Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: ULPiQ4k06H1khNsbIUwg6wVGPpHlqQ4lfrpbNoogaKA=
Subject key identifier: CA:AE:27:98:11:F1:F2:71:4B:E3:87:B0:2F:BE:37:95:FB:EA:1A:E1
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 0196A42E3981E233DD9060F9E392ADDE4531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 03ED
Signing time: Tue 06 May 2025 06:00:14 +0000
Manifest this update: Tue 06 May 2025 06:00:14 +0000
Manifest next update: Wed 07 May 2025 06:00:14 +0000
Files and hashes: 1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: yu79b2cI9a/sRikC+w9Nzu76CZL4Hv/4miFMD4UkbT8=)
2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:2e:39:81:e2:33:dd:90:60:f9:e3:92:ad:de:45:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: May 6 06:00:14 2025 GMT
Not After : May 7 06:00:14 2025 GMT
Subject: CN=caae279811f1f2714be387b02fbe3795fbea1ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:99:55:14:d8:a2:0d:6e:56:ba:d9:e3:8b:
d9:93:2b:d5:ef:ac:31:77:5b:a6:5a:f2:74:07:b9:
ef:c0:b0:93:21:cc:0d:5c:8a:62:c1:f3:b3:c3:f4:
d0:7c:7c:52:7a:92:72:c0:66:26:a9:ab:a5:37:dc:
a4:4b:64:4b:d9:fa:4a:7d:89:09:30:42:fa:39:39:
ad:5f:54:64:e8:0f:7d:26:a4:f6:4c:47:85:e9:07:
14:bf:e8:48:94:2a:c2:b7:7d:66:4c:01:33:87:a6:
b5:c8:eb:1a:62:e9:3f:9d:27:69:b8:a1:f9:28:22:
fa:53:5b:1f:db:2d:c2:b9:3d:8a:47:68:f6:66:e7:
0c:74:df:a9:af:5d:d7:91:f8:aa:34:d1:70:53:2f:
67:83:8f:33:c0:1e:ce:ba:4c:a0:05:6c:6f:ae:1e:
1a:43:64:76:aa:eb:6f:52:dc:b1:df:ef:db:c1:a2:
64:ef:cf:6a:d8:18:ad:16:67:f6:17:90:28:a0:7f:
f3:1e:7c:61:42:ca:a5:02:7b:f7:c3:29:fa:d0:81:
ee:63:80:de:61:63:88:52:ac:5a:b1:04:9c:2b:b4:
4f:6e:07:68:29:6d:10:c3:ae:1e:fc:28:fe:18:58:
bb:48:65:22:6a:60:cf:f9:8b:b1:39:25:41:f3:e2:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AE:27:98:11:F1:F2:71:4B:E3:87:B0:2F:BE:37:95:FB:EA:1A:E1
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:00:36:0d:f7:05:d7:ad:0e:de:7d:dc:b1:9a:8c:06:62:29:
17:b7:fe:c7:01:05:a7:3d:e0:18:aa:5f:b1:87:54:fa:d6:16:
55:b1:d0:ce:0e:f7:13:87:08:6a:23:9f:e7:39:01:72:56:91:
0f:81:9f:2b:0a:59:2c:f5:71:e5:bb:0c:0c:20:9d:5f:ac:59:
c2:9f:5e:0b:6f:40:36:96:86:ad:ae:ec:19:19:3a:2e:68:49:
e2:be:d6:0b:79:05:8c:dd:9a:a4:46:77:c9:12:df:91:96:49:
8e:96:b7:cd:a0:12:49:e0:67:12:be:5e:4f:fa:e5:7a:f2:8b:
2c:90:d9:70:b1:2a:00:e5:b2:a4:4f:e1:b5:73:70:dc:e7:0e:
ec:77:10:fc:fd:b1:ce:de:95:2f:5b:33:ed:8c:27:a9:f4:1d:
70:5c:94:ce:19:57:95:0a:0a:21:4d:be:ca:46:8b:76:11:8e:
00:48:c3:b7:f1:d4:3c:c4:32:ee:57:bd:09:67:32:ea:32:e4:
41:c5:3f:20:16:dc:e9:79:c9:ca:fa:b4:46:d9:cd:72:df:93:
3f:3c:76:47:73:c1:41:9d:7d:53:06:7c:9b:cd:60:68:63:bc:
57:c0:fb:23:4c:eb:86:5c:34:1b:d2:fb:cd:62:79:2f:fe:3d:
79:64:85:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZakLjmB4jPdkGD545Kt3kUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjlkZDJmNGRhODg4YzI3ZDEzMGY5OWU4OGEyZTBjNTkw
YWFkMmYwHhcNMjUwNTA2MDYwMDE0WhcNMjUwNTA3MDYwMDE0WjAzMTEwLwYDVQQD
EyhjYWFlMjc5ODExZjFmMjcxNGJlMzg3YjAyZmJlMzc5NWZiZWExYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwiZVRTYog1uVrrZ44vZkyvV76wx
d1umWvJ0B7nvwLCTIcwNXIpiwfOzw/TQfHxSepJywGYmqaulN9ykS2RL2fpKfYkJ
MEL6OTmtX1Rk6A99JqT2TEeF6QcUv+hIlCrCt31mTAEzh6a1yOsaYuk/nSdpuKH5
KCL6U1sf2y3CuT2KR2j2ZucMdN+pr13XkfiqNNFwUy9ng48zwB7OukygBWxvrh4a
Q2R2qutvUtyx3+/bwaJk789q2BitFmf2F5AooH/zHnxhQsqlAnv3wyn60IHuY4De
YWOIUqxasQScK7RPbgdoKW0Qw64e/Cj+GFi7SGUiamDP+YuxOSVB8+LTwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMquJ5gR8fJxS+OHsC++N5X76hrhMB8GA1UdIwQY
MBaAFCZp3S9NqIjCfRMPmeiKLgxZCq0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTIt
ZjRkMzBhNzk0M2Y2LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTItZjRkMzBhNzk0M2Y2
LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwA2DfcF
160O3n3csZqMBmIpF7f+xwEFpz3gGKpfsYdU+tYWVbHQzg73E4cIaiOf5zkBclaR
D4GfKwpZLPVx5bsMDCCdX6xZwp9eC29ANpaGra7sGRk6LmhJ4r7WC3kFjN2apEZ3
yRLfkZZJjpa3zaASSeBnEr5eT/rlevKLLJDZcLEqAOWypE/htXNw3OcO7HcQ/P2x
zt6VL1sz7YwnqfQdcFyUzhlXlQoKIU2+ykaLdhGOAEjDt/HUPMQy7le9CWcy6jLk
QcU/IBbc6XnJyvq0RtnNct+TPzx2R3PBQZ19UwZ8m81gaGO8V8D7I0zrhlw0G9L7
zWJ5L/49eWSFgw==
-----END CERTIFICATE-----
Generated at Tue May 6 11:00:14 2025 by rpki-client