Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
File: jTgcV7CbXiZ91UcVDbRVg46si6M.mft (raw, json)
Hash identifier: oEHCsiMdmAaIoN5zH5Uv2NhnryehHVAFcqJFMC7ZNW4=
Subject key identifier: 15:9E:67:C0:2B:35:2D:1A:CA:BA:A6:65:56:37:79:D0:9D:26:C4:B3
Authority key identifier: 8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
Certificate issuer: /CN=8d381c57b09b5e267dd547150db455838eac8ba3
Certificate serial: 0196591497744272E21A1244F5B4A4E123A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
Manifest number: 0286
Signing time: Mon 21 Apr 2025 16:00:43 +0000
Manifest this update: Mon 21 Apr 2025 16:00:43 +0000
Manifest next update: Tue 22 Apr 2025 16:00:43 +0000
Files and hashes: 1: jTgcV7CbXiZ91UcVDbRVg46si6M.crl (hash: lYE4UmlNqrZlgP+jAwRR9FVsdiO/bbrA85mrxIASIEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:97:74:42:72:e2:1a:12:44:f5:b4:a4:e1:23:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d381c57b09b5e267dd547150db455838eac8ba3
Validity
Not Before: Apr 21 16:00:43 2025 GMT
Not After : Apr 22 16:00:43 2025 GMT
Subject: CN=159e67c02b352d1acabaa665563779d09d26c4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:24:38:aa:c6:68:8f:e3:f8:e0:9e:90:03:
ac:4d:7d:e5:3f:b5:ee:2a:94:ae:17:1c:f5:54:b7:
10:a3:2f:02:6c:60:b6:d2:3d:39:2e:5c:c0:26:7b:
c2:cd:20:7c:e4:3a:55:08:63:7a:18:68:88:35:3a:
fa:83:0c:3c:3a:45:13:d4:eb:99:55:b2:44:70:80:
7b:31:ed:a4:1d:4b:26:db:55:35:0c:c6:c7:24:1a:
d5:cc:73:79:33:f4:ee:23:25:c9:33:01:6a:0f:66:
b4:c7:fc:04:05:1f:4e:19:71:8b:d3:0c:c4:37:b3:
f7:45:04:10:2b:da:f9:eb:75:ea:66:c2:5d:54:33:
f7:ff:4f:10:4f:09:11:de:19:f2:be:03:b1:77:fb:
d1:52:ac:82:49:9a:40:56:03:b1:b7:a6:cf:cc:56:
c8:bb:1c:4e:8e:f1:98:08:12:8c:ff:15:33:b2:04:
23:c8:ae:07:87:80:5a:6c:07:a4:90:a6:d8:07:ec:
a6:e8:80:2b:85:c7:e3:67:0f:09:e6:bf:85:16:39:
69:23:f0:70:4a:73:84:ab:89:66:e4:8a:e6:7a:88:
d4:61:f0:81:2c:a9:f2:24:8e:cc:0d:a2:a0:aa:d4:
6e:2c:c0:cf:47:02:65:94:32:7b:56:d1:86:78:5c:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9E:67:C0:2B:35:2D:1A:CA:BA:A6:65:56:37:79:D0:9D:26:C4:B3
X509v3 Authority Key Identifier:
keyid:8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d6:9c:0b:3b:e5:72:fc:b2:f6:26:b9:78:2d:f8:c0:d8:de:
80:0b:c1:83:89:e5:ef:b8:9d:86:90:29:61:d0:d4:b7:40:81:
09:04:16:f4:8d:38:8a:8a:cb:7a:8f:c1:2a:ed:ae:68:f2:6a:
93:22:f9:fb:e7:99:00:82:91:3e:f4:e1:72:c6:00:7e:67:ab:
3c:91:82:03:bd:17:14:3c:00:d3:91:02:f3:22:cc:7f:fd:27:
3e:42:2c:7f:fa:87:bb:91:3f:12:c1:19:76:64:ba:61:19:c6:
c0:d0:62:84:4f:95:28:54:30:3b:d4:32:f7:04:8a:bc:11:01:
b6:0d:3c:79:27:24:8a:3f:69:50:90:ac:79:ea:66:a7:01:26:
5c:45:21:a7:e3:97:8b:64:b5:83:c8:70:7b:f1:ad:04:f6:e3:
1d:e5:d0:4e:20:c8:68:15:d2:16:33:72:6c:36:43:48:e8:92:
97:27:f7:84:54:0f:67:4b:d2:0d:84:8b:e1:a2:2c:5d:3e:ef:
23:36:9f:99:f0:49:46:d1:d7:60:6c:91:8a:7d:d2:42:68:73:
9f:04:ac:a0:b8:4b:29:f0:e5:22:81:91:d6:4a:2a:df:93:c8:
4b:6e:af:6a:ad:a9:7a:47:67:83:15:47:10:d2:4a:d8:25:83:
a6:ee:af:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFJd0QnLiGhJE9bSk4SOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzgxYzU3YjA5YjVlMjY3ZGQ1NDcxNTBkYjQ1NTgzOGVh
YzhiYTMwHhcNMjUwNDIxMTYwMDQzWhcNMjUwNDIyMTYwMDQzWjAzMTEwLwYDVQQD
EygxNTllNjdjMDJiMzUyZDFhY2FiYWE2NjU1NjM3NzlkMDlkMjZjNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAckOKrGaI/j+OCekAOsTX3lP7Xu
KpSuFxz1VLcQoy8CbGC20j05LlzAJnvCzSB85DpVCGN6GGiINTr6gww8OkUT1OuZ
VbJEcIB7Me2kHUsm21U1DMbHJBrVzHN5M/TuIyXJMwFqD2a0x/wEBR9OGXGL0wzE
N7P3RQQQK9r563XqZsJdVDP3/08QTwkR3hnyvgOxd/vRUqyCSZpAVgOxt6bPzFbI
uxxOjvGYCBKM/xUzsgQjyK4Hh4BabAekkKbYB+ym6IArhcfjZw8J5r+FFjlpI/Bw
SnOEq4lm5IrmeojUYfCBLKnyJI7MDaKgqtRuLMDPRwJllDJ7VtGGeFzlzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWeZ8ArNS0ayrqmZVY3edCdJsSzMB8GA1UdIwQY
MBaAFI04HFewm14mfdVHFQ20VYOOrIujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRnY1Y3Q2JYaVo5MVVjVkRiUlZnNDZzaTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNWVlMzItYzcwMy00OTRkLTg5YzAt
NmY4MzAyNjk4OTliLzEvalRnY1Y3Q2JYaVo5MVVjVkRiUlZnNDZzaTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iNWVlMzItYzcwMy00OTRkLTg5YzAtNmY4MzAyNjk4OTli
LzEvalRnY1Y3Q2JYaVo5MVVjVkRiUlZnNDZzaTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdacCzvl
cvyy9ia5eC34wNjegAvBg4nl77idhpApYdDUt0CBCQQW9I04iorLeo/BKu2uaPJq
kyL5++eZAIKRPvThcsYAfmerPJGCA70XFDwA05EC8yLMf/0nPkIsf/qHu5E/EsEZ
dmS6YRnGwNBihE+VKFQwO9Qy9wSKvBEBtg08eSckij9pUJCseepmpwEmXEUhp+OX
i2S1g8hwe/GtBPbjHeXQTiDIaBXSFjNybDZDSOiSlyf3hFQPZ0vSDYSL4aIsXT7v
IzafmfBJRtHXYGyRin3SQmhznwSsoLhLKfDlIoGR1koq35PIS26vaq2pekdngxVH
ENJK2CWDpu6v7A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:01 2025 by rpki-client