Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier: q0uqEC5gCwN6IOAUL/Ug6V6lLbkYR0u/lkFGlQCWpzE=
Subject key identifier: 5B:55:D5:CA:0F:EA:5B:53:D3:2A:78:E0:8E:FE:89:43:21:5D:56:C7
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 0196B4B43F5CE4B1183D98658F75C926FFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number: 063E
Signing time: Fri 09 May 2025 11:00:33 +0000
Manifest this update: Fri 09 May 2025 11:00:33 +0000
Manifest next update: Sat 10 May 2025 11:00:33 +0000
Files and hashes: 1: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: gJxNa/NUrW3GpRro46LVvW5fi2hxqp//PhN7lbw+wOU=)
2: wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa (hash: 6BF3Tz98RJ+JLDH8H1TR0fBCjZa59O91O2lzWujL8yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:3f:5c:e4:b1:18:3d:98:65:8f:75:c9:26:ff:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: May 9 11:00:33 2025 GMT
Not After : May 10 11:00:33 2025 GMT
Subject: CN=5b55d5ca0fea5b53d32a78e08efe8943215d56c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:6d:8e:fd:55:ff:a5:11:33:b0:5e:63:bc:
45:ea:e5:de:e5:be:0b:d6:82:65:2a:b1:4c:13:d1:
a2:76:23:1e:3d:45:96:1c:f3:ae:7b:26:c0:7c:7a:
91:28:e2:de:49:c4:0a:ab:e8:03:2c:b7:be:e9:55:
69:74:b8:bf:9c:ea:62:b0:66:5a:f6:84:a6:34:ae:
87:43:67:dc:dc:6f:31:81:bc:47:0f:b3:1c:19:4c:
6f:3b:35:f2:74:17:a9:a4:bd:1e:30:b8:8a:88:6b:
20:d1:ac:e7:b1:cf:17:f1:fb:27:76:66:54:b4:12:
8e:f7:52:61:c2:88:a7:30:18:be:d8:e6:01:36:f4:
91:c7:94:36:ee:d7:b5:48:eb:58:59:93:0d:8d:ac:
77:8d:0d:b7:16:ac:c3:14:cf:87:c2:21:f4:81:0d:
04:e3:ee:a6:22:e5:fa:a3:5e:12:ca:52:c5:1c:ff:
93:39:8e:59:38:e2:fe:50:67:be:c5:8f:28:2e:de:
8a:d1:78:58:f0:91:1e:2b:4d:b8:5c:1a:af:7e:d9:
2e:83:af:42:24:87:6b:ba:da:09:d8:59:6b:5a:1f:
b1:f0:9b:81:c5:55:a0:7b:5e:77:49:6f:fe:95:9f:
1a:95:0d:b8:1a:0a:b8:de:3c:65:49:12:83:7e:d5:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:55:D5:CA:0F:EA:5B:53:D3:2A:78:E0:8E:FE:89:43:21:5D:56:C7
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:71:b4:df:10:b8:f0:d9:9b:aa:c6:c0:83:95:87:81:79:3a:
b1:c3:de:96:85:9a:13:2f:01:37:77:2b:30:2a:13:b2:73:21:
b4:81:97:ff:6b:ad:a2:ce:02:16:70:db:d0:5b:0f:93:0f:18:
fd:13:61:66:2c:ed:8a:80:f9:19:04:bd:62:0c:f0:c0:ca:b8:
3b:5f:dc:e6:65:5d:b5:b7:d5:2e:b5:46:7b:16:43:48:0c:af:
31:c3:43:71:a8:74:c4:a6:0e:4c:b1:f7:12:6b:41:ab:45:32:
f7:da:aa:a1:33:c8:0d:d9:55:71:1b:6b:28:5e:cb:71:dc:10:
1a:f4:b1:26:1d:90:0b:cd:89:1b:82:6b:4d:ef:85:88:5f:30:
87:81:14:d6:2b:e1:97:25:4d:d3:11:ec:ea:88:db:76:cf:38:
56:c7:11:27:2a:67:81:61:76:a9:d4:76:f8:8a:db:b8:dd:f7:
bb:04:44:59:2e:26:c6:5c:95:79:b7:28:61:37:95:0d:a2:eb:
89:93:64:83:51:d5:76:b1:6b:6a:d1:9b:27:b9:73:88:ce:c9:
4a:9d:46:d4:56:4a:17:95:e0:c5:30:bc:8a:c3:ed:b8:e4:58:
69:f8:48:df:ce:14:59:35:26:0a:92:15:09:0e:59:89:95:52:
c8:51:eb:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0tD9c5LEYPZhlj3XJJv/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMTk1YzE2MzJhYTliMDI0ZTI4YmZmMjJlYzZmMGE3ZTI3
NzYwYTcwHhcNMjUwNTA5MTEwMDMzWhcNMjUwNTEwMTEwMDMzWjAzMTEwLwYDVQQD
Eyg1YjU1ZDVjYTBmZWE1YjUzZDMyYTc4ZTA4ZWZlODk0MzIxNWQ1NmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RVtjv1V/6URM7BeY7xF6uXe5b4L
1oJlKrFME9GidiMePUWWHPOueybAfHqRKOLeScQKq+gDLLe+6VVpdLi/nOpisGZa
9oSmNK6HQ2fc3G8xgbxHD7McGUxvOzXydBeppL0eMLiKiGsg0aznsc8X8fsndmZU
tBKO91JhwoinMBi+2OYBNvSRx5Q27te1SOtYWZMNjax3jQ23FqzDFM+HwiH0gQ0E
4+6mIuX6o14SylLFHP+TOY5ZOOL+UGe+xY8oLt6K0XhY8JEeK024XBqvftkug69C
JIdrutoJ2FlrWh+x8JuBxVWge153SW/+lZ8alQ24Ggq43jxlSRKDftXC1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtV1coP6ltT0yp44I7+iUMhXVbHMB8GA1UdIwQY
MBaAFI4ZXBYyqpsCTii/8i7G8Kfid2CnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhsY0ZqS3Ftd0pPS0xfeUxzYndwLUozWUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDdhNjQtMzAxYS00OWU3LWFjNjUt
ZWFkODA5MWRiYzEzLzEvamhsY0ZqS3Ftd0pPS0xfeUxzYndwLUozWUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jZDdhNjQtMzAxYS00OWU3LWFjNjUtZWFkODA5MWRiYzEz
LzEvamhsY0ZqS3Ftd0pPS0xfeUxzYndwLUozWUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnG03xC4
8NmbqsbAg5WHgXk6scPeloWaEy8BN3crMCoTsnMhtIGX/2utos4CFnDb0FsPkw8Y
/RNhZiztioD5GQS9YgzwwMq4O1/c5mVdtbfVLrVGexZDSAyvMcNDcah0xKYOTLH3
EmtBq0Uy99qqoTPIDdlVcRtrKF7LcdwQGvSxJh2QC82JG4JrTe+FiF8wh4EU1ivh
lyVN0xHs6ojbds84VscRJypngWF2qdR2+IrbuN33uwREWS4mxlyVebcoYTeVDaLr
iZNkg1HVdrFratGbJ7lziM7JSp1G1FZKF5XgxTC8isPtuORYafhI384UWTUmCpIV
CQ5ZiZVSyFHrUw==
-----END CERTIFICATE-----
Generated at Fri May 9 17:03:43 2025 by rpki-client