Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
File: JmOMLLe4YM02lnnE0F1Q9wXgRik.mft (raw, json)
Hash identifier: beuf9iNCCQj1br6VLXw90NBbpMJ6ykPBp8iUZAqgLJI=
Subject key identifier: 37:97:DE:4D:F4:63:34:39:56:B9:1E:0A:BB:D8:DD:58:38:C5:FF:9A
Authority key identifier: 26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
Certificate issuer: /CN=26638c2cb7b860cd369679c4d05d50f705e04629
Certificate serial: 0196CD61B2B0B7389F98E1FAC12954E8645A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
Manifest number: 0DAB
Signing time: Wed 14 May 2025 06:00:54 +0000
Manifest this update: Wed 14 May 2025 06:00:54 +0000
Manifest next update: Thu 15 May 2025 06:00:54 +0000
Files and hashes: 1: HRbR_khGq9xBOHLyUMt_H0_ZMOg.roa (hash: sAAGeZp9KGc0mAVbloa7q59m7jUPjTaroGNIZ50YXxw=)
2: JmOMLLe4YM02lnnE0F1Q9wXgRik.crl (hash: kmOjGlvupRvO3eu+Adez//P/zV0SgArTXKMYCZPXIEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:b2:b0:b7:38:9f:98:e1:fa:c1:29:54:e8:64:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26638c2cb7b860cd369679c4d05d50f705e04629
Validity
Not Before: May 14 06:00:54 2025 GMT
Not After : May 15 06:00:54 2025 GMT
Subject: CN=3797de4df463343956b91e0abbd8dd5838c5ff9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:80:6f:dd:4f:8c:2e:cf:00:28:45:17:80:
29:4e:9e:86:4d:53:4f:3b:c7:75:6f:dd:5e:a2:47:
2e:ea:2d:94:1a:ff:31:f7:88:e0:81:e5:5d:00:e0:
e8:3b:e9:08:4d:1d:a7:40:50:ea:0f:5f:b7:98:48:
fa:b8:62:b7:fb:03:88:c1:13:56:93:af:92:f6:8f:
a3:3c:22:aa:4c:18:8e:74:2c:82:db:e8:05:77:24:
e4:c4:7b:ac:12:57:6d:55:af:f6:cd:5a:43:35:ee:
e3:dc:2b:e9:da:48:a9:4b:e7:9c:41:9d:74:09:72:
1b:2b:fc:4f:b9:2a:75:27:0f:fb:0c:3f:ba:85:89:
69:9b:0c:b1:03:de:8a:c7:8e:e3:af:f8:42:55:2c:
38:08:6d:d4:3f:69:38:07:63:32:e0:e6:80:61:ab:
15:1f:43:2f:5a:72:8d:39:24:af:f0:d2:d5:5e:93:
11:0f:ef:a3:65:95:b1:3e:70:bb:74:e2:aa:40:65:
b6:6b:4f:38:1b:40:21:dd:cd:ad:ff:6c:00:fc:74:
b2:66:81:aa:d7:e6:23:89:3a:e7:0a:2f:5f:85:90:
70:aa:30:6e:08:a8:5e:7c:f6:06:90:35:96:31:ea:
58:bc:4f:b5:69:ee:68:e7:47:8b:f5:c1:d0:54:69:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:97:DE:4D:F4:63:34:39:56:B9:1E:0A:BB:D8:DD:58:38:C5:FF:9A
X509v3 Authority Key Identifier:
keyid:26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:66:a6:5a:bc:c0:f6:20:8e:0d:7c:2d:72:b2:8f:cc:20:13:
c1:39:d3:9f:4f:a5:28:8b:b7:02:97:9a:f3:d9:fd:7c:70:0f:
