Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File: jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier: qrVAMzLlF+7EnL6nflpINglZTnqztbxP4+R0yD+D+7s=
Subject key identifier: 98:D0:2E:3B:C7:A5:7F:8C:FD:85:CA:63:6B:15:6F:6E:1A:DD:B5:37
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial: 0196BD8033946B0D1796634BFBF00DEA8F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 04:00:17 +0000
Manifest this update: Sun 11 May 2025 04:00:17 +0000
Manifest next update: Mon 12 May 2025 04:00:17 +0000
Files and hashes: 1: jHt_1MNQirxASDmqQViticPF-ps.roa (hash: PWOLXQilLHy5JAj1j3MO8KwTsebKycEVRdXXWLZvuq8=)
2: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: rJi51gKGaf+K0ExBbah875XvXMFHGQeHiSZOD6aOULM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:33:94:6b:0d:17:96:63:4b:fb:f0:0d:ea:8f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Validity
Not Before: May 11 04:00:17 2025 GMT
Not After : May 12 04:00:17 2025 GMT
Subject: CN=98d02e3bc7a57f8cfd85ca636b156f6e1addb537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:8e:67:d2:54:ff:f8:cf:58:ff:f6:af:ae:
d9:86:3d:ff:3a:be:10:26:44:f6:12:70:8c:76:04:
ce:83:3d:df:f7:51:48:d9:1d:79:72:d3:da:b4:a5:
6d:26:73:79:98:1f:16:6f:53:ca:55:c7:20:07:49:
28:69:d4:60:68:19:de:70:bb:f6:61:c2:bc:0e:fb:
b2:3c:57:f3:9b:11:67:ac:1b:71:95:41:a4:06:08:
ed:d4:38:33:0a:fe:6a:3d:54:38:e1:e3:48:99:08:
22:8d:75:91:d1:fb:8a:91:00:a3:70:b5:57:79:65:
a4:b7:c2:06:80:07:bd:e0:81:72:3c:4f:99:a0:51:
0b:09:2c:fe:59:9a:17:e7:a7:21:dd:30:f2:97:72:
73:3c:9d:93:09:10:95:d9:aa:93:24:ad:c3:6e:8a:
27:7e:03:86:ec:eb:cc:31:2b:40:3b:ad:3c:80:50:
bf:f8:cf:16:f2:30:65:e3:76:fc:41:ba:12:db:26:
49:b9:6d:fd:d9:a3:32:6f:90:0b:15:a9:86:88:69:
c5:75:5d:69:f6:04:de:e7:d8:a0:f9:38:46:38:31:
54:80:e8:5b:df:c3:f3:98:7d:79:1f:df:95:51:67:
c1:55:1d:53:c8:a8:77:2d:d3:2d:b8:58:1e:07:34:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D0:2E:3B:C7:A5:7F:8C:FD:85:CA:63:6B:15:6F:6E:1A:DD:B5:37
X509v3 Authority Key Identifier:
keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:95:10:09:42:86:0c:de:e3:6d:cc:b6:0e:ef:d5:96:94:e7:
43:40:2c:c5:a9:7c:20:cc:c4:ec:a4:e7:4a:de:8d:6b:12:6f:
84:26:41:f4:a1:ef:6b:56:5e:ea:c5:93:18:d0:7e:24:52:8a:
8d:78:25:04:96:bd:9c:86:5f:1f:b3:9c:1d:31:e1:61:12:3a:
ff:83:ab:5f:55:5b:cf:99:cd:b3:39:b3:4e:6c:38:88:16:e1:
7a:21:c8:dd:c5:2e:c6:05:fb:0d:26:9e:bc:b0:35:14:4a:bf:
4f:c2:dc:88:6c:74:ca:33:4f:1d:67:4d:f2:1b:9d:88:d8:be:
95:33:d9:9a:c3:9c:77:84:9a:66:0d:50:73:2d:de:1d:b9:51:
5e:a4:58:da:bf:c7:d9:63:fb:15:4b:28:c2:81:de:db:db:91:
34:2e:13:9b:18:af:97:69:c8:66:d3:73:37:57:06:34:3d:84:
8b:3b:33:43:7f:c5:19:29:f7:d9:cd:18:94:57:5b:c1:b7:ea:
29:ff:6b:ac:4f:7d:51:61:3a:52:58:29:a8:03:7f:3a:0c:b5:
80:c4:9c:9b:97:80:3c:66:fb:85:43:b1:f5:6f:fe:21:92:7d:
20:4f:c1:e9:be:51:bc:a4:37:90:73:5c:c8:c0:dd:73:a3:95:
17:eb:6f:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gDOUaw0XlmNL+/AN6o8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODk4MDFiMTlhYTk3MjhhZDRmNmJiNzE4NWMxMWYxNGI5
ZDhkN2MwHhcNMjUwNTExMDQwMDE3WhcNMjUwNTEyMDQwMDE3WjAzMTEwLwYDVQQD
Eyg5OGQwMmUzYmM3YTU3ZjhjZmQ4NWNhNjM2YjE1NmY2ZTFhZGRiNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RiOZ9JU//jPWP/2r67Zhj3/Or4Q
JkT2EnCMdgTOgz3f91FI2R15ctPatKVtJnN5mB8Wb1PKVccgB0koadRgaBnecLv2
YcK8DvuyPFfzmxFnrBtxlUGkBgjt1DgzCv5qPVQ44eNImQgijXWR0fuKkQCjcLVX
eWWkt8IGgAe94IFyPE+ZoFELCSz+WZoX56ch3TDyl3JzPJ2TCRCV2aqTJK3Dboon
fgOG7OvMMStAO608gFC/+M8W8jBl43b8QboS2yZJuW392aMyb5ALFamGiGnFdV1p
9gTe59ig+ThGODFUgOhb38PzmH15H9+VUWfBVR1TyKh3LdMtuFgeBzSlywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjQLjvHpX+M/YXKY2sVb24a3bU3MB8GA1UdIwQY
MBaAFIyJgBsZqpcorU9rtxhcEfFLnY18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zMDY2Y2EtZTAxNy00ZjYxLWFkYzUt
NzI4ZTk5NjdkYWNhLzEvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8zMDY2Y2EtZTAxNy00ZjYxLWFkYzUtNzI4ZTk5NjdkYWNh
LzEvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJUQCUKG
DN7jbcy2Du/VlpTnQ0Asxal8IMzE7KTnSt6NaxJvhCZB9KHva1Ze6sWTGNB+JFKK
jXglBJa9nIZfH7OcHTHhYRI6/4OrX1Vbz5nNszmzTmw4iBbheiHI3cUuxgX7DSae
vLA1FEq/T8LciGx0yjNPHWdN8hudiNi+lTPZmsOcd4SaZg1Qcy3eHblRXqRY2r/H
2WP7FUsowoHe29uRNC4Tmxivl2nIZtNzN1cGND2EizszQ3/FGSn32c0YlFdbwbfq
Kf9rrE99UWE6UlgpqAN/Ogy1gMScm5eAPGb7hUOx9W/+IZJ9IE/B6b5RvKQ3kHNc
yMDdc6OVF+tvCw==
-----END CERTIFICATE-----
Generated at Sun May 11 10:33:07 2025 by rpki-client