Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier: UclLpTvUlEkdh5leErXtTWS8AHO6p0ntmLoJLE9E9pY=
Subject key identifier: C7:4F:5B:4E:74:F4:84:D7:E8:C4:59:14:6D:24:2E:72:B0:69:FB:C9
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 0196B0D7A068812177CDFFA3641DE578DB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number: 02B4
Signing time: Thu 08 May 2025 17:00:43 +0000
Manifest this update: Thu 08 May 2025 17:00:43 +0000
Manifest next update: Fri 09 May 2025 17:00:43 +0000
Files and hashes: 1: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: qQMcvVhWX8qiH3CVDVDEWGmKfBhbM0FNkFrHw9/ipPs=)
2: cNr_HYvpiGioRSQRxwB1USCGS48.roa (hash: +noL2GpravnsNJo9M6TMNUj+1J6YWZz/J8eJw0GPGmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:a0:68:81:21:77:cd:ff:a3:64:1d:e5:78:db:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: May 8 17:00:43 2025 GMT
Not After : May 9 17:00:43 2025 GMT
Subject: CN=c74f5b4e74f484d7e8c459146d242e72b069fbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9a:27:84:83:9a:de:b4:ed:79:35:0d:bd:ea:
db:7e:ad:a3:30:66:b0:e9:3b:04:07:ae:c8:eb:9e:
45:e4:28:3d:73:9a:4a:d2:63:cb:76:24:b6:bb:ce:
92:d7:51:98:6e:f5:9d:50:5e:4c:24:62:cd:a0:7e:
2a:67:20:4f:20:3b:15:09:39:f0:b3:ef:49:1c:5e:
58:f5:8e:d9:77:ac:a8:69:2a:4b:60:10:5b:02:22:
45:01:d5:e1:b7:8c:df:64:13:a2:da:e2:72:a9:d5:
6f:03:1e:af:df:8d:fc:aa:1b:1d:3b:d0:ce:41:3b:
3e:10:5c:48:ed:4b:44:c4:58:ca:34:2d:6a:a1:c8:
70:55:ef:37:b7:04:cf:06:0c:30:a8:e8:dc:a6:67:
83:bc:55:ff:23:c3:ee:32:7b:4a:17:d1:37:18:37:
40:ac:15:0e:35:24:4e:51:33:a0:94:47:32:13:79:
be:70:5b:14:b6:5b:6c:f8:45:b4:ca:42:5b:4e:64:
c4:26:b8:82:95:2f:e6:5a:94:06:21:60:d5:b9:5a:
fd:25:07:26:a7:eb:59:b4:4e:1f:b6:2c:5c:e5:fc:
67:a3:95:e1:7b:03:5e:4d:3e:82:0b:b3:66:a5:aa:
5f:d6:87:3e:20:5b:c9:d7:a7:08:90:de:da:74:3f:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4F:5B:4E:74:F4:84:D7:E8:C4:59:14:6D:24:2E:72:B0:69:FB:C9
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:91:12:71:7b:75:c1:29:ce:de:08:f2:97:90:b7:6e:01:88:
b8:0e:14:51:95:ee:8d:c5:78:55:57:4f:94:e0:df:fb:22:64:
5b:91:a6:40:fe:91:ff:53:6e:62:76:52:ba:16:8e:94:39:9b:
4b:d8:2b:78:f9:59:f8:ee:a5:b1:14:70:56:da:2e:a5:1f:ab:
e8:71:50:89:32:68:7b:6d:53:26:25:c7:2a:99:70:1e:03:dc:
21:80:b7:57:cb:da:e9:dd:5c:33:3b:a0:7c:ec:b8:49:a1:23:
60:b2:40:78:1c:fe:55:ed:ea:2d:2d:76:ee:fb:9a:85:ac:99:
0e:54:d1:32:b6:a0:8d:04:74:8f:a4:81:1d:44:a8:89:2a:72:
7c:c4:33:7e:03:50:51:d1:a8:cc:25:9c:df:8d:fc:50:51:26:
57:17:75:b8:14:90:87:90:01:29:74:be:ca:4f:dd:61:6f:80:
9c:6a:73:9d:64:32:29:9d:22:04:fa:08:81:e3:5e:94:ec:82:
94:37:34:1c:04:df:6e:ab:48:ca:af:a9:26:3a:56:67:8f:77:
c4:8c:2e:a6:46:f3:b5:65:8a:a0:77:33:46:be:bb:39:db:77:
d2:de:43:43:db:de:ff:f8:7f:73:17:2d:23:e7:22:19:57:cd:
40:fd:86:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaw16BogSF3zf+jZB3leNspMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZjRiOWY0ODU2NDIwODlmMzZiMTc0ZDk2NDJkYzQ4Mzdm
ZjRkMjQwHhcNMjUwNTA4MTcwMDQzWhcNMjUwNTA5MTcwMDQzWjAzMTEwLwYDVQQD
EyhjNzRmNWI0ZTc0ZjQ4NGQ3ZThjNDU5MTQ2ZDI0MmU3MmIwNjlmYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75onhIOa3rTteTUNverbfq2jMGaw
6TsEB67I655F5Cg9c5pK0mPLdiS2u86S11GYbvWdUF5MJGLNoH4qZyBPIDsVCTnw
s+9JHF5Y9Y7Zd6yoaSpLYBBbAiJFAdXht4zfZBOi2uJyqdVvAx6v3438qhsdO9DO
QTs+EFxI7UtExFjKNC1qochwVe83twTPBgwwqOjcpmeDvFX/I8PuMntKF9E3GDdA
rBUONSROUTOglEcyE3m+cFsUtlts+EW0ykJbTmTEJriClS/mWpQGIWDVuVr9JQcm
p+tZtE4ftixc5fxno5XhewNeTT6CC7Nmpapf1oc+IFvJ16cIkN7adD/P4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdPW0509ITX6MRZFG0kLnKwafvJMB8GA1UdIwQY
MBaAFCT0ufSFZCCJ82sXTZZC3Eg3/00kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jNDdlOTAtMGYwOC00NjNiLTg4MTAt
YzA3Yjk4ZjZlNzY1LzEvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jNDdlOTAtMGYwOC00NjNiLTg4MTAtYzA3Yjk4ZjZlNzY1
LzEvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZEScXt1
wSnO3gjyl5C3bgGIuA4UUZXujcV4VVdPlODf+yJkW5GmQP6R/1NuYnZSuhaOlDmb
S9grePlZ+O6lsRRwVtoupR+r6HFQiTJoe21TJiXHKplwHgPcIYC3V8va6d1cMzug
fOy4SaEjYLJAeBz+Ve3qLS127vuahayZDlTRMragjQR0j6SBHUSoiSpyfMQzfgNQ
UdGozCWc3438UFEmVxd1uBSQh5ABKXS+yk/dYW+AnGpznWQyKZ0iBPoIgeNelOyC
lDc0HATfbqtIyq+pJjpWZ493xIwupkbztWWKoHczRr67Odt30t5DQ9ve//h/cxct
I+ciGVfNQP2GAQ==
-----END CERTIFICATE-----
Generated at Fri May 9 03:24:19 2025 by rpki-client