Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: kfYB8eOaC1Nk1fSOXbT/Fr/jqC/9UB8K0anAEyzmW6o=
Subject key identifier: 47:99:9C:1C:1F:79:E3:E1:C6:B2:10:0B:6E:4F:33:F6:C4:F1:9D:B4
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 0196ABE834C87E59FD3F5F951CBAB90BDF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 152E
Signing time: Wed 07 May 2025 18:00:43 +0000
Manifest this update: Wed 07 May 2025 18:00:43 +0000
Manifest next update: Thu 08 May 2025 18:00:43 +0000
Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=)
2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=)
3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: FxDaGRUIPqZgeY6mwrY0uRZOcTbRp/0OJ5WaVw4o0vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:e8:34:c8:7e:59:fd:3f:5f:95:1c:ba:b9:0b:df:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: May 7 18:00:43 2025 GMT
Not After : May 8 18:00:43 2025 GMT
Subject: CN=47999c1c1f79e3e1c6b2100b6e4f33f6c4f19db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:e3:4b:b5:66:80:36:9f:2e:09:76:94:f4:
cd:74:33:ac:94:83:7e:aa:b1:37:f1:bb:ed:ea:74:
0f:32:7c:40:d8:02:22:fc:82:a9:e3:68:61:98:ba:
8e:93:22:04:98:c2:d0:b3:07:60:62:fa:17:15:99:
d8:7a:93:59:7e:25:0a:6c:da:c2:99:4e:9b:bd:8b:
38:9a:64:6d:1e:b5:d1:f1:e5:63:b8:ad:02:94:b1:
56:6d:e0:71:bb:bc:b6:1e:f4:fe:91:78:bd:3f:cb:
16:7f:9f:fc:a9:7d:30:9f:4b:14:58:4c:8b:5b:79:
0b:e8:9c:ae:65:fa:16:55:fe:fe:1f:b2:40:97:e3:
bb:0a:24:9c:35:02:73:c5:a7:a7:67:36:be:5b:da:
49:73:66:21:96:49:6c:94:09:a2:cc:2d:13:3e:79:
2e:90:a5:8d:33:d9:a9:86:9f:eb:f7:8e:07:da:5c:
03:10:c9:ef:1d:2a:3c:e7:85:6c:9e:17:60:5c:e9:
1f:a0:7b:e1:a0:a8:42:d0:41:53:8c:6a:c9:a1:e4:
26:b9:86:03:4e:9b:80:52:25:ce:cc:b0:b7:0c:d2:
dd:6b:33:d8:5e:62:20:b9:8f:3d:0c:61:0e:7e:90:
03:35:f1:46:49:8b:74:03:7b:2b:96:1d:c2:70:84:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:99:9C:1C:1F:79:E3:E1:C6:B2:10:0B:6E:4F:33:F6:C4:F1:9D:B4
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bc:a2:9e:42:89:8c:89:da:1c:28:8f:8e:2c:1b:7f:79:ef:
2e:32:77:37:cb:15:6e:fd:ef:62:8d:71:93:5a:3e:54:b4:8c:
3d:23:72:b8:5d:02:a1:55:af:93:86:a1:72:25:20:74:45:01:
48:26:2d:ce:e5:01:5c:2b:1a:73:d3:a8:76:a4:df:8e:f0:69:
87:f4:f6:ea:45:ee:09:1f:67:44:11:02:fd:68:55:61:ca:d5:
28:ab:8d:45:29:8e:80:bb:27:e3:45:20:b8:96:cc:1a:8b:3e:
88:4d:06:00:03:b7:8b:5f:b2:6d:84:a6:31:2d:23:34:db:8d:
9c:43:f6:7e:d8:48:91:c3:c0:5c:e6:28:53:30:0f:da:8a:c8:
13:61:aa:25:bc:e1:c7:bf:07:60:62:3f:f8:64:96:d9:05:74:
ef:fb:f1:b5:49:1a:d6:11:dd:af:f5:c9:a0:e0:ac:bf:93:37:
aa:e7:31:71:21:4d:29:b8:cb:a9:c5:42:3b:e8:cd:97:3d:c7:
6c:83:2b:4c:7a:a7:9b:27:4f:03:ee:48:6b:13:ef:f2:27:80:
f5:72:f4:38:c7:49:62:1b:38:5e:50:8f:fd:b9:e5:e2:c1:c4:
a3:27:9a:4c:89:d3:84:0c:5c:cd:e9:9d:84:c2:70:31:f2:f4:
78:45:45:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZar6DTIfln9P1+VHLq5C98YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjYwMzJlMDg4OTQxMThkNzk5OGM1YzA2MGNhNDZlYjM4
NzEzMzgwHhcNMjUwNTA3MTgwMDQzWhcNMjUwNTA4MTgwMDQzWjAzMTEwLwYDVQQD
Eyg0Nzk5OWMxYzFmNzllM2UxYzZiMjEwMGI2ZTRmMzNmNmM0ZjE5ZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu//jS7VmgDafLgl2lPTNdDOslIN+
qrE38bvt6nQPMnxA2AIi/IKp42hhmLqOkyIEmMLQswdgYvoXFZnYepNZfiUKbNrC
mU6bvYs4mmRtHrXR8eVjuK0ClLFWbeBxu7y2HvT+kXi9P8sWf5/8qX0wn0sUWEyL
W3kL6JyuZfoWVf7+H7JAl+O7CiScNQJzxaenZza+W9pJc2YhlklslAmizC0TPnku
kKWNM9mphp/r944H2lwDEMnvHSo854VsnhdgXOkfoHvhoKhC0EFTjGrJoeQmuYYD
TpuAUiXOzLC3DNLdazPYXmIguY89DGEOfpADNfFGSYt0A3srlh3CcIQ+UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeZnBwfeePhxrIQC25PM/bE8Z20MB8GA1UdIwQY
MBaAFI1mAy4IiUEY15mMXAYMpG6zhxM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUt
NTk5ZDFjYTZhNWZkLzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUtNTk5ZDFjYTZhNWZk
LzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbyinkKJ
jInaHCiPjiwbf3nvLjJ3N8sVbv3vYo1xk1o+VLSMPSNyuF0CoVWvk4ahciUgdEUB
SCYtzuUBXCsac9OodqTfjvBph/T26kXuCR9nRBEC/WhVYcrVKKuNRSmOgLsn40Ug
uJbMGos+iE0GAAO3i1+ybYSmMS0jNNuNnEP2fthIkcPAXOYoUzAP2orIE2GqJbzh
x78HYGI/+GSW2QV07/vxtUka1hHdr/XJoOCsv5M3qucxcSFNKbjLqcVCO+jNlz3H
bIMrTHqnmydPA+5IaxPv8ieA9XL0OMdJYhs4XlCP/bnl4sHEoyeaTInThAxczemd
hMJwMfL0eEVFtQ==
-----END CERTIFICATE-----
Generated at Thu May 8 03:12:31 2025 by rpki-client