Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: 9xQtVUVT7RRZUOyRXQi7vsR9Ije/49twb5n5u9n/cUg=
Subject key identifier: 83:EF:74:23:CB:67:96:29:8E:5C:F0:15:8A:8B:27:E9:62:10:3F:6A
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 0196B5FDD37B2ECDFAC28EB754F3DAABCCDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 0EF8
Signing time: Fri 09 May 2025 17:00:32 +0000
Manifest this update: Fri 09 May 2025 17:00:32 +0000
Manifest next update: Sat 10 May 2025 17:00:32 +0000
Files and hashes: 1: 1-VympxjBDWi5MNPd5PqkAiFK8cw.roa (hash: g9oAglIOu05tbBj4MBirO8ol3RXV21sLtMa1CGtPD7w=)
2: Xb2vaf1WumE3rEaoURHut1_s3Jg.roa (hash: nAy8xAAS6bySEPJLqhsAFhoLRm4dRlqUVQKPoHtpfZc=)
3: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: L+w86i1+WbhRMbQr4rFzHYXy/MOuuIcN4cKGuTqQuzE=)
4: x-ypFNam44Ex8bmMEi_YpNw0fuw.roa (hash: tV3tXNlddvZJeiOgiT78kd/ynwSRXH2x5HrUpgSwbwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fd:d3:7b:2e:cd:fa:c2:8e:b7:54:f3:da:ab:cc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: May 9 17:00:32 2025 GMT
Not After : May 10 17:00:32 2025 GMT
Subject: CN=83ef7423cb6796298e5cf0158a8b27e962103f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:39:e1:00:ad:7f:ef:16:0b:6f:f5:56:b9:
3a:ed:46:5e:87:a5:3b:d8:ea:34:b4:65:b0:11:12:
9f:4f:a6:ce:93:44:68:37:f4:a3:25:e4:56:6b:54:
5a:e3:ba:9b:ea:9c:36:99:90:7c:67:03:23:08:84:
b4:20:d0:cc:51:a7:db:43:4b:00:91:a8:e5:6a:9e:
79:12:3d:09:dc:86:51:df:ff:e5:1d:28:64:17:1a:
70:90:10:8b:5e:be:c0:a4:e2:e2:a0:b7:7c:fb:2d:
64:e2:53:99:df:15:14:9f:1b:ba:f2:12:07:a9:73:
97:74:4f:57:16:a9:06:56:e2:72:34:87:71:05:e7:
29:8b:87:95:99:49:37:5b:66:44:f7:2d:f3:04:fc:
62:65:c9:08:07:a3:f9:24:ff:b2:57:64:0f:12:fd:
41:1c:13:e4:14:ab:e1:7a:18:33:b6:cb:20:23:a5:
87:5d:08:07:eb:87:7b:19:61:93:9b:83:58:1f:4d:
9b:92:44:44:f6:cc:89:12:a4:eb:cd:d4:16:c8:00:
a4:76:9a:7a:c9:24:a2:55:32:4c:65:87:54:f8:94:
fe:06:75:85:42:a6:21:aa:35:15:ec:80:de:4d:d3:
ee:b8:0e:c2:82:8d:9e:1b:d2:6b:1d:fb:36:8d:52:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EF:74:23:CB:67:96:29:8E:5C:F0:15:8A:8B:27:E9:62:10:3F:6A
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e7:80:d6:a4:d7:24:7a:28:05:31:36:f5:a8:83:15:9d:6c:
30:1e:6a:3d:a0:b8:bf:23:89:89:c3:1f:33:0e:05:ea:10:6a:
82:4e:bb:6d:e8:1a:28:33:72:72:35:c8:76:f1:67:0c:5b:81:
0a:70:3b:1f:c3:4a:94:b9:d5:9c:91:87:c5:2a:81:71:5a:e5:
5b:12:c8:35:6b:16:df:67:d6:f3:64:64:4c:fa:e2:87:b1:e2:
18:6a:51:b1:cd:fc:16:68:a8:58:25:6c:e8:dc:3c:41:dd:35:
8b:02:63:04:2c:8a:ce:d7:e0:5f:45:98:10:c7:a7:3d:8c:df:
1e:fd:8d:5d:89:38:cd:06:59:5a:ba:7f:d0:3d:a9:5a:32:51:
69:bb:f6:ea:bc:a2:54:38:ea:e6:e0:53:2c:bb:73:75:e9:41:
33:7a:06:fa:4a:82:9f:db:43:54:0c:0c:c5:fe:31:4c:ff:e9:
25:07:96:db:a8:6d:cc:29:97:3f:f2:56:05:2f:ea:42:2f:bd:
95:8f:ba:94:3f:3b:a6:62:fa:03:ca:f2:e7:96:a7:4f:75:e9:
ab:cb:4f:10:86:f7:41:a6:7b:db:78:d5:74:1a:d2:a3:83:0b:
d5:52:3c:f1:c6:e4:93:13:e8:c7:39:50:72:eb:c7:3a:3d:c7:
14:cc:28:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1/dN7Ls36wo63VPPaq8zdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy
MzZjY2IwHhcNMjUwNTA5MTcwMDMyWhcNMjUwNTEwMTcwMDMyWjAzMTEwLwYDVQQD
Eyg4M2VmNzQyM2NiNjc5NjI5OGU1Y2YwMTU4YThiMjdlOTYyMTAzZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Fg54QCtf+8WC2/1Vrk67UZeh6U7
2Oo0tGWwERKfT6bOk0RoN/SjJeRWa1Ra47qb6pw2mZB8ZwMjCIS0INDMUafbQ0sA
kajlap55Ej0J3IZR3//lHShkFxpwkBCLXr7ApOLioLd8+y1k4lOZ3xUUnxu68hIH
qXOXdE9XFqkGVuJyNIdxBecpi4eVmUk3W2ZE9y3zBPxiZckIB6P5JP+yV2QPEv1B
HBPkFKvhehgztssgI6WHXQgH64d7GWGTm4NYH02bkkRE9syJEqTrzdQWyACkdpp6
ySSiVTJMZYdU+JT+BnWFQqYhqjUV7IDeTdPuuA7Cgo2eG9JrHfs2jVKFewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPvdCPLZ5YpjlzwFYqLJ+liED9qMB8GA1UdIwQY
MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt
YTEwMjhlZGE2MzgzLzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz
LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOeA1qTX
JHooBTE29aiDFZ1sMB5qPaC4vyOJicMfMw4F6hBqgk67begaKDNycjXIdvFnDFuB
CnA7H8NKlLnVnJGHxSqBcVrlWxLINWsW32fW82RkTPrih7HiGGpRsc38FmioWCVs
6Nw8Qd01iwJjBCyKztfgX0WYEMenPYzfHv2NXYk4zQZZWrp/0D2pWjJRabv26ryi
VDjq5uBTLLtzdelBM3oG+kqCn9tDVAwMxf4xTP/pJQeW26htzCmXP/JWBS/qQi+9
lY+6lD87pmL6A8ry55anT3Xpq8tPEIb3QaZ723jVdBrSo4ML1VI88cbkkxPoxzlQ
cuvHOj3HFMwoLQ==
-----END CERTIFICATE-----
Generated at Fri May 9 23:53:12 2025 by rpki-client