41:20:fc:1c:66:ba:39:25:32:a3:19:49:47:f5:af:43:0d:db:
3f:b0:ec:73:2a:64:4a:16:81:d5:5e:d9:d2:ec:7a:d2:13:cf:
f1:00:54:81:b6:99:80:97:90:79:22:10:a1:88:7e:ac:dd:68:
cf:75:45:4e:40:5e:23:02:09:26:09:88:c2:2f:df:f9:ac:29:
49:4a:21:69:69:b3:64:ef:02:aa:2b:ea:c5:ee:85:d3:ae:72:
48:6b:7d:50:13:f9:f6:eb:9a:ab:ac:d4:11:1c:70:50:d6:eb:
5c:11:8a:4f:7e:6b:88:40:99:0d:cb:a0:53:75:86:9e:41:2f:
dc:68:e7:00:f5:3f:77:c8:ad:e8:99:0c:67:19:60:6f:6e:bf:
5c:e5:9a:93:67:76:bc:32:7f:77:44:96:5e:17:a7:20:d4:29:
0a:45:31:4c:77:b2:16:42:35:fd:02:96:d8:39:92:fb:8a:2b:
bd:d2:e9:cb:10:6a:aa:76:71:50:c9:b7:41:68:eb:53:0d:7b:
65:3d:c7:25:38:c2:bf:5f:c9:fc:a1:43:31:cc:9e:d1:87:0b:
db:e7:6e:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbNYbKwtzifmOH6wSlU6GRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjM4YzJjYjdiODYwY2QzNjk2NzljNGQwNWQ1MGY3MDVl
MDQ2MjkwHhcNMjUwNTE0MDYwMDU0WhcNMjUwNTE1MDYwMDU0WjAzMTEwLwYDVQQD
EygzNzk3ZGU0ZGY0NjMzNDM5NTZiOTFlMGFiYmQ4ZGQ1ODM4YzVmZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcCAb91PjC7PAChFF4ApTp6GTVNP
O8d1b91eokcu6i2UGv8x94jggeVdAODoO+kITR2nQFDqD1+3mEj6uGK3+wOIwRNW
k6+S9o+jPCKqTBiOdCyC2+gFdyTkxHusEldtVa/2zVpDNe7j3Cvp2kipS+ecQZ10
CXIbK/xPuSp1Jw/7DD+6hYlpmwyxA96Kx47jr/hCVSw4CG3UP2k4B2My4OaAYasV
H0MvWnKNOSSv8NLVXpMRD++jZZWxPnC7dOKqQGW2a084G0Ah3c2t/2wA/HSyZoGq
1+YjiTrnCi9fhZBwqjBuCKhefPYGkDWWMepYvE+1ae5o50eL9cHQVGmXjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeX3k30YzQ5VrkeCrvY3Vg4xf+aMB8GA1UdIwQY
MBaAFCZjjCy3uGDNNpZ5xNBdUPcF4EYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1PTUxMZTRZTTAybG5uRTBGMVE5d1hnUmlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kOTZmNjktZWYxNC00MjI3LTg4OTgt
M2U1N2NjNTJjODRlLzEvSm1PTUxMZTRZTTAybG5uRTBGMVE5d1hnUmlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kOTZmNjktZWYxNC00MjI3LTg4OTgtM2U1N2NjNTJjODRl
LzEvSm1PTUxMZTRZTTAybG5uRTBGMVE5d1hnUmlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2amWrzA
9iCODXwtcrKPzCATwTnTn0+lKIu3Apea89n9fHAPQSD8HGa6OSUyoxlJR/WvQw3b
P7DscypkShaB1V7Z0ux60hPP8QBUgbaZgJeQeSIQoYh+rN1oz3VFTkBeIwIJJgmI
wi/f+awpSUohaWmzZO8Cqivqxe6F065ySGt9UBP59uuaq6zUERxwUNbrXBGKT35r
iECZDcugU3WGnkEv3GjnAPU/d8it6JkMZxlgb26/XOWak2d2vDJ/d0SWXhenINQp
CkUxTHeyFkI1/QKW2DmS+4orvdLpyxBqqnZxUMm3QWjrUw17ZT3HJTjCv1/J/KFD
Mcye0YcL2+dudg==
-----END CERTIFICATE-----
Generated at Wed May 14 12:43:07 2025 by rpki-client