Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
File: JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft (raw, json)
Hash identifier: xFnDxnUjFnPsYLJiWXNv3K1UsnuOEuc19M/ZjLNMM7o=
Subject key identifier: A4:C2:5D:FA:08:01:18:BB:7B:69:09:D2:85:83:26:9D:41:D9:50:46
Authority key identifier: 24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Certificate issuer: /CN=24954f608ac12b684ef865f39af0e94e250b9454
Certificate serial: 0196D70974D88E943DD69133BDCC5190862F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
Manifest number: 0CA0
Signing time: Fri 16 May 2025 03:00:43 +0000
Manifest this update: Fri 16 May 2025 03:00:43 +0000
Manifest next update: Sat 17 May 2025 03:00:43 +0000
Files and hashes: 1: JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl (hash: NV41oc0hvqzk/KzaP7h6eHLxZAhiEpDFHjMT+uPqhlY=)
2: MGwydjWSRkebMXZzXi4Q1wnQhQY.roa (hash: ppLwXZ59Our2Z5s5lQZSznHueKLv+6A7NwUPkwubwqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:09:74:d8:8e:94:3d:d6:91:33:bd:cc:51:90:86:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24954f608ac12b684ef865f39af0e94e250b9454
Validity
Not Before: May 16 03:00:43 2025 GMT
Not After : May 17 03:00:43 2025 GMT
Subject: CN=a4c25dfa080118bb7b6909d28583269d41d95046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:56:46:4d:1c:11:e8:c9:fb:c4:86:12:53:
fc:25:7c:88:55:d5:b2:22:c7:f2:61:a6:18:27:bf:
04:36:22:e8:97:50:1d:07:fa:11:a5:1f:50:fd:21:
15:6c:9f:35:d4:0c:0c:ee:3a:1e:50:27:49:1b:a3:
80:ad:50:b7:81:98:28:26:46:12:73:eb:81:4b:3d:
26:d4:6f:38:53:e8:0c:b5:b4:bd:28:2a:d1:52:29:
fa:9c:91:40:78:32:7e:da:7b:d9:94:39:6f:87:45:
99:f8:22:59:c0:e9:10:0a:5c:c8:8e:f5:97:8b:62:
01:24:dc:83:04:95:16:a1:ac:ea:52:4d:f4:44:a4:
ba:d6:de:34:35:cc:d9:ee:a8:a3:bf:85:8a:11:90:
5e:8a:c8:2c:28:7c:aa:41:ec:65:1a:71:64:5a:46:
3c:94:b3:25:d2:7c:f5:b0:f3:ab:4d:44:32:02:b4:
65:a3:8a:75:ad:d5:c1:42:b8:45:74:d6:ce:e8:d6:
fd:66:f3:bf:46:67:4b:e1:ba:61:63:c5:d7:63:a1:
66:c4:2e:c3:b1:b4:8b:87:19:35:57:ce:4c:7b:b4:
44:12:5e:bc:c8:cb:99:19:9a:92:f1:2c:8a:c1:94:
e6:ca:d9:b6:fc:d4:5f:6e:42:85:ee:ce:5f:60:2d:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C2:5D:FA:08:01:18:BB:7B:69:09:D2:85:83:26:9D:41:D9:50:46
X509v3 Authority Key Identifier:
keyid:24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b1:81:48:77:b4:3b:8d:9b:33:9f:d7:27:68:31:1e:15:05:
cf:d9:15:8f:c6:a8:d3:4f:2a:bf:8a:65:86:a4:f4:87:8e:03:
