Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: 4E9g1rC1Ctq6pbvSP0JKmPBWAuxcOMMtR7bh56G+yrs=
Subject key identifier: 1A:37:42:CB:1B:CF:64:04:5D:52:90:B5:3B:FB:4D:43:8C:E4:6B:B3
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 0196C34C305B4002A4592F24A93BF26201D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 07:01:12 +0000
Manifest this update: Mon 12 May 2025 07:01:12 +0000
Manifest next update: Tue 13 May 2025 07:01:12 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: QtpfhqjedX3+u73nuz/+wHP0T59xueBQ5hbWnuTAI1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:30:5b:40:02:a4:59:2f:24:a9:3b:f2:62:01:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: May 12 07:01:12 2025 GMT
Not After : May 13 07:01:12 2025 GMT
Subject: CN=1a3742cb1bcf64045d5290b53bfb4d438ce46bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:18:f4:d4:52:2a:80:19:91:a1:63:a7:1d:
5f:6d:a6:3e:43:82:87:1e:2d:c2:28:26:6f:61:82:
0e:b3:01:a1:9d:bb:34:34:e7:d1:18:15:1d:91:f4:
15:98:a2:93:3c:ff:ec:6d:c2:0c:53:ce:75:af:cd:
6b:46:dd:89:5a:9a:c9:67:00:e0:38:21:26:08:da:
18:e6:6a:0e:e5:bf:19:84:f5:77:75:6d:83:24:87:
74:78:9a:7a:ed:75:ae:57:7d:91:c6:08:fe:e7:64:
11:f9:26:a2:a7:a8:4c:ac:24:e0:85:ef:19:d1:61:
42:de:5e:0d:16:41:f8:08:3e:ab:e1:cb:af:b7:42:
8a:1e:e3:e9:ea:3a:6e:1a:4e:6a:93:e2:80:7f:7c:
3b:35:6d:a2:7e:45:5f:d2:86:f2:a6:d3:14:1c:b7:
17:e2:19:9e:68:23:66:4a:60:45:3d:2f:59:28:29:
9b:50:b7:96:67:95:72:73:30:54:ad:33:87:57:6e:
da:b8:6f:bc:b7:7e:8c:a1:1e:f2:a7:22:b5:91:e4:
bb:a9:0d:89:1d:f4:d0:ac:08:75:6c:ff:f3:a5:a3:
15:2b:59:18:ce:af:cb:e5:9e:f6:7e:74:c8:0d:7c:
30:99:f3:2a:50:e0:35:86:e3:36:94:24:70:62:47:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:37:42:CB:1B:CF:64:04:5D:52:90:B5:3B:FB:4D:43:8C:E4:6B:B3
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:70:9a:a8:9a:e9:b3:de:24:0e:9a:2a:38:42:f7:06:75:1a:
81:ff:45:12:ec:0a:26:55:76:c0:43:83:1f:2f:5d:63:04:24:
1f:8f:c8:23:c3:01:51:93:64:23:44:9f:7c:55:83:23:2b:60:
f6:f8:bb:b4:5b:66:12:36:9b:88:f6:da:51:f7:b3:b6:89:29:
03:61:47:45:a9:f4:77:46:9f:b2:94:d7:83:bf:79:a7:52:ec:
57:32:ee:7f:4f:3e:5c:e7:09:c1:83:20:66:06:89:41:aa:a3:
db:3a:55:dd:07:21:0e:65:88:2f:95:88:04:a3:06:6f:20:08:
ea:9d:02:83:13:51:8a:ed:81:d7:99:0e:27:4a:b5:01:7d:21:
22:6e:2c:c8:1b:b3:85:fa:c5:76:b8:83:13:88:e4:4a:00:78:
a7:a4:d8:eb:5d:cb:25:94:9d:d0:df:39:e5:29:a2:2e:32:76:
19:df:d0:64:f8:5b:8b:ae:ec:52:c5:c8:3d:c1:ae:c3:7d:4b:
ca:1c:25:a0:8b:41:d7:a5:ab:23:7e:31:dc:c4:2f:f4:af:e1:
d7:b9:54:61:91:5e:3c:85:74:b5:ea:2d:cf:e8:0a:df:19:eb:
ed:a4:f2:d0:a6:49:ed:20:72:4a:cd:8b:0e:e5:f7:63:11:5f:
15:f2:3a:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDTDBbQAKkWS8kqTvyYgHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI2YWRiNDRmNTRiMDk5MmM3NTNlYjE3YmFiZTgxMmIw
NzQ4NjMwHhcNMjUwNTEyMDcwMTEyWhcNMjUwNTEzMDcwMTEyWjAzMTEwLwYDVQQD
EygxYTM3NDJjYjFiY2Y2NDA0NWQ1MjkwYjUzYmZiNGQ0MzhjZTQ2YmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJkY9NRSKoAZkaFjpx1fbaY+Q4KH
Hi3CKCZvYYIOswGhnbs0NOfRGBUdkfQVmKKTPP/sbcIMU851r81rRt2JWprJZwDg
OCEmCNoY5moO5b8ZhPV3dW2DJId0eJp67XWuV32Rxgj+52QR+Saip6hMrCTghe8Z
0WFC3l4NFkH4CD6r4cuvt0KKHuPp6jpuGk5qk+KAf3w7NW2ifkVf0obyptMUHLcX
4hmeaCNmSmBFPS9ZKCmbULeWZ5VyczBUrTOHV27auG+8t36MoR7ypyK1keS7qQ2J
HfTQrAh1bP/zpaMVK1kYzq/L5Z72fnTIDXwwmfMqUOA1huM2lCRwYkd8HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBo3Qssbz2QEXVKQtTv7TUOM5GuzMB8GA1UdIwQY
MBaAFAjSattE9UsJksdT6xe6voErB0hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMt
Y2NlNDlhOTMxYzllLzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMtY2NlNDlhOTMxYzll
LzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXCaqJrp
s94kDpoqOEL3BnUagf9FEuwKJlV2wEODHy9dYwQkH4/II8MBUZNkI0SffFWDIytg
9vi7tFtmEjabiPbaUfeztokpA2FHRan0d0afspTXg795p1LsVzLuf08+XOcJwYMg
ZgaJQaqj2zpV3QchDmWIL5WIBKMGbyAI6p0CgxNRiu2B15kOJ0q1AX0hIm4syBuz
hfrFdriDE4jkSgB4p6TY613LJZSd0N855SmiLjJ2Gd/QZPhbi67sUsXIPcGuw31L
yhwloItB16WrI34x3MQv9K/h17lUYZFePIV0teotz+gK3xnr7aTy0KZJ7SBySs2L
DuX3YxFfFfI6/Q==
-----END CERTIFICATE-----
Generated at Mon May 12 10:39:54 2025 by rpki-client