Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
File: ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft (raw, json)
Hash identifier: 7Z54fYcogfAMXiNLMuBf21pjYeidA7A/+aO4IdOrz8Y=
Subject key identifier: 0B:6F:4B:88:F9:F2:9E:83:BA:DD:0A:4A:19:F4:48:63:47:AA:5B:6E
Authority key identifier: 8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
Certificate issuer: /CN=8dad9277ba91819eb734924c125f876a41659eab
Certificate serial: 0196A277902CB4E65F3675DE8F77776E486F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
Manifest number: 0EDB
Signing time: Mon 05 May 2025 22:01:06 +0000
Manifest this update: Mon 05 May 2025 22:01:06 +0000
Manifest next update: Tue 06 May 2025 22:01:06 +0000
Files and hashes: 1: ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl (hash: JryggHdwuXo+/QBbZsHTE5qV4KaMFOrPtV+KBcIILfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:90:2c:b4:e6:5f:36:75:de:8f:77:77:6e:48:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dad9277ba91819eb734924c125f876a41659eab
Validity
Not Before: May 5 22:01:06 2025 GMT
Not After : May 6 22:01:06 2025 GMT
Subject: CN=0b6f4b88f9f29e83badd0a4a19f4486347aa5b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:dd:1b:a5:87:27:fe:ad:a6:0e:f2:c5:9c:
1f:88:7e:e5:af:d3:2c:da:18:1d:98:12:6a:f9:04:
d9:cf:d5:6e:c5:5d:77:df:b2:40:07:27:11:13:44:
14:80:fc:03:a1:97:d5:00:f7:9c:77:4d:86:3c:4c:
1a:eb:bc:06:85:10:64:0b:55:e7:e4:0e:67:ae:85:
0e:66:5e:e9:a2:89:76:d9:30:24:04:e1:d7:c8:38:
84:e1:3c:53:63:f2:f0:d2:e0:74:50:03:69:f9:b5:
eb:f4:15:ac:2d:00:a9:f6:15:ea:ef:6a:9a:35:97:
03:7a:cb:81:3a:2b:4d:09:fa:de:b2:d5:85:b8:f1:
2e:f5:e7:f9:60:51:a4:e2:fb:0f:7a:9b:6f:ac:6e:
f7:50:1e:cd:f3:cf:4c:c5:98:07:e7:6f:5e:59:6c:
f6:06:ac:c4:c0:62:f7:fa:1c:fe:45:98:3f:a9:ea:
e0:f7:3d:bd:78:80:9e:5b:4c:4a:b3:39:eb:a4:4d:
56:b4:43:20:90:58:af:ea:74:fc:2b:50:f1:ba:5a:
55:9d:eb:ee:2f:a9:95:ce:11:77:6f:1d:71:52:c9:
2e:cf:b2:7c:97:8b:20:a7:f2:66:93:1c:04:08:c3:
6b:52:0c:90:29:fa:01:b7:80:89:44:b9:13:64:b6:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6F:4B:88:F9:F2:9E:83:BA:DD:0A:4A:19:F4:48:63:47:AA:5B:6E
X509v3 Authority Key Identifier:
keyid:8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2f:97:ec:aa:ed:83:ec:6a:ee:0c:10:db:c1:3a:8f:d1:c6:
a8:be:c5:39:95:0a:9c:f5:14:93:57:82:1c:bf:06:3c:a1:b9:
34:39:84:04:85:85:9e:54:ea:8c:95:16:3e:c2:1d:c5:ca:ad:
06:81:46:01:18:8d:63:73:8b:30:e0:9a:04:5a:c7:60:34:c8:
6a:44:49:6d:31:a4:04:55:08:68:87:10:0b:8b:d7:cb:93:1a:
5f:7b:cf:f1:18:81:ea:5c:49:1c:61:37:23:c8:c6:08:d4:2d:
d6:be:fa:68:e2:81:30:a2:35:5e:d1:c7:72:89:bc:30:1f:4a:
1d:47:1b:d4:48:90:cd:bb:3b:3a:e0:13:e3:3e:06:25:1a:c3:
e8:ea:29:5c:0e:39:f1:11:61:f9:ca:90:bc:97:17:d8:d0:b3:
bf:8e:ff:87:09:d6:ba:98:56:08:4b:84:ea:fe:0a:97:58:25:
10:9d:c2:8d:ba:37:42:ad:bd:64:f2:c4:cd:73:1d:41:75:d8:
3b:12:04:cf:46:4a:61:cf:55:b3:55:76:66:26:2f:21:75:35:
65:1e:23:b7:0b:db:3d:34:f9:b0:16:8f:83:4e:44:d9:cc:3f:
84:25:c9:e6:75:7c:65:f5:0f:d7:01:fd:9a:10:e6:59:42:29:
5c:fd:78:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaid5AstOZfNnXej3d3bkhvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYWQ5Mjc3YmE5MTgxOWViNzM0OTI0YzEyNWY4NzZhNDE2
NTllYWIwHhcNMjUwNTA1MjIwMTA2WhcNMjUwNTA2MjIwMTA2WjAzMTEwLwYDVQQD
EygwYjZmNGI4OGY5ZjI5ZTgzYmFkZDBhNGExOWY0NDg2MzQ3YWE1YjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCDdG6WHJ/6tpg7yxZwfiH7lr9Ms
2hgdmBJq+QTZz9VuxV1337JABycRE0QUgPwDoZfVAPecd02GPEwa67wGhRBkC1Xn
5A5nroUOZl7pool22TAkBOHXyDiE4TxTY/Lw0uB0UANp+bXr9BWsLQCp9hXq72qa
NZcDesuBOitNCfrestWFuPEu9ef5YFGk4vsPeptvrG73UB7N889MxZgH529eWWz2
BqzEwGL3+hz+RZg/qerg9z29eICeW0xKsznrpE1WtEMgkFiv6nT8K1DxulpVnevu
L6mVzhF3bx1xUskuz7J8l4sgp/JmkxwECMNrUgyQKfoBt4CJRLkTZLYwOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtvS4j58p6Dut0KShn0SGNHqltuMB8GA1UdIwQY
MBaAFI2tkne6kYGetzSSTBJfh2pBZZ6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lY2IxZGEtYjgzNS00M2ZhLWI2MDIt
OTE0OWQzNDhhNmM3LzEvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lY2IxZGEtYjgzNS00M2ZhLWI2MDItOTE0OWQzNDhhNmM3
LzEvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIi+X7Krt
g+xq7gwQ28E6j9HGqL7FOZUKnPUUk1eCHL8GPKG5NDmEBIWFnlTqjJUWPsIdxcqt
BoFGARiNY3OLMOCaBFrHYDTIakRJbTGkBFUIaIcQC4vXy5MaX3vP8RiB6lxJHGE3
I8jGCNQt1r76aOKBMKI1XtHHcom8MB9KHUcb1EiQzbs7OuAT4z4GJRrD6OopXA45
8RFh+cqQvJcX2NCzv47/hwnWuphWCEuE6v4Kl1glEJ3Cjbo3Qq29ZPLEzXMdQXXY
OxIEz0ZKYc9Vs1V2ZiYvIXU1ZR4jtwvbPTT5sBaPg05E2cw/hCXJ5nV8ZfUP1wH9
mhDmWUIpXP149w==
-----END CERTIFICATE-----
Generated at Tue May 6 02:05:56 2025 by rpki-client