Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
File: J0hgAkaZUbaABwTI8CysdLX4KQU.mft (raw, json)
Hash identifier: QIcpZ/cRwbRJQ0ACgxMPWmWD77QGC3YGdFkCz/1JalU=
Subject key identifier: 39:D6:7E:AC:77:A3:C3:46:A0:7F:58:E8:E6:21:60:8E:8D:CA:6E:C7
Authority key identifier: 27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
Certificate issuer: /CN=27486002469951b6800704c8f02cac74b5f82905
Certificate serial: 0196BF37EB299DABFAE9DBCED756D0CEF4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
Manifest number: 03F6
Signing time: Sun 11 May 2025 12:00:35 +0000
Manifest this update: Sun 11 May 2025 12:00:35 +0000
Manifest next update: Mon 12 May 2025 12:00:35 +0000
Files and hashes: 1: J0hgAkaZUbaABwTI8CysdLX4KQU.crl (hash: jKXKqLe9sgO3MUSXsiAIdKSh3niDnsPoXaFRpgLSgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:eb:29:9d:ab:fa:e9:db:ce:d7:56:d0:ce:f4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27486002469951b6800704c8f02cac74b5f82905
Validity
Not Before: May 11 12:00:35 2025 GMT
Not After : May 12 12:00:35 2025 GMT
Subject: CN=39d67eac77a3c346a07f58e8e621608e8dca6ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:86:f5:db:ee:69:f3:f2:6d:0b:90:74:21:
3c:e4:43:33:cc:5d:4d:e6:43:36:79:41:cc:d6:fc:
4c:6f:00:1e:31:9f:eb:2d:be:0d:8d:6e:36:f8:bc:
d1:fe:cd:86:4e:4a:d4:2d:96:87:ac:5c:a7:85:f9:
8c:e8:16:ea:e4:d3:12:ec:0f:a4:c4:5c:47:94:74:
98:9e:da:fa:2c:c5:75:d2:87:07:65:37:72:ab:00:
2e:f3:ab:4b:a9:14:88:40:6d:67:30:40:bf:cb:22:
ac:27:21:24:48:a8:d3:7f:ea:37:34:39:3f:1b:58:
60:a6:50:19:94:9c:b0:22:ac:c2:c2:b8:9d:7b:c4:
5e:c8:2e:8c:8b:1e:24:36:36:9b:7f:50:6f:a1:2b:
15:5f:64:a5:28:75:73:35:82:02:09:90:ac:8a:cb:
9e:8d:b4:6a:a4:57:31:8e:4a:86:f5:31:67:cc:49:
e4:1c:40:87:ee:5d:ac:18:7a:8a:bc:cf:93:6c:55:
02:76:bd:c4:f4:35:bf:73:bb:4b:45:6f:09:42:1c:
0e:3f:cc:81:37:16:f1:41:17:ac:12:22:8a:7e:82:
19:d3:c3:e8:95:84:15:cf:09:8b:a8:16:98:5b:1f:
fa:0d:ff:6e:76:1b:5c:0e:a9:61:14:e7:b1:75:c7:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D6:7E:AC:77:A3:C3:46:A0:7F:58:E8:E6:21:60:8E:8D:CA:6E:C7
X509v3 Authority Key Identifier:
keyid:27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:3e:6f:72:3a:05:68:e6:7f:ec:86:50:ce:0a:d6:af:71:20:
f7:6e:70:54:e6:46:1c:0d:27:b1:59:44:9c:50:89:7c:53:b7:
c7:5d:38:ca:11:58:4c:d0:ab:0d:f7:28:c0:65:b6:ef:21:23:
d1:16:01:c6:27:59:fc:e5:c1:2a:a3:9b:59:02:24:d7:d2:d1:
c4:3e:49:42:67:ba:9b:56:4a:fe:82:0b:7b:2c:f4:a0:2d:f5:
df:81:db:f4:85:70:68:65:4c:a5:9b:1c:3b:a6:a9:6b:10:83:
ec:2f:36:f1:47:7a:ff:23:5c:ed:d5:58:b2:ec:9a:c1:53:00:
70:32:ce:17:af:f9:9d:b7:78:6a:55:58:90:9e:e8:5e:a1:91:
f8:1a:37:70:07:9c:e9:d7:f6:19:6b:15:d1:75:ac:b1:f5:91:
6e:7e:d0:cf:86:d0:9c:6c:0d:06:ff:71:39:a9:e7:f3:cc:07:
5c:4b:c6:84:67:18:0f:96:5c:db:73:96:ca:f7:ba:d3:c0:3f:
ef:6d:0a:3d:92:3f:aa:f7:93:ed:cf:31:2b:7b:b2:07:ef:09:
4c:91:fa:a4:17:bf:c4:ad:49:fd:1b:f0:ab:7a:13:f9:02:4e:
e3:b3:ac:98:60:cd:c1:03:8f:f7:53:a3:19:ab:ab:e3:b2:96:
8a:7a:bc:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/N+spnav66dvO11bQzvTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg2MDAyNDY5OTUxYjY4MDA3MDRjOGYwMmNhYzc0YjVm
ODI5MDUwHhcNMjUwNTExMTIwMDM1WhcNMjUwNTEyMTIwMDM1WjAzMTEwLwYDVQQD
EygzOWQ2N2VhYzc3YTNjMzQ2YTA3ZjU4ZThlNjIxNjA4ZThkY2E2ZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroeG9dvuafPybQuQdCE85EMzzF1N
5kM2eUHM1vxMbwAeMZ/rLb4NjW42+LzR/s2GTkrULZaHrFynhfmM6Bbq5NMS7A+k
xFxHlHSYntr6LMV10ocHZTdyqwAu86tLqRSIQG1nMEC/yyKsJyEkSKjTf+o3NDk/
G1hgplAZlJywIqzCwride8ReyC6Mix4kNjabf1BvoSsVX2SlKHVzNYICCZCsisue
jbRqpFcxjkqG9TFnzEnkHECH7l2sGHqKvM+TbFUCdr3E9DW/c7tLRW8JQhwOP8yB
NxbxQResEiKKfoIZ08PolYQVzwmLqBaYWx/6Df9udhtcDqlhFOexdceZVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnWfqx3o8NGoH9Y6OYhYI6Nym7HMB8GA1UdIwQY
MBaAFCdIYAJGmVG2gAcEyPAsrHS1+CkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82ZjU4ZmItNzM3OS00MmFiLTg2M2Mt
YzRlYjZkZjk3NGFkLzEvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82ZjU4ZmItNzM3OS00MmFiLTg2M2MtYzRlYjZkZjk3NGFk
LzEvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxD5vcjoF
aOZ/7IZQzgrWr3Eg925wVOZGHA0nsVlEnFCJfFO3x104yhFYTNCrDfcowGW27yEj
0RYBxidZ/OXBKqObWQIk19LRxD5JQme6m1ZK/oILeyz0oC3134Hb9IVwaGVMpZsc
O6apaxCD7C828Ud6/yNc7dVYsuyawVMAcDLOF6/5nbd4alVYkJ7oXqGR+Bo3cAec
6df2GWsV0XWssfWRbn7Qz4bQnGwNBv9xOann88wHXEvGhGcYD5Zc23OWyve608A/
720KPZI/qveT7c8xK3uyB+8JTJH6pBe/xK1J/Rvwq3oT+QJO47OsmGDNwQOP91Oj
Gaur47KWinq8gw==
-----END CERTIFICATE-----
Generated at Sun May 11 20:23:47 2025 by rpki-client