6a:db:f4:bb:f0:1a:7e:35:e4:b6:94:a6:fb:47:4b:7f:68:2e:
27:93:b6:ad:56:ba:97:52:03:a5:69:8a:46:7e:2b:65:ba:40:
c3:41:17:05:d8:c6:c5:44:81:b7:bb:94:bb:29:fa:87:4d:66:
2a:7b:ae:c5:42:28:09:36:e2:30:44:d4:3a:ca:71:aa:a6:54:
ee:a5:ae:53:92:a9:72:a4:e5:54:ca:40:92:00:91:ba:67:ba:
10:fa:ff:47:a2:18:a4:50:96:4e:d9:8c:68:46:5d:23:83:be:
4f:c9:ee:b1:38:b2:e6:1c:9a:ad:7a:e0:8f:d8:08:4b:c8:4b:
f3:4c:9f:ed:0f:d6:0e:65:c6:41:5f:3b:f2:61:e3:ef:12:2f:
65:aa:70:29:97:dc:03:dc:d5:d0:ac:06:fa:7f:34:83:88:23:
28:b3:4c:71:20:8c:44:a8:0a:c9:62:21:28:b6:a9:52:29:16:
f9:ad:b3:b3:ff:60:4c:50:c7:f6:42:ef:43:d8:27:87:4e:37:
46:62:c8:37:fb:1b:20:08:bf:6c:45:0a:3b:31:e8:36:57:3d:
b0:f8:5c:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbXCXTYjpQ91pEzvcxRkIYvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0OTU0ZjYwOGFjMTJiNjg0ZWY4NjVmMzlhZjBlOTRlMjUw
Yjk0NTQwHhcNMjUwNTE2MDMwMDQzWhcNMjUwNTE3MDMwMDQzWjAzMTEwLwYDVQQD
EyhhNGMyNWRmYTA4MDExOGJiN2I2OTA5ZDI4NTgzMjY5ZDQxZDk1MDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRJWRk0cEejJ+8SGElP8JXyIVdWy
IsfyYaYYJ78ENiLol1AdB/oRpR9Q/SEVbJ811AwM7joeUCdJG6OArVC3gZgoJkYS
c+uBSz0m1G84U+gMtbS9KCrRUin6nJFAeDJ+2nvZlDlvh0WZ+CJZwOkQClzIjvWX
i2IBJNyDBJUWoazqUk30RKS61t40NczZ7qijv4WKEZBeisgsKHyqQexlGnFkWkY8
lLMl0nz1sPOrTUQyArRlo4p1rdXBQrhFdNbO6Nb9ZvO/RmdL4bphY8XXY6FmxC7D
sbSLhxk1V85Me7REEl68yMuZGZqS8SyKwZTmytm2/NRfbkKF7s5fYC1GmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTCXfoIARi7e2kJ0oWDJp1B2VBGMB8GA1UdIwQY
MBaAFCSVT2CKwStoTvhl85rw6U4lC5RUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkpWUFlJckJLMmhPLUdYem12RHBUaVVMbEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80ZGRkNzUtMzE2MC00MDY1LWJiNjkt
YmIxNzg3NWRiMzIzLzEvSkpWUFlJckJLMmhPLUdYem12RHBUaVVMbEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80ZGRkNzUtMzE2MC00MDY1LWJiNjktYmIxNzg3NWRiMzIz
LzEvSkpWUFlJckJLMmhPLUdYem12RHBUaVVMbEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7GBSHe0
O42bM5/XJ2gxHhUFz9kVj8ao008qv4plhqT0h44Datv0u/AafjXktpSm+0dLf2gu
J5O2rVa6l1IDpWmKRn4rZbpAw0EXBdjGxUSBt7uUuyn6h01mKnuuxUIoCTbiMETU
OspxqqZU7qWuU5KpcqTlVMpAkgCRume6EPr/R6IYpFCWTtmMaEZdI4O+T8nusTiy
5hyarXrgj9gIS8hL80yf7Q/WDmXGQV878mHj7xIvZapwKZfcA9zV0KwG+n80g4gj
KLNMcSCMRKgKyWIhKLapUikW+a2zs/9gTFDH9kLvQ9gnh043RmLIN/sbIAi/bEUK
OzHoNlc9sPhc3Q==
-----END CERTIFICATE-----
Generated at Fri May 16 12:41:14 2025 by rpki-client