Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: P+WtcJbJlWbrV5FZ6AHW0Q6//XMX6/xnSk4XavPXabk=
Subject key identifier: F4:34:48:1B:7D:C0:56:0E:6B:A5:3F:52:62:16:F0:A4:FF:61:A2:BB
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 01969D5115E0F250CAF06CCBE5A1D3569E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 1523
Signing time: Sun 04 May 2025 22:00:58 +0000
Manifest this update: Sun 04 May 2025 22:00:58 +0000
Manifest next update: Mon 05 May 2025 22:00:58 +0000
Files and hashes: 1: Kvwz7Otgc_2cfxtWv-qyiSeDnkI.roa (hash: /Av0G+E+eRmfEHS46xLPNhTCJCoxta+3DzTycHIkaZ4=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: OgZXshbHa1THXUzAb60J0FVWl3zkCtoSsKSFjuQjN7U=)
3: jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa (hash: pk7j7TBSzPnMDTNnJGvz2FoxttkV1MmZfvsZ3NtTMUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:51:15:e0:f2:50:ca:f0:6c:cb:e5:a1:d3:56:9e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: May 4 22:00:58 2025 GMT
Not After : May 5 22:00:58 2025 GMT
Subject: CN=f434481b7dc0560e6ba53f526216f0a4ff61a2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:b6:dc:b1:6a:dc:63:43:cf:06:44:e0:72:
65:9d:c7:bd:8f:50:4e:01:ff:ef:3e:bf:5a:14:fe:
97:44:b1:61:7b:81:ff:b0:12:b7:e0:99:97:36:a5:
c8:a6:b4:6c:36:d8:5d:bb:e3:f9:98:7e:97:a6:06:
06:87:db:6b:c0:a7:de:52:0e:93:73:6c:3d:18:3a:
a8:de:39:60:30:c6:ee:42:57:2d:4a:59:80:8e:4c:
7a:a0:56:4e:65:ca:35:09:22:d9:39:75:99:80:0f:
3a:84:36:57:2d:ea:ab:f5:4b:49:85:6c:3c:42:0a:
99:67:2c:55:fb:c3:b0:91:67:5c:52:5f:91:be:b7:
9c:37:8c:3b:25:ea:2b:8f:a0:34:0b:a3:7f:53:17:
a2:cb:0a:8e:5d:36:49:5b:82:8f:eb:37:d7:f5:d5:
8b:81:9a:f2:7a:8e:38:cf:71:e5:6a:05:29:53:28:
f5:13:f4:78:e4:3d:bb:c4:aa:29:68:57:af:f5:be:
96:f5:6b:3a:95:f5:48:24:86:53:6c:89:23:7e:ef:
2a:b3:7f:bf:00:ea:4d:37:2a:20:94:fe:3e:d9:7f:
db:dc:2d:9c:b6:b7:aa:91:49:4e:52:6c:7d:de:35:
41:a8:bb:e1:66:1e:5b:7f:a4:6f:a7:89:1f:22:ba:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:34:48:1B:7D:C0:56:0E:6B:A5:3F:52:62:16:F0:A4:FF:61:A2:BB
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:db:67:20:26:f4:af:70:b2:a3:3a:7c:83:db:6d:5d:e6:41:
0e:0f:72:c8:39:d5:d8:7a:79:9d:92:16:c5:57:92:5d:8b:8d:
ba:ba:16:4b:6d:43:35:17:3c:9f:7b:41:04:85:ce:3a:66:30:
2a:83:b7:5f:b2:55:de:34:b3:0a:94:39:db:41:a2:76:ea:18:
00:ca:b7:51:59:7e:88:e6:10:b2:9b:ec:16:45:58:41:e6:95:
03:01:ba:32:a9:8b:c9:d7:d7:6f:8a:c5:82:f6:57:64:4a:0c:
0f:16:2d:ed:8a:5c:57:6d:89:af:b1:aa:a1:08:5c:be:3e:d7:
33:5e:bb:30:59:ff:3a:de:c0:85:18:09:d6:a3:52:32:73:6d:
f3:4f:53:2b:8f:ac:d6:ba:e0:4f:db:e9:7f:3b:46:85:f3:51:
18:f0:cb:22:8e:ad:aa:ff:0c:e8:20:57:39:ee:9d:d9:fa:c2:
a9:1a:10:94:ea:29:8f:28:4c:bd:46:09:4e:ed:02:e5:34:70:
45:29:bc:78:42:18:9d:1c:d6:cc:59:4c:2e:fe:23:a4:ee:aa:
00:83:cf:e7:0c:d1:4a:b3:5b:73:57:05:ea:d1:9b:af:95:ff:
f0:af:31:c4:46:de:6d:3a:04:29:e6:cd:81:ca:16:19:b9:f1:
ff:a3:45:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadURXg8lDK8GzL5aHTVp4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlM2IwMzg1MjYwYWM2NmYyMWM0M2Y1YWI3OGJhYzY4MmU4
Y2U1NGYwHhcNMjUwNTA0MjIwMDU4WhcNMjUwNTA1MjIwMDU4WjAzMTEwLwYDVQQD
EyhmNDM0NDgxYjdkYzA1NjBlNmJhNTNmNTI2MjE2ZjBhNGZmNjFhMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmW23LFq3GNDzwZE4HJlnce9j1BO
Af/vPr9aFP6XRLFhe4H/sBK34JmXNqXIprRsNthdu+P5mH6XpgYGh9trwKfeUg6T
c2w9GDqo3jlgMMbuQlctSlmAjkx6oFZOZco1CSLZOXWZgA86hDZXLeqr9UtJhWw8
QgqZZyxV+8OwkWdcUl+RvrecN4w7Jeorj6A0C6N/UxeiywqOXTZJW4KP6zfX9dWL
gZryeo44z3HlagUpUyj1E/R45D27xKopaFev9b6W9Ws6lfVIJIZTbIkjfu8qs3+/
AOpNNyoglP4+2X/b3C2ctreqkUlOUmx93jVBqLvhZh5bf6Rvp4kfIrquOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ0SBt9wFYOa6U/UmIW8KT/YaK7MB8GA1UdIwQY
MBaAFP47A4UmCsZvIcQ/WreLrGgujOVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pzRGhTWUt4bThoeEQ5YXQ0dXNhQzZNNVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMmZmZDktNzQ1ZC00ZTdkLWIyYjIt
NzUwMzNmOGY3MjEwLzEvX2pzRGhTWUt4bThoeEQ5YXQ0dXNhQzZNNVU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMmZmZDktNzQ1ZC00ZTdkLWIyYjItNzUwMzNmOGY3MjEw
LzEvX2pzRGhTWUt4bThoeEQ5YXQ0dXNhQzZNNVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNtnICb0
r3Cyozp8g9ttXeZBDg9yyDnV2Hp5nZIWxVeSXYuNuroWS21DNRc8n3tBBIXOOmYw
KoO3X7JV3jSzCpQ520GiduoYAMq3UVl+iOYQspvsFkVYQeaVAwG6MqmLydfXb4rF
gvZXZEoMDxYt7YpcV22Jr7GqoQhcvj7XM167MFn/Ot7AhRgJ1qNSMnNt809TK4+s
1rrgT9vpfztGhfNRGPDLIo6tqv8M6CBXOe6d2frCqRoQlOopjyhMvUYJTu0C5TRw
RSm8eEIYnRzWzFlMLv4jpO6qAIPP5wzRSrNbc1cF6tGbr5X/8K8xxEbebToEKebN
gcoWGbnx/6NFvA==
-----END CERTIFICATE-----
Generated at Mon May 5 05:23:01 2025 by rpki-client