Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: IU9LXLhPsxb5BytXzNmM54CDbpgn3rXyIlwyq86tBok=
Subject key identifier: 55:3E:E9:93:05:65:5A:99:47:99:2D:C8:D5:AF:41:CB:E4:70:A5:41
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 0196AFFB7131249047868EF91EC2557BAB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 152A
Signing time: Thu 08 May 2025 13:00:13 +0000
Manifest this update: Thu 08 May 2025 13:00:13 +0000
Manifest next update: Fri 09 May 2025 13:00:13 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: um7VzKwi0rwx/GNdcqVRoaOEhm8BxF6lBekMNv0tv1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fb:71:31:24:90:47:86:8e:f9:1e:c2:55:7b:ab:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: May 8 13:00:13 2025 GMT
Not After : May 9 13:00:13 2025 GMT
Subject: CN=553ee99305655a9947992dc8d5af41cbe470a541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:1e:90:c7:79:eb:0a:e6:0c:7e:ab:f6:ab:
6d:7b:8f:1d:71:fc:79:a4:27:0e:95:bf:c8:06:a8:
be:8d:06:bf:ab:36:b3:2a:5e:8b:9a:c1:a7:93:29:
c4:b7:c3:34:61:bd:51:78:49:d3:06:54:31:14:7a:
90:84:5b:76:64:0e:75:c5:79:a7:20:f8:d8:0a:7d:
6a:a4:88:ab:5d:b9:ed:84:81:f9:0d:7c:cd:39:6c:
a8:ce:ac:e0:40:b7:7a:4d:06:1c:fb:98:c3:7e:3a:
e7:40:b4:17:7b:43:e6:b7:6d:b4:98:33:22:f6:00:
58:e6:c7:17:ae:34:ec:af:b7:27:bd:fb:d5:5f:b3:
c4:b7:be:d8:61:51:63:e4:dd:40:6e:3e:8c:31:c7:
21:16:a3:96:56:26:60:93:54:a8:f7:86:0c:21:29:
0a:a9:c7:42:6b:d0:ad:c3:dc:c5:89:2d:61:5e:78:
c4:7d:cd:21:c2:31:92:54:27:9e:fa:78:ca:24:20:
99:bf:26:95:83:6b:30:99:e5:e9:3d:48:d9:ab:0d:
9c:28:fd:f2:44:b0:d4:df:d7:45:3a:e7:9c:bf:78:
a2:98:ee:33:bc:fc:64:d3:74:b6:39:6a:bb:1b:90:
14:1b:2d:4d:44:b1:23:86:84:5c:8c:30:46:b5:b8:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3E:E9:93:05:65:5A:99:47:99:2D:C8:D5:AF:41:CB:E4:70:A5:41
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:42:c2:77:94:0e:89:59:e4:20:6a:1d:96:a3:64:c8:e2:65:
39:94:f8:00:51:fb:ec:cc:49:87:41:c2:b1:8b:dd:91:32:98:
f2:ac:09:ea:9c:67:89:01:81:13:27:28:0a:1d:df:88:57:65:
60:6e:9c:48:13:ee:12:42:23:46:f9:c3:6c:31:81:7c:05:d8:
d2:e0:40:66:8c:66:95:f2:6b:af:18:de:32:8e:d3:3b:3c:0d:
0c:a3:6b:c9:24:af:70:02:b3:34:9e:2e:8e:4c:e4:74:d1:54:
f8:1d:26:33:10:2c:1d:2b:83:1a:e2:06:f5:ad:17:28:cb:53:
1c:a0:b6:e1:78:69:94:dc:4f:c8:6a:51:1a:91:92:9b:fe:1d:
e1:7e:31:0d:fe:cf:85:be:9a:8f:78:f6:a8:c2:63:64:db:ff:
e7:0f:f1:34:41:65:29:f5:ce:37:88:c6:cb:2c:e6:a4:cf:ae:
11:f4:c0:ab:f1:20:c5:6f:89:12:f1:34:47:81:d6:a7:61:9c:
d0:40:55:42:3c:83:09:29:94:d1:82:86:c6:bc:0c:a1:5b:4e:
3d:a2:21:92:30:2c:49:17:c6:e2:8a:2b:a9:57:b2:69:48:3a:
13:6f:97:68:88:63:74:90:93:e7:d3:90:98:d2:36:a3:5b:c3:
36:99:91:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZav+3ExJJBHho75HsJVe6uXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNzE2YzVhM2Y4NTM0ZTZhMjdkMzA0ZDg4MzBiYzAzMTE5
YTRjNWQwHhcNMjUwNTA4MTMwMDEzWhcNMjUwNTA5MTMwMDEzWjAzMTEwLwYDVQQD
Eyg1NTNlZTk5MzA1NjU1YTk5NDc5OTJkYzhkNWFmNDFjYmU0NzBhNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ4ekMd56wrmDH6r9qtte48dcfx5
pCcOlb/IBqi+jQa/qzazKl6LmsGnkynEt8M0Yb1ReEnTBlQxFHqQhFt2ZA51xXmn
IPjYCn1qpIirXbnthIH5DXzNOWyozqzgQLd6TQYc+5jDfjrnQLQXe0Pmt220mDMi
9gBY5scXrjTsr7cnvfvVX7PEt77YYVFj5N1Abj6MMcchFqOWViZgk1So94YMISkK
qcdCa9Ctw9zFiS1hXnjEfc0hwjGSVCee+njKJCCZvyaVg2swmeXpPUjZqw2cKP3y
RLDU39dFOuecv3iimO4zvPxk03S2OWq7G5AUGy1NRLEjhoRcjDBGtbgPhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFU+6ZMFZVqZR5ktyNWvQcvkcKVBMB8GA1UdIwQY
MBaAFI1xbFo/hTTmon0wTYgwvAMRmkxdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTct
MjEwZTM4ZGEwYjRlLzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTctMjEwZTM4ZGEwYjRl
LzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAELCd5QO
iVnkIGodlqNkyOJlOZT4AFH77MxJh0HCsYvdkTKY8qwJ6pxniQGBEycoCh3fiFdl
YG6cSBPuEkIjRvnDbDGBfAXY0uBAZoxmlfJrrxjeMo7TOzwNDKNrySSvcAKzNJ4u
jkzkdNFU+B0mMxAsHSuDGuIG9a0XKMtTHKC24XhplNxPyGpRGpGSm/4d4X4xDf7P
hb6aj3j2qMJjZNv/5w/xNEFlKfXON4jGyyzmpM+uEfTAq/EgxW+JEvE0R4HWp2Gc
0EBVQjyDCSmU0YKGxrwMoVtOPaIhkjAsSRfG4oorqVeyaUg6E2+XaIhjdJCT59OQ
mNI2o1vDNpmR4A==
-----END CERTIFICATE-----
Generated at Thu May 8 18:37:31 2025 by rpki-client