
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: /0Lii61VPzaSB2PyuFMxrtVyVbU0Wv/fYAxkDN6orpY=
Subject key identifier: 27:44:A1:A0:9B:17:B7:3B:82:58:B0:08:67:BF:41:06:53:18:75:E0
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 0196DE8C0A5C3DBFD52FEA49111892C783D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 08DB
Signing time: Sat 17 May 2025 14:00:41 +0000
Manifest this update: Sat 17 May 2025 14:00:41 +0000
Manifest next update: Sun 18 May 2025 14:00:41 +0000
Files and hashes: 1: hFUKeYVJZQidWIC3boS5B2MmNkQ.roa (hash: orWyk1nD9ke9cd+4s/S82r9At33d+yTlOwM1l+sczkc=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: kJxeT4DhwW97XILk4B7bQUD/4Yg9cQIw+RmW/nniT8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:8c:0a:5c:3d:bf:d5:2f:ea:49:11:18:92:c7:83:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: May 17 14:00:41 2025 GMT
Not After : May 18 14:00:41 2025 GMT
Subject: CN=2744a1a09b17b73b8258b00867bf4106531875e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:54:00:00:06:29:9c:c4:a8:b6:45:29:81:
af:95:35:0d:23:b3:db:21:a0:74:94:33:ea:40:72:
76:ba:06:d1:48:a6:7f:ce:d1:8b:7f:53:3d:13:14:
a6:8d:ce:f1:3b:d6:24:39:17:f0:1f:15:ef:e1:96:
22:69:6a:77:e5:17:03:7f:30:bd:8b:4b:6d:26:df:
12:0a:1b:cf:65:0f:2c:1b:b5:b4:52:26:71:80:47:
5d:ba:b9:2e:9a:dc:b7:ce:17:e9:af:e8:bf:32:b2:
e9:8d:d1:2b:6e:ba:7a:a0:1c:cd:db:a2:e8:1b:f9:
9e:7f:9b:0c:05:59:99:9c:61:50:fd:ed:4e:f0:c7:
3d:f6:3c:ce:47:6d:0d:17:68:c8:ca:91:c4:ae:ec:
26:68:3f:2d:73:3c:5b:5d:f0:1b:7c:c9:60:21:c5:
04:d3:fd:07:84:f5:f7:bb:7e:20:2b:a8:f9:78:14:
e5:fc:a8:5b:b0:12:90:5d:11:da:e5:fb:d2:a1:d6:
68:1f:1a:54:b5:3d:b3:2a:67:35:a8:7a:fe:16:33:
2d:97:2d:5d:ed:34:c2:67:44:df:58:d5:eb:82:af:
9d:83:b1:13:c5:4d:85:15:23:b0:38:a2:79:5e:c7:
e9:04:30:10:73:a4:dd:1e:d8:76:e2:35:ea:4e:46:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:44:A1:A0:9B:17:B7:3B:82:58:B0:08:67:BF:41:06:53:18:75:E0
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5f:8d:5e:c8:a8:23:76:7d:bb:00:69:8c:95:7f:a6:d9:c3:
0a:94:f1:65:87:73:0b:ab:07:22:6e:6b:4b:34:00:71:31:9b:
96:f9:11:da:b7:5e:8d:4c:0c:4d:a9:18:9b:36:56:30:0c:ad:
4c:75:01:55:b1:6a:66:d2:69:33:a4:69:ca:c5:c1:1d:db:1b:
d4:a3:18:d5:a9:60:5a:48:6a:6d:65:e3:5d:84:03:79:77:26:
b1:d8:68:42:e4:55:14:67:4b:85:79:fa:29:eb:11:6f:27:9d:
7e:ee:ea:ca:1a:eb:c3:41:fe:37:ae:fb:72:f0:5f:d3:e6:cc:
07:e2:f5:27:e6:8c:0f:53:8f:4b:bf:96:34:6e:7b:26:83:5d:
fd:26:86:e8:b4:29:9a:ca:64:b8:3a:f2:d9:8b:7a:e5:aa:38:
90:2f:13:c4:2d:ad:d9:da:71:3a:00:c0:a8:08:a5:7d:ff:b8:
fc:c0:a2:5c:71:53:74:c9:07:5a:a2:04:3f:59:9f:27:18:e3:
ad:8d:28:bc:d5:b6:31:89:d0:0a:de:98:b9:82:2b:dc:0e:61:
1d:d1:40:9e:08:fb:48:f5:16:75:43:87:2a:3d:5a:f8:c9:3e:
2c:69:ab:05:0c:fa:3e:c4:e0:1a:cc:ab:21:14:07:93:c4:01:
d8:22:51:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbejApcPb/VL+pJERiSx4PZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjBmNzBmMTdkOGI3MmMzZTQyYWVlMDMyOTEyOThiNTRh
NGZmMmYwHhcNMjUwNTE3MTQwMDQxWhcNMjUwNTE4MTQwMDQxWjAzMTEwLwYDVQQD
EygyNzQ0YTFhMDliMTdiNzNiODI1OGIwMDg2N2JmNDEwNjUzMTg3NWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06RUAAAGKZzEqLZFKYGvlTUNI7Pb
IaB0lDPqQHJ2ugbRSKZ/ztGLf1M9ExSmjc7xO9YkORfwHxXv4ZYiaWp35RcDfzC9
i0ttJt8SChvPZQ8sG7W0UiZxgEddurkumty3zhfpr+i/MrLpjdErbrp6oBzN26Lo
G/mef5sMBVmZnGFQ/e1O8Mc99jzOR20NF2jIypHEruwmaD8tczxbXfAbfMlgIcUE
0/0HhPX3u34gK6j5eBTl/KhbsBKQXRHa5fvSodZoHxpUtT2zKmc1qHr+FjMtly1d
7TTCZ0TfWNXrgq+dg7ETxU2FFSOwOKJ5XsfpBDAQc6TdHth24jXqTkYPCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdEoaCbF7c7gliwCGe/QQZTGHXgMB8GA1UdIwQY
MBaAFI8g9w8X2LcsPkKu4DKRKYtUpP8vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80MmMwYzAtZGU2ZC00OWI2LWI0NTAt
Yzk2YThkYTJjNTg5LzEvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy80MmMwYzAtZGU2ZC00OWI2LWI0NTAtYzk2YThkYTJjNTg5
LzEvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADF+NXsio
I3Z9uwBpjJV/ptnDCpTxZYdzC6sHIm5rSzQAcTGblvkR2rdejUwMTakYmzZWMAyt
THUBVbFqZtJpM6RpysXBHdsb1KMY1algWkhqbWXjXYQDeXcmsdhoQuRVFGdLhXn6
KesRbyedfu7qyhrrw0H+N677cvBf0+bMB+L1J+aMD1OPS7+WNG57JoNd/SaG6LQp
mspkuDry2Yt65ao4kC8TxC2t2dpxOgDAqAilff+4/MCiXHFTdMkHWqIEP1mfJxjj
rY0ovNW2MYnQCt6YuYIr3A5hHdFAngj7SPUWdUOHKj1a+Mk+LGmrBQz6PsTgGsyr
IRQHk8QB2CJR0A==
-----END CERTIFICATE-----
Generated at Sat May 17 16:46:30 2025 by rpki-client