Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
File: JhRBGJnXIfND7So5YplpQXtbZV0.mft (raw, json)
Hash identifier: OEhOOpOnUZ5Ab0fYN6du5pFR0OjPuvUlFATQqnDAhoA=
Subject key identifier: FC:53:27:1B:5E:E0:D2:CF:D3:D1:99:79:91:EF:3B:28:21:1B:52:53
Authority key identifier: 26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
Certificate issuer: /CN=2614411899d721f343ed2a39629969417b5b655d
Certificate serial: 0196B747956299ADC582ED42BC473ADA0FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
Manifest number: 0EA7
Signing time: Fri 09 May 2025 23:00:43 +0000
Manifest this update: Fri 09 May 2025 23:00:43 +0000
Manifest next update: Sat 10 May 2025 23:00:43 +0000
Files and hashes: 1: BW4BmUKCyDozy984WvALErmmyWk.roa (hash: NoDLKqIq52rdkg1nyOBS52VEKKgBzHcZpmlA/5oZ2N4=)
2: JhRBGJnXIfND7So5YplpQXtbZV0.crl (hash: owwt5vA7MB/fpkMEC2aOnivsqy8nhc1o2EBxNtlXmng=)
3: kRjRCT1hQD1ho57w--1uU8Vfnmw.roa (hash: hC2/HbU7Mf5QSInHXiOZZl8RFNv/DCEQb2nhsuAiYAk=)
4: knYcxIk4gBoyhnJA7zGhUiEOoU0.roa (hash: Pb2aA+Tft7i/Jp7vyucHlf/5bNws4Usmn/wz+ukU/co=)
5: mDIQfv7lheWlkNzFn-WZkIXBSMc.roa (hash: v+ukO0uJ0pKEoYLwa+X3bJdigzbF9dbIADjWYWJJUdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:95:62:99:ad:c5:82:ed:42:bc:47:3a:da:0f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2614411899d721f343ed2a39629969417b5b655d
Validity
Not Before: May 9 23:00:43 2025 GMT
Not After : May 10 23:00:43 2025 GMT
Subject: CN=fc53271b5ee0d2cfd3d1997991ef3b28211b5253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:17:9f:e6:c6:b1:1d:82:3b:c4:5f:67:8a:
98:8d:0f:7d:63:0e:2d:24:1e:5c:1b:10:7b:f6:d4:
50:32:d1:5c:c5:b0:b6:a6:a4:43:fb:37:5c:72:cd:
f6:da:58:48:cf:7d:e6:57:9b:97:96:9f:69:15:60:
8f:b0:61:eb:c8:0a:78:5b:8c:29:f6:9b:e6:6c:f3:
3d:d5:1c:ab:ba:30:a6:79:cf:64:56:7e:e3:c0:bc:
56:4d:ee:24:0a:8f:a3:c5:a2:0f:12:e0:a3:72:2f:
36:a0:7d:fd:c0:fc:86:d1:82:68:8c:be:01:d1:07:
02:53:8f:90:cb:5b:50:6d:87:64:45:51:89:ac:40:
18:77:6c:28:87:11:2f:83:0b:dd:f8:53:25:35:f4:
79:5c:37:7f:aa:f4:ee:b9:dc:ad:1f:81:f8:bd:52:
99:d4:d4:12:d8:c8:de:80:6b:06:cc:6c:2b:27:13:
a9:5c:c9:24:29:7a:a7:c7:fd:6f:67:51:db:5b:d2:
67:6d:06:01:84:5b:d2:39:af:77:b5:01:e6:60:d4:
50:aa:26:fd:df:d7:5b:b2:0e:68:9c:03:2e:fe:25:
21:20:7e:f6:38:94:98:f4:4f:ba:78:e4:0c:42:20:
24:d4:81:9a:d7:52:78:cc:6a:05:07:62:fd:21:5f:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:27:1B:5E:E0:D2:CF:D3:D1:99:79:91:EF:3B:28:21:1B:52:53
X509v3 Authority Key Identifier:
keyid:26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3a:5c:4e:d0:e2:d0:8c:cf:f0:a2:d5:47:45:b1:8a:a1:37:
dc:61:a0:65:32:dc:e3:f4:79:41:f4:99:03:9b:08:3c:42:f9:
48:d0:8c:93:ff:99:2a:85:41:2c:b9:d2:43:ae:f7:c6:ca:56:
90:29:d0:d2:2f:5d:9c:1b:14:88:8f:e0:4b:cd:b5:0e:97:79:
41:ff:f7:e4:e7:16:4b:ec:38:0d:6a:85:7b:61:1f:a3:70:f7:
38:01:35:4d:08:8c:79:86:b7:0d:f2:39:55:74:0b:fc:7e:ef:
b2:d5:6f:b2:ba:bc:89:94:22:7e:77:2e:66:76:b8:31:e9:94:
d1:e4:68:94:06:04:94:21:18:df:97:90:ee:ff:a5:e5:81:34:
82:72:fb:2b:13:ae:a9:37:73:7b:85:13:3f:c9:ea:89:0f:d2:
18:7b:ca:c9:da:3d:18:e5:55:dd:ce:44:a8:28:a9:76:fd:e7:
48:d4:0d:ea:7f:be:24:b8:54:fc:66:de:80:18:77:a4:16:23:
ff:78:58:dc:57:c9:8e:4e:e6:92:be:a2:a4:26:e5:66:72:eb:
ca:b2:8d:02:c5:92:33:3d:1f:26:23:0b:a5:b5:e5:c1:81:7e:
14:61:90:51:19:a3:ce:2c:aa:3b:f4:af:ad:e8:bb:d1:1b:a6:
85:8e:99:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3R5Vima3Fgu1CvEc62g+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MTQ0MTE4OTlkNzIxZjM0M2VkMmEzOTYyOTk2OTQxN2I1
YjY1NWQwHhcNMjUwNTA5MjMwMDQzWhcNMjUwNTEwMjMwMDQzWjAzMTEwLwYDVQQD
EyhmYzUzMjcxYjVlZTBkMmNmZDNkMTk5Nzk5MWVmM2IyODIxMWI1MjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGQXn+bGsR2CO8RfZ4qYjQ99Yw4t
JB5cGxB79tRQMtFcxbC2pqRD+zdccs322lhIz33mV5uXlp9pFWCPsGHryAp4W4wp
9pvmbPM91RyrujCmec9kVn7jwLxWTe4kCo+jxaIPEuCjci82oH39wPyG0YJojL4B
0QcCU4+Qy1tQbYdkRVGJrEAYd2wohxEvgwvd+FMlNfR5XDd/qvTuudytH4H4vVKZ
1NQS2MjegGsGzGwrJxOpXMkkKXqnx/1vZ1HbW9JnbQYBhFvSOa93tQHmYNRQqib9
39dbsg5onAMu/iUhIH72OJSY9E+6eOQMQiAk1IGa11J4zGoFB2L9IV9JiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxTJxte4NLP09GZeZHvOyghG1JTMB8GA1UdIwQY
MBaAFCYUQRiZ1yHzQ+0qOWKZaUF7W2VdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9kYzRlMDAtNzhiNi00NzViLTg1YzQt
MDIxNDQ1NTEyOTlmLzEvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9kYzRlMDAtNzhiNi00NzViLTg1YzQtMDIxNDQ1NTEyOTlm
LzEvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTpcTtDi
0IzP8KLVR0WxiqE33GGgZTLc4/R5QfSZA5sIPEL5SNCMk/+ZKoVBLLnSQ673xspW
kCnQ0i9dnBsUiI/gS821Dpd5Qf/35OcWS+w4DWqFe2Efo3D3OAE1TQiMeYa3DfI5
VXQL/H7vstVvsrq8iZQifncuZna4MemU0eRolAYElCEY35eQ7v+l5YE0gnL7KxOu
qTdze4UTP8nqiQ/SGHvKydo9GOVV3c5EqCipdv3nSNQN6n++JLhU/GbegBh3pBYj
/3hY3FfJjk7mkr6ipCblZnLryrKNAsWSMz0fJiMLpbXlwYF+FGGQURmjziyqO/Sv
rei70RumhY6Z0g==
-----END CERTIFICATE-----
Generated at Sat May 10 04:39:57 2025 by rpki-client