Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
File: J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json)
Hash identifier: tinKZalwRWkCpWFh9SM+ShSiggtpjPbD6x6OJzlV5ko=
Subject key identifier: 49:54:D0:BB:18:87:5D:3A:C7:4D:CA:73:A7:ED:7D:17:31:99:B4:04
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial: 0196BDB742693BDE58EE1AA307B42C09BB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 05:00:25 +0000
Manifest this update: Sun 11 May 2025 05:00:25 +0000
Manifest next update: Mon 12 May 2025 05:00:25 +0000
Files and hashes: 1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: wiMec+MOsa/QkqVSOyj1jrSK0IE7vayANys8P1uVtGY=)
2: hwA0UWKL_slMireOaLXKWCZKMxk.roa (hash: Cs+6QJ4Ir+A+/zhLEyGmKYQ1SWGWIXNvlkhllKogGis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:42:69:3b:de:58:ee:1a:a3:07:b4:2c:09:bb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Validity
Not Before: May 11 05:00:25 2025 GMT
Not After : May 12 05:00:25 2025 GMT
Subject: CN=4954d0bb18875d3ac74dca73a7ed7d173199b404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:1b:90:3f:27:1e:55:e3:cb:64:22:0a:e0:
4a:cd:64:a2:48:e8:1c:92:8d:ee:e9:b1:78:57:1e:
ed:dc:8e:23:e8:df:f6:cf:5d:70:91:7b:c6:89:9f:
8b:7d:1a:58:74:b0:63:79:70:d7:5c:08:25:ed:06:
93:d6:43:68:2a:cb:e8:49:15:48:08:75:0e:0f:c9:
f4:3e:ac:5f:d3:a3:b6:95:31:98:21:82:e6:d5:1d:
fa:ad:df:8e:03:56:26:c6:80:83:6b:ae:f6:9e:e8:
e7:cc:9b:76:77:67:1a:0a:17:35:5e:fb:03:64:eb:
0d:42:61:08:46:d7:ee:54:b7:96:f4:73:62:65:d8:
5b:36:00:04:6d:26:74:d8:ee:5e:7f:e4:74:db:e9:
ca:6a:0a:3f:f4:dd:81:fb:5d:f5:c5:39:b0:ba:6f:
7b:f0:7f:36:6f:5d:f0:9f:c8:3d:ba:f2:01:52:09:
d0:c9:9a:ae:b0:48:f6:f9:bd:3c:29:9d:94:57:46:
f9:b0:16:1b:88:ba:4d:d0:ef:72:59:4a:10:5c:2c:
17:bb:9f:59:9b:75:6d:43:e3:92:c4:4a:55:5f:2e:
fe:26:d6:39:66:2b:25:15:9e:48:08:36:19:7e:00:
10:16:5c:ba:ef:c5:7b:00:5b:c2:9a:68:1e:bd:d6:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:D0:BB:18:87:5D:3A:C7:4D:CA:73:A7:ED:7D:17:31:99:B4:04
X509v3 Authority Key Identifier:
keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:46:b9:f8:57:00:c2:07:47:e0:9f:6c:41:02:25:5a:97:d4:
4f:73:31:92:a3:1e:6a:bc:7a:95:39:53:73:01:aa:84:f8:e1:
a3:8f:14:7c:1f:dc:59:a7:e1:05:dd:4c:43:b3:bd:3f:b6:48:
34:bb:f3:e1:5e:27:d5:22:00:2f:f8:8e:7e:7b:5c:a8:ec:00:
de:8a:c5:77:4e:fc:21:a2:cd:72:49:53:84:25:14:86:05:21:
16:ea:04:c8:64:5b:9a:8b:a5:48:77:1c:c9:02:bf:a2:33:1a:
4c:7b:01:c2:90:cc:02:12:50:4d:29:fb:57:db:63:fe:74:53:
d0:88:3e:0b:01:3e:f5:9b:c8:c7:52:f3:34:5d:46:4c:9f:36:
8a:0b:51:89:38:71:71:e0:a6:33:73:75:62:d3:0c:94:33:93:
c8:bb:77:7a:e7:f8:62:0d:76:57:5e:fe:22:09:4c:f9:08:7d:
a1:75:20:97:a7:4b:e1:73:e4:5d:0a:96:60:f5:ea:b8:31:4c:
13:0c:3e:e5:e2:7e:6e:ec:03:df:07:5d:2d:cc:e8:9f:81:2f:
aa:7e:13:6e:0e:37:8b:11:60:88:41:19:a2:4f:a2:61:3a:a7:
00:4d:8b:2b:b7:ad:ac:57:8c:f2:11:ee:4a:82:85:37:e9:10:
38:ea:18:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9t0JpO95Y7hqjB7QsCbsLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODkwMWMwNjFhMzU1YTNmZGFhY2UwYzgwYjk2N2FkMWNk
MzcxN2EwHhcNMjUwNTExMDUwMDI1WhcNMjUwNTEyMDUwMDI1WjAzMTEwLwYDVQQD
Eyg0OTU0ZDBiYjE4ODc1ZDNhYzc0ZGNhNzNhN2VkN2QxNzMxOTliNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06kbkD8nHlXjy2QiCuBKzWSiSOgc
ko3u6bF4Vx7t3I4j6N/2z11wkXvGiZ+LfRpYdLBjeXDXXAgl7QaT1kNoKsvoSRVI
CHUOD8n0Pqxf06O2lTGYIYLm1R36rd+OA1YmxoCDa672nujnzJt2d2caChc1XvsD
ZOsNQmEIRtfuVLeW9HNiZdhbNgAEbSZ02O5ef+R02+nKago/9N2B+131xTmwum97
8H82b13wn8g9uvIBUgnQyZqusEj2+b08KZ2UV0b5sBYbiLpN0O9yWUoQXCwXu59Z
m3VtQ+OSxEpVXy7+JtY5ZislFZ5ICDYZfgAQFly678V7AFvCmmgevdY84QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElU0LsYh106x03Kc6ftfRcxmbQEMB8GA1UdIwQY
MBaAFCeJAcBho1Wj/arODIC5Z60c03F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85MDI1OTktNDhkNi00YTg5LTg3MjQt
OWM3YTdiY2FhZjM2LzEvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85MDI1OTktNDhkNi00YTg5LTg3MjQtOWM3YTdiY2FhZjM2
LzEvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJka5+FcA
wgdH4J9sQQIlWpfUT3MxkqMearx6lTlTcwGqhPjho48UfB/cWafhBd1MQ7O9P7ZI
NLvz4V4n1SIAL/iOfntcqOwA3orFd078IaLNcklThCUUhgUhFuoEyGRbmoulSHcc
yQK/ojMaTHsBwpDMAhJQTSn7V9tj/nRT0Ig+CwE+9ZvIx1LzNF1GTJ82igtRiThx
ceCmM3N1YtMMlDOTyLt3euf4Yg12V17+IglM+Qh9oXUgl6dL4XPkXQqWYPXquDFM
Eww+5eJ+buwD3wddLczon4Evqn4Tbg43ixFgiEEZok+iYTqnAE2LK7etrFeM8hHu
SoKFN+kQOOoYtg==
-----END CERTIFICATE-----
Generated at Sun May 11 12:43:24 2025 by rpki-client