Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
File: JfgKOI5PDiZBTOq-q036hBkdgUA.mft (raw, json)
Hash identifier: Rdj4WTpRbPGTFG+YJkgRyST8bBeCvn26tTcDwX/LaI0=
Subject key identifier: 46:EF:3A:4D:1F:B5:E5:A1:AC:F2:14:93:04:91:49:52:47:12:28:1F
Authority key identifier: 25:F8:0A:38:8E:4F:0E:26:41:4C:EA:BE:AB:4D:FA:84:19:1D:81:40
Certificate issuer: /CN=25f80a388e4f0e26414ceabeab4dfa84191d8140
Certificate serial: 0196BC00003D1145C15220E8A071CC7A2DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
Manifest number: 143B
Signing time: Sat 10 May 2025 21:00:38 +0000
Manifest this update: Sat 10 May 2025 21:00:38 +0000
Manifest next update: Sun 11 May 2025 21:00:38 +0000
Files and hashes: 1: JfgKOI5PDiZBTOq-q036hBkdgUA.crl (hash: O5N37vcWhi96NmUBkL8tFjZKjgji/5k8WiZMrsXjRFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:00:3d:11:45:c1:52:20:e8:a0:71:cc:7a:2d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f80a388e4f0e26414ceabeab4dfa84191d8140
Validity
Not Before: May 10 21:00:38 2025 GMT
Not After : May 11 21:00:38 2025 GMT
Subject: CN=46ef3a4d1fb5e5a1acf21493049149524712281f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:6b:7c:ae:a9:62:73:ee:73:91:2b:f9:25:
eb:93:18:e2:14:63:2b:6a:a2:ed:a0:12:69:20:64:
ee:15:b9:71:47:6e:73:53:c7:89:2f:0e:55:c0:24:
19:c7:50:bb:db:47:5e:f5:e1:4d:51:47:aa:c9:98:
c3:fb:ff:78:64:93:41:cb:23:88:2c:94:36:92:a4:
93:0f:90:9f:dc:f9:c4:56:86:f0:22:48:53:f2:9c:
5a:e2:4d:66:01:c6:9d:af:a4:b3:a4:b0:9c:e1:22:
1c:d6:3b:9b:22:ce:ba:94:a5:12:6d:fa:56:ff:01:
1b:ed:5b:b8:63:bd:0c:e9:99:93:43:8e:3c:e8:40:
62:6e:52:2b:2b:26:33:10:4d:df:29:22:e5:00:2d:
5b:4e:05:4f:a5:de:b0:70:6c:6a:28:91:16:ac:7a:
f0:ad:c2:1c:69:0d:4a:e5:54:3c:db:d8:48:cd:c8:
35:54:fe:5d:ff:ec:e4:9c:a6:cc:14:4d:0b:8b:fc:
e9:96:d1:af:4f:9b:c5:2e:33:95:99:e5:98:91:bd:
52:a2:d4:6c:ef:e5:d6:38:c9:8f:0b:e5:cb:6d:56:
bd:b6:83:c8:94:9b:b0:59:a5:74:41:d1:28:93:f1:
e8:25:b9:5c:b9:d5:2a:03:50:01:e0:4c:10:4b:d3:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EF:3A:4D:1F:B5:E5:A1:AC:F2:14:93:04:91:49:52:47:12:28:1F
X509v3 Authority Key Identifier:
keyid:25:F8:0A:38:8E:4F:0E:26:41:4C:EA:BE:AB:4D:FA:84:19:1D:81:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:11:f1:3b:d1:82:6d:de:c4:bc:e1:4d:44:ef:56:80:0f:ef:
7c:84:cd:04:cd:02:37:5c:67:82:f5:16:d4:50:e6:61:c4:c4:
fa:ae:7d:ef:50:78:b1:a9:fe:6f:88:01:ec:78:58:4e:74:5b:
a7:39:24:7a:f8:8c:af:c1:73:c5:17:9f:c3:dd:87:d2:ea:01:
3a:e7:19:ca:89:9d:0b:79:be:d4:a4:4e:08:89:eb:70:aa:fe:
f4:39:75:83:f6:ed:18:7a:c9:d0:b7:5b:ea:24:b5:bb:9c:27:
21:5f:5c:34:20:e9:ed:51:63:f6:55:54:30:5a:31:7e:9e:2f:
32:12:ff:e4:2d:9f:8f:96:a6:72:13:83:3c:d7:84:c9:9d:94:
16:88:9d:7f:cc:27:a7:77:f2:d8:29:de:33:7e:02:41:14:37:
3e:cd:4c:f1:2a:8f:d9:22:0b:ac:84:01:b2:22:c3:48:ac:f8:
f7:3e:c4:88:95:e0:4b:71:0f:1e:bc:59:17:bc:62:34:d1:3a:
10:69:08:e8:bf:5b:5e:82:10:03:99:76:1a:95:0e:1c:87:05:
72:dc:f4:ed:10:82:20:4e:59:6e:2e:c8:16:67:83:fe:08:07:
60:98:b0:cc:98:df:68:bf:41:f4:92:a0:da:fc:9e:7a:ed:5d:
db:76:d7:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8AAA9EUXBUiDooHHMei2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZjgwYTM4OGU0ZjBlMjY0MTRjZWFiZWFiNGRmYTg0MTkx
ZDgxNDAwHhcNMjUwNTEwMjEwMDM4WhcNMjUwNTExMjEwMDM4WjAzMTEwLwYDVQQD
Eyg0NmVmM2E0ZDFmYjVlNWExYWNmMjE0OTMwNDkxNDk1MjQ3MTIyODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwtrfK6pYnPuc5Er+SXrkxjiFGMr
aqLtoBJpIGTuFblxR25zU8eJLw5VwCQZx1C720de9eFNUUeqyZjD+/94ZJNByyOI
LJQ2kqSTD5Cf3PnEVobwIkhT8pxa4k1mAcadr6SzpLCc4SIc1jubIs66lKUSbfpW
/wEb7Vu4Y70M6ZmTQ4486EBiblIrKyYzEE3fKSLlAC1bTgVPpd6wcGxqKJEWrHrw
rcIcaQ1K5VQ829hIzcg1VP5d/+zknKbMFE0Li/zpltGvT5vFLjOVmeWYkb1SotRs
7+XWOMmPC+XLbVa9toPIlJuwWaV0QdEok/HoJblcudUqA1AB4EwQS9MXywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbvOk0fteWhrPIUkwSRSVJHEigfMB8GA1UdIwQY
MBaAFCX4CjiOTw4mQUzqvqtN+oQZHYFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmZnS09JNVBEaVpCVE9xLXEwMzZoQmtkZ1VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yMGNmYTQtZTA4Yi00YjcwLTkzNjIt
OTdkYzdiNTM1YjFkLzEvSmZnS09JNVBEaVpCVE9xLXEwMzZoQmtkZ1VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yMGNmYTQtZTA4Yi00YjcwLTkzNjItOTdkYzdiNTM1YjFk
LzEvSmZnS09JNVBEaVpCVE9xLXEwMzZoQmtkZ1VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBHxO9GC
bd7EvOFNRO9WgA/vfITNBM0CN1xngvUW1FDmYcTE+q5971B4san+b4gB7HhYTnRb
pzkkeviMr8FzxRefw92H0uoBOucZyomdC3m+1KROCInrcKr+9Dl1g/btGHrJ0Ldb
6iS1u5wnIV9cNCDp7VFj9lVUMFoxfp4vMhL/5C2fj5amchODPNeEyZ2UFoidf8wn
p3fy2CneM34CQRQ3Ps1M8SqP2SILrIQBsiLDSKz49z7EiJXgS3EPHrxZF7xiNNE6
EGkI6L9bXoIQA5l2GpUOHIcFctz07RCCIE5Zbi7IFmeD/ggHYJiwzJjfaL9B9JKg
2vyeeu1d23bXoA==
-----END CERTIFICATE-----
Generated at Sun May 11 05:52:06 2025 by rpki-client