Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: zVWQMWkzxLUef/TlD0d7U3Hn1qfHYlTortwcYOiwyIY=
Subject key identifier: 68:4F:0A:9F:D2:03:37:AD:DC:64:30:D5:78:68:C9:5F:1B:CD:48:53
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 0196B10EAC4D2171EEF02E4DE80C89601C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 0644
Signing time: Thu 08 May 2025 18:00:50 +0000
Manifest this update: Thu 08 May 2025 18:00:50 +0000
Manifest next update: Fri 09 May 2025 18:00:50 +0000
Files and hashes: 1: EmWFQT9EIlKM8K10K5cWz3oRk8c.roa (hash: mVuZgTV0YIvEIlEbhmtrwLHhCh+ETHzlqM+RSaYL3ls=)
2: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: riZGC/QnRoIusupY6KQIksFc8DE59INK4fVYbBuCXrQ=)
3: vOuw-thqqsBDOxSUXEaJasEA7qM.roa (hash: 5FoG4V28mx1fz8vugdFd18SYEUDw3t0Z7vgkJvX8GgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:ac:4d:21:71:ee:f0:2e:4d:e8:0c:89:60:1c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: May 8 18:00:50 2025 GMT
Not After : May 9 18:00:50 2025 GMT
Subject: CN=684f0a9fd20337addc6430d57868c95f1bcd4853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:b5:68:ef:11:30:35:8a:a0:ec:99:5b:52:
70:df:e5:25:e0:06:be:f1:5b:85:c7:4b:82:70:48:
92:9b:f0:d3:1d:41:c2:50:98:71:97:f8:22:38:3c:
54:0c:c0:6f:f6:07:90:ab:e0:12:18:5c:67:23:8c:
db:3e:c6:12:4b:a3:37:a7:62:23:f6:ed:35:97:be:
7f:e1:02:85:93:25:82:c1:0a:b9:5e:ba:5a:ca:70:
31:c6:97:35:fd:5d:9f:5d:43:86:f5:14:f9:48:ba:
d1:3a:26:19:3d:e4:e3:b1:9b:6c:14:b8:fb:0b:a5:
95:18:55:b3:64:1e:bf:cb:8f:11:65:52:d7:87:79:
cb:da:bb:d8:d3:8f:d9:df:07:26:6c:3e:9d:b8:9b:
73:f5:09:72:c3:87:0a:95:7a:e5:91:6f:ca:02:e0:
1f:ba:ad:07:1c:6b:18:2c:cb:24:ae:2c:92:00:be:
9b:ca:ae:b2:40:db:0c:48:28:ea:ec:1e:50:f3:27:
97:da:0d:a3:c0:fc:5f:1c:48:13:9a:d7:a8:41:87:
9b:db:86:8b:25:35:4f:ab:15:a1:bd:2a:cf:be:bf:
81:60:e5:3a:f4:10:71:74:1a:7b:ea:72:66:fa:84:
eb:2f:37:77:91:18:f3:7c:eb:a5:9c:0b:be:48:c3:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4F:0A:9F:D2:03:37:AD:DC:64:30:D5:78:68:C9:5F:1B:CD:48:53
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f0:58:c8:4a:de:d8:1c:ff:41:07:ef:52:d7:39:a6:ec:a8:
68:83:22:9d:52:c9:71:1d:a5:10:77:f0:b1:02:8e:ff:60:02:
41:20:b2:17:48:9e:17:8e:5d:ab:a0:28:9f:96:7a:04:87:1f:
16:81:fa:a3:2b:7f:12:b5:e7:05:f7:07:0d:03:73:26:6e:7b:
7e:1d:f6:66:c6:f9:ee:c4:5a:15:64:f8:fd:bb:0a:9b:ee:f2:
04:37:d3:19:af:9d:7a:53:d9:29:9b:ba:18:fd:0f:77:5d:96:
f7:9a:5f:86:be:0c:61:c1:31:5c:81:55:51:60:38:4f:c9:be:
e7:79:f6:48:75:84:f4:b0:f5:26:b9:cb:36:4a:62:ec:d0:aa:
eb:d8:b1:6a:2f:c6:d2:94:7e:ec:7a:5d:27:c9:62:68:4d:3c:
eb:ae:14:5a:66:59:68:cb:6b:c9:54:d7:76:45:7c:f2:84:39:
fb:56:f8:c8:78:26:d2:83:9c:cc:14:fe:45:5a:93:97:42:52:
49:e9:b9:3b:b7:f9:d7:39:88:b6:85:03:32:21:f3:f4:17:ae:
f8:e8:5b:09:cd:ff:1f:2b:5a:48:73:51:fc:bc:4b:cf:34:4a:
22:95:1c:25:86:53:06:f3:6a:df:86:42:c2:bd:2d:89:4e:4d:
8b:66:3e:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaxDqxNIXHu8C5N6AyJYByFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMTE3OWYwYTM1Y2YwN2MxNjI5NjcyNjYyODY2Y2EwMDFm
NzViZDMwHhcNMjUwNTA4MTgwMDUwWhcNMjUwNTA5MTgwMDUwWjAzMTEwLwYDVQQD
Eyg2ODRmMGE5ZmQyMDMzN2FkZGM2NDMwZDU3ODY4Yzk1ZjFiY2Q0ODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTK1aO8RMDWKoOyZW1Jw3+Ul4Aa+
8VuFx0uCcEiSm/DTHUHCUJhxl/giODxUDMBv9geQq+ASGFxnI4zbPsYSS6M3p2Ij
9u01l75/4QKFkyWCwQq5XrpaynAxxpc1/V2fXUOG9RT5SLrROiYZPeTjsZtsFLj7
C6WVGFWzZB6/y48RZVLXh3nL2rvY04/Z3wcmbD6duJtz9Qlyw4cKlXrlkW/KAuAf
uq0HHGsYLMskriySAL6byq6yQNsMSCjq7B5Q8yeX2g2jwPxfHEgTmteoQYeb24aL
JTVPqxWhvSrPvr+BYOU69BBxdBp76nJm+oTrLzd3kRjzfOulnAu+SMPGLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhPCp/SAzet3GQw1XhoyV8bzUhTMB8GA1UdIwQY
MBaAFI4RefCjXPB8FilnJmKGbKAB91vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAt
NGNiYzY3MjE5YjRhLzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAtNGNiYzY3MjE5YjRh
LzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/BYyEre
2Bz/QQfvUtc5puyoaIMinVLJcR2lEHfwsQKO/2ACQSCyF0ieF45dq6Aon5Z6BIcf
FoH6oyt/ErXnBfcHDQNzJm57fh32Zsb57sRaFWT4/bsKm+7yBDfTGa+delPZKZu6
GP0Pd12W95pfhr4MYcExXIFVUWA4T8m+53n2SHWE9LD1JrnLNkpi7NCq69ixai/G
0pR+7HpdJ8liaE08664UWmZZaMtryVTXdkV88oQ5+1b4yHgm0oOczBT+RVqTl0JS
Sem5O7f51zmItoUDMiHz9Beu+OhbCc3/HytaSHNR/LxLzzRKIpUcJYZTBvNq34ZC
wr0tiU5Ni2Y+RQ==
-----END CERTIFICATE-----
Generated at Fri May 9 02:46:06 2025 by rpki-client