Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier: TFy46nS4Oh8VQ6nH7ZQXaHW5WAnsclZyAkOSOtALeXY=
Subject key identifier: 8A:37:E0:AA:41:A7:83:0E:CD:F9:04:24:EC:29:87:64:D2:82:14:20
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 01969FACE663798F8C9F59305CB2A33CD165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number: 11FB
Signing time: Mon 05 May 2025 09:00:30 +0000
Manifest this update: Mon 05 May 2025 09:00:30 +0000
Manifest next update: Tue 06 May 2025 09:00:30 +0000
Files and hashes: 1: 7BGirnEkwzmDaMHYb7_OyeObZ-o.roa (hash: Mqe4eHaFftNeUPq4ztkhypVdBvRsFekv3LwUY3g3YP4=)
2: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: PN6IWgrZ5QLQkGEjfeDGuFn0J9Z/k2Pmau4n2CdqfYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:e6:63:79:8f:8c:9f:59:30:5c:b2:a3:3c:d1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: May 5 09:00:30 2025 GMT
Not After : May 6 09:00:30 2025 GMT
Subject: CN=8a37e0aa41a7830ecdf90424ec298764d2821420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:04:77:68:ae:10:11:23:f2:53:6b:da:17:
48:b6:6e:e9:69:e7:3f:94:37:3e:4b:07:f7:84:19:
1f:4e:8f:7c:0d:51:4a:f7:79:e2:10:2d:26:c3:7c:
ab:18:ef:3e:46:db:63:74:a3:a5:43:f8:06:c3:d0:
25:6f:8e:be:c3:35:cc:e8:47:a0:88:af:06:49:1f:
be:32:84:d7:ba:ee:f7:6e:c1:3e:1f:11:2e:5b:92:
de:dd:e0:12:62:c7:c2:01:a1:12:56:7f:23:12:15:
ed:7d:66:e4:1b:dd:10:59:68:84:97:5d:d0:19:d5:
fb:ea:e3:f6:df:87:33:31:df:68:3f:d2:30:f5:8a:
18:80:b8:94:15:e5:54:bd:82:a6:53:39:43:d8:17:
50:63:a2:f9:29:d0:f1:03:d7:07:0f:c7:a7:46:56:
bb:74:5e:e2:11:d7:f3:28:46:43:74:35:28:5e:02:
86:13:e2:85:da:a4:f2:57:97:00:32:a3:b2:8c:44:
a0:35:8f:2b:f8:94:65:55:3f:c9:40:86:47:69:fe:
eb:2b:14:8a:9b:d6:f3:ab:2d:e7:4c:2d:cd:92:a6:
c2:29:e0:fd:4a:40:31:8e:6a:b9:b2:fd:39:ec:9e:
65:89:88:5c:c1:d2:71:46:57:f7:5e:bf:f4:9f:26:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:37:E0:AA:41:A7:83:0E:CD:F9:04:24:EC:29:87:64:D2:82:14:20
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b1:d0:07:56:7b:36:ef:35:c2:92:bd:07:ec:50:d3:07:3c:
38:88:2f:5e:54:b1:ee:7c:7f:57:a0:c1:b8:77:56:f1:72:55:
0b:d9:6d:39:2b:d7:0c:a1:40:5c:6a:19:00:6d:35:70:89:2f:
9e:75:b4:73:fc:55:35:e8:51:dc:67:7c:7d:93:ff:92:39:22:
68:16:b1:76:79:a3:91:a6:04:31:10:07:35:d9:52:b3:c0:e8:
a3:4e:e9:01:18:a3:2e:d0:22:e9:18:98:1f:ba:f3:93:e7:ec:
e5:35:c4:0c:4d:1b:b7:ea:c3:70:ae:a6:a5:dd:28:07:41:67:
a9:21:28:68:b1:2d:0b:39:f2:6a:1f:03:27:ee:f3:b2:fe:85:
22:24:8c:54:bd:ff:b7:db:83:a0:c8:f8:99:2e:82:d0:6c:a6:
e0:47:f7:9f:7c:66:65:97:ac:af:fe:c9:f1:c2:d4:60:7f:40:
24:17:c3:51:9b:a1:8b:1a:cc:0c:5f:35:9e:05:55:d9:f4:4b:
29:54:a2:46:f8:9e:79:e6:36:3e:91:15:98:25:ed:92:d0:59:
ed:3d:b4:9d:aa:d6:9b:83:e8:4b:6b:7c:cb:86:db:19:0c:2d:
0e:4a:21:6b:ff:7b:5a:f0:91:7a:63:a0:5e:1a:2c:b8:e8:0a:
eb:83:5f:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafrOZjeY+Mn1kwXLKjPNFlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NDVlZjBjZjJlMjk3NDg5ZDE5NzM3MGY4ODVkNTlmODll
OTVhYWIwHhcNMjUwNTA1MDkwMDMwWhcNMjUwNTA2MDkwMDMwWjAzMTEwLwYDVQQD
Eyg4YTM3ZTBhYTQxYTc4MzBlY2RmOTA0MjRlYzI5ODc2NGQyODIxNDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVQEd2iuEBEj8lNr2hdItm7paec/
lDc+Swf3hBkfTo98DVFK93niEC0mw3yrGO8+RttjdKOlQ/gGw9Alb46+wzXM6Eeg
iK8GSR++MoTXuu73bsE+HxEuW5Le3eASYsfCAaESVn8jEhXtfWbkG90QWWiEl13Q
GdX76uP234czMd9oP9Iw9YoYgLiUFeVUvYKmUzlD2BdQY6L5KdDxA9cHD8enRla7
dF7iEdfzKEZDdDUoXgKGE+KF2qTyV5cAMqOyjESgNY8r+JRlVT/JQIZHaf7rKxSK
m9bzqy3nTC3NkqbCKeD9SkAxjmq5sv057J5liYhcwdJxRlf3Xr/0nyZLJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIo34KpBp4MOzfkEJOwph2TSghQgMB8GA1UdIwQY
MBaAFCRF7wzy4pdInRlzcPiF1Z+J6VqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTct
MDk5YmY3MzQzZTJjLzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTctMDk5YmY3MzQzZTJj
LzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLHQB1Z7
Nu81wpK9B+xQ0wc8OIgvXlSx7nx/V6DBuHdW8XJVC9ltOSvXDKFAXGoZAG01cIkv
nnW0c/xVNehR3Gd8fZP/kjkiaBaxdnmjkaYEMRAHNdlSs8Doo07pARijLtAi6RiY
H7rzk+fs5TXEDE0bt+rDcK6mpd0oB0FnqSEoaLEtCznyah8DJ+7zsv6FIiSMVL3/
t9uDoMj4mS6C0Gym4Ef3n3xmZZesr/7J8cLUYH9AJBfDUZuhixrMDF81ngVV2fRL
KVSiRvieeeY2PpEVmCXtktBZ7T20narWm4PoS2t8y4bbGQwtDkoha/97WvCRemOg
XhosuOgK64NfZA==
-----END CERTIFICATE-----
Generated at Mon May 5 19:20:53 2025 by rpki-client