Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
File: jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json)
Hash identifier: 8dv23zFdkWqSsYMOiVdhBvvEDAVbnyu1cteI5jHgVA8=
Subject key identifier: 55:C5:64:B7:30:10:94:7C:21:36:B4:B4:12:13:DF:04:05:84:64:AE
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial: 0196A12DAFEA1EFF2893B14508B519E7BBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
Manifest number: 0B4E
Signing time: Mon 05 May 2025 16:00:48 +0000
Manifest this update: Mon 05 May 2025 16:00:48 +0000
Manifest next update: Tue 06 May 2025 16:00:48 +0000
Files and hashes: 1: 52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa (hash: IeCBQ+eKPNR/krpQbJSGOw+keX8AySOWQVyhW1zLVTg=)
2: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: sY8tWD7VueeQtb40TmUlNwXy+pffLP7Ts8xH//c9Gr8=)
3: k6vAZPYoHdRCo63AYTmi48skRhw.roa (hash: SzdnDp8HU7dtL+1ssCq3abGfy6JSu5LenwIqWzaID2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:af:ea:1e:ff:28:93:b1:45:08:b5:19:e7:bb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Validity
Not Before: May 5 16:00:48 2025 GMT
Not After : May 6 16:00:48 2025 GMT
Subject: CN=55c564b73010947c2136b4b41213df04058464ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:19:5c:0d:42:e7:b9:2f:f5:af:49:0c:c6:43:
ab:1e:e4:51:ef:86:62:c7:aa:b9:17:b3:67:51:5f:
f1:10:e8:1c:bd:02:59:5f:51:f3:d6:d7:12:e8:81:
da:e1:45:f2:3c:d3:fd:af:36:eb:79:5d:8f:e5:fd:
74:70:2b:12:4d:67:d4:e0:26:f8:06:cd:a8:0f:2e:
01:e8:a7:f2:be:24:b5:5f:a1:6d:f6:5f:b2:ce:d1:
b2:8b:46:ca:0e:85:40:d2:6b:d5:34:82:f4:4b:9b:
49:e5:6a:27:a4:09:ad:f1:3e:f2:62:ed:2d:15:df:
36:60:70:8d:e4:c9:21:48:e8:b8:fe:ba:8c:4f:57:
00:b7:db:51:3a:0f:95:1c:0d:7e:ea:02:f9:70:62:
02:2b:7e:8f:b7:9f:de:ec:47:9d:f4:44:7a:49:84:
9d:55:09:af:67:6b:c8:24:64:d2:48:20:c9:65:f6:
e1:5a:69:c8:61:58:20:f0:8f:6a:03:77:69:d6:ae:
1d:89:51:65:68:ed:fb:6d:37:ba:7b:7c:e5:a2:e5:
cc:fb:d4:39:5a:70:4f:5d:f1:c7:0a:e4:58:ff:04:
c0:f1:12:21:d0:03:19:25:32:88:87:c6:ed:b0:91:
c8:a3:aa:3a:f2:cd:25:e5:17:9b:79:78:4f:dc:41:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C5:64:B7:30:10:94:7C:21:36:B4:B4:12:13:DF:04:05:84:64:AE
X509v3 Authority Key Identifier:
keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3e:19:00:28:35:07:7e:86:66:2b:c0:5d:e8:f3:8a:83:d5:
41:59:ad:b1:76:59:c9:fa:c8:ab:4a:05:35:f1:8a:66:a8:0d:
70:0d:d9:8c:ba:c1:10:f3:9c:9b:2f:79:5e:a4:cf:df:66:36:
5a:20:d7:6a:65:a3:c5:86:42:20:00:5c:65:09:d1:60:d5:13:
0a:38:1e:a6:27:b8:18:08:79:6a:eb:03:32:b7:6b:6e:ea:cf:
fc:ca:45:93:f7:cf:91:f7:57:98:7c:cd:12:65:69:69:9f:10:
8b:1e:f0:79:4a:fc:da:25:dc:54:00:81:68:3b:59:c5:5a:0c:
47:0a:aa:ff:1d:e8:1c:39:7c:f7:de:70:24:f3:da:63:84:6c:
5d:fa:dd:5f:de:cf:d9:fc:30:c2:7c:1c:0b:cd:0c:20:3f:87:
92:78:24:37:a5:32:a8:11:14:1f:fe:05:94:8c:c7:73:6d:5c:
3d:87:41:82:50:2d:e3:3e:34:6a:24:5a:6c:26:b8:df:ee:0d:
90:05:b0:da:41:87:8c:8d:02:b9:4d:f1:cd:e8:ae:e9:55:db:
ec:fa:53:4d:fe:39:a3:47:df:d0:5c:36:14:db:11:9e:05:31:
4d:9a:c4:50:d5:b6:43:3a:83:f9:8d:86:e9:f9:0a:ec:ac:91:
15:c8:84:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahLa/qHv8ok7FFCLUZ57v4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjOWRjY2Y5ZTJmMzdlYjEwNzQ5NmE3YWFmMTM4OTRlYzQ3
NmUzNzUwHhcNMjUwNTA1MTYwMDQ4WhcNMjUwNTA2MTYwMDQ4WjAzMTEwLwYDVQQD
Eyg1NWM1NjRiNzMwMTA5NDdjMjEzNmI0YjQxMjEzZGYwNDA1ODQ2NGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhlcDULnuS/1r0kMxkOrHuRR74Zi
x6q5F7NnUV/xEOgcvQJZX1Hz1tcS6IHa4UXyPNP9rzbreV2P5f10cCsSTWfU4Cb4
Bs2oDy4B6KfyviS1X6Ft9l+yztGyi0bKDoVA0mvVNIL0S5tJ5WonpAmt8T7yYu0t
Fd82YHCN5MkhSOi4/rqMT1cAt9tROg+VHA1+6gL5cGICK36Pt5/e7Eed9ER6SYSd
VQmvZ2vIJGTSSCDJZfbhWmnIYVgg8I9qA3dp1q4diVFlaO37bTe6e3zlouXM+9Q5
WnBPXfHHCuRY/wTA8RIh0AMZJTKIh8btsJHIo6o68s0l5RebeXhP3EHHbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXFZLcwEJR8ITa0tBIT3wQFhGSuMB8GA1UdIwQY
MBaAFIydzPni836xB0lqeq8TiU7EduN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEt
NmE4YzNiNjc2YjU3LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEtNmE4YzNiNjc2YjU3
LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFz4ZACg1
B36GZivAXejzioPVQVmtsXZZyfrIq0oFNfGKZqgNcA3ZjLrBEPOcmy95XqTP32Y2
WiDXamWjxYZCIABcZQnRYNUTCjgepie4GAh5ausDMrdrburP/MpFk/fPkfdXmHzN
EmVpaZ8Qix7weUr82iXcVACBaDtZxVoMRwqq/x3oHDl8995wJPPaY4RsXfrdX97P
2fwwwnwcC80MID+HkngkN6UyqBEUH/4FlIzHc21cPYdBglAt4z40aiRabCa43+4N
kAWw2kGHjI0CuU3xzeiu6VXb7PpTTf45o0ff0Fw2FNsRngUxTZrEUNW2QzqD+Y2G
6fkK7KyRFciElQ==
-----END CERTIFICATE-----
Generated at Mon May 5 22:22:28 2025 by rpki-client