun May 11 06:38:54 2025 by rpki-client