Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
File: J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft (raw, json)
Hash identifier: zJozgYjYSWknnQ+r5498Y82mNOZfO2Aa6y+cP8CCHRk=
Subject key identifier: C7:DE:90:4A:42:BF:2F:7A:5D:2C:26:76:9C:0A:44:50:6B:9F:67:FC
Authority key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
Certificate issuer: /CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Certificate serial: 0196C45E13720EDDDDAC9B01DC5E0D1916FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
Manifest number: 0102
Signing time: Mon 12 May 2025 12:00:21 +0000
Manifest this update: Mon 12 May 2025 12:00:21 +0000
Manifest next update: Tue 13 May 2025 12:00:21 +0000
Files and hashes: 1: J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl (hash: ac9oxKOm05NaZcYoG20159jFI2kyTxQ3SFbuoKA/pxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:13:72:0e:dd:dd:ac:9b:01:dc:5e:0d:19:16:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Validity
Not Before: May 12 12:00:21 2025 GMT
Not After : May 13 12:00:21 2025 GMT
Subject: CN=c7de904a42bf2f7a5d2c26769c0a44506b9f67fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:2d:cf:81:64:61:e9:cf:ed:ae:8e:a3:a2:
b1:7c:0d:2c:51:b0:cb:77:93:e6:a7:18:2f:49:91:
8d:45:bd:76:0a:fc:d0:0f:ec:4f:d1:5e:65:62:a0:
4c:8e:45:6a:d2:34:18:3c:d5:16:6b:dd:30:67:78:
e9:4b:d2:e0:06:86:93:fb:c1:ff:6e:02:31:4a:74:
dc:4b:6c:41:a2:b5:b9:97:47:92:7e:eb:72:37:03:
ae:8b:4b:18:87:bc:9e:7d:ea:0f:3a:cb:1f:ef:90:
38:f5:dc:a3:8f:f8:8f:54:0f:46:d2:af:6d:c9:0a:
19:8c:3f:7c:84:43:0d:16:76:a1:3a:b3:2d:29:97:
94:7a:33:01:be:bd:33:ba:81:c8:54:89:75:b5:4c:
48:ef:5b:e4:c3:b2:0a:5e:f6:af:29:a3:8e:e0:31:
8f:9d:69:fe:3e:bd:fa:90:ee:6c:30:59:df:d1:ea:
a7:41:e3:38:5e:17:de:d3:96:b2:39:1f:e0:ed:ac:
36:a2:49:d8:bf:7c:e4:69:92:cd:e5:42:df:1a:76:
a4:65:be:16:08:02:c2:2c:48:0c:c8:ed:fe:62:92:
46:dd:92:f3:d2:be:c8:7c:18:e8:ce:0b:54:b8:1e:
ad:f4:87:6f:2a:a4:01:42:94:2c:5f:e7:a9:69:c7:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DE:90:4A:42:BF:2F:7A:5D:2C:26:76:9C:0A:44:50:6B:9F:67:FC
X509v3 Authority Key Identifier:
keyid:27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:20:42:7c:61:34:8d:9d:14:67:7e:d7:43:8c:58:98:be:66:
e1:3a:77:86:9f:ea:27:cb:af:e3:1b:58:47:d8:e2:fb:ac:76:
d2:6e:66:33:cb:22:32:ad:c8:40:03:06:17:04:bb:25:f8:cc:
a1:7f:67:52:77:26:2d:a3:de:ae:92:1f:5d:a4:a5:cd:d5:39:
eb:26:1d:84:d2:59:9f:b3:a4:57:a2:9a:75:b8:5a:3c:53:ba:
0d:ca:01:84:57:2b:75:4f:11:74:52:49:53:21:c9:d3:53:91:
23:38:a3:90:a8:49:50:c4:65:a3:ae:ea:23:84:ab:62:86:5a:
50:94:b2:48:e1:b4:10:79:3e:c0:17:ed:71:10:92:fd:35:54:
25:39:2a:9c:48:cb:de:d6:85:01:0f:14:9b:ec:a5:65:27:fb:
3a:de:d7:98:c1:87:fc:0d:34:d3:3b:da:92:f0:3c:80:3d:ac:
ab:47:75:5f:a3:85:c9:cd:29:85:32:3f:27:a9:bf:b9:a8:cc:
b1:0b:df:93:3b:37:c0:47:05:98:c6:b6:59:d7:e1:28:13:f5:
66:87:08:e6:a7:10:3b:dd:d8:27:87:f4:dd:23:b6:54:9e:c6:
81:67:71:5e:9a:e7:1e:d3:32:32:06:00:ff:9f:f9:b3:a9:90:
ab:32:2b:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEXhNyDt3drJsB3F4NGRb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3N2Q4MGYwZmUyYjQzZDA0NmJlYjNkNzliYWMxOTdhNzk4
OWMyZTQwHhcNMjUwNTEyMTIwMDIxWhcNMjUwNTEzMTIwMDIxWjAzMTEwLwYDVQQD
EyhjN2RlOTA0YTQyYmYyZjdhNWQyYzI2NzY5YzBhNDQ1MDZiOWY2N2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwItz4FkYenP7a6Oo6KxfA0sUbDL
d5PmpxgvSZGNRb12CvzQD+xP0V5lYqBMjkVq0jQYPNUWa90wZ3jpS9LgBoaT+8H/
bgIxSnTcS2xBorW5l0eSfutyNwOui0sYh7yefeoPOssf75A49dyjj/iPVA9G0q9t
yQoZjD98hEMNFnahOrMtKZeUejMBvr0zuoHIVIl1tUxI71vkw7IKXvavKaOO4DGP
nWn+Pr36kO5sMFnf0eqnQeM4Xhfe05ayOR/g7aw2oknYv3zkaZLN5ULfGnakZb4W
CALCLEgMyO3+YpJG3ZLz0r7IfBjozgtUuB6t9IdvKqQBQpQsX+epace6zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfekEpCvy96XSwmdpwKRFBrn2f8MB8GA1UdIwQY
MBaAFCd9gPD+K0PQRr6z15usGXp5icLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjMyQThQNHJROUJHdnJQWG02d1plbm1Kd3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xOTA5NTAtZDQxYy00ZDI2LTg1YmMt
NTE4NGI1NWYxY2ZmLzEvSjMyQThQNHJROUJHdnJQWG02d1plbm1Kd3VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xOTA5NTAtZDQxYy00ZDI2LTg1YmMtNTE4NGI1NWYxY2Zm
LzEvSjMyQThQNHJROUJHdnJQWG02d1plbm1Kd3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCBCfGE0
jZ0UZ37XQ4xYmL5m4Tp3hp/qJ8uv4xtYR9ji+6x20m5mM8siMq3IQAMGFwS7JfjM
oX9nUncmLaPerpIfXaSlzdU56yYdhNJZn7OkV6KadbhaPFO6DcoBhFcrdU8RdFJJ
UyHJ01ORIzijkKhJUMRlo67qI4SrYoZaUJSySOG0EHk+wBftcRCS/TVUJTkqnEjL
3taFAQ8Um+ylZSf7Ot7XmMGH/A000zvakvA8gD2sq0d1X6OFyc0phTI/J6m/uajM
sQvfkzs3wEcFmMa2WdfhKBP1ZocI5qcQO93YJ4f03SO2VJ7GgWdxXprnHtMyMgYA
/5/5s6mQqzIrcA==
-----END CERTIFICATE-----
Generated at Mon May 12 19:52:49 2025 by rpki-client