
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
File: jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json)
Hash identifier: Y66xPzMXPCvGOCjMp0AGEim9edcVQA5vyyLx5hIbUbc=
Subject key identifier: 88:23:3E:AB:62:F2:B6:73:EA:C9:D8:CE:FF:7E:7D:FA:32:3A:62:E9
Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
Certificate issuer: /CN=8c48dcecbbcc052c659f971609229e3656a3d956
Certificate serial: 019657260AEB09E73111DFAFFA8D057D67CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
Manifest number: 041C
Signing time: Mon 21 Apr 2025 07:00:32 +0000
Manifest this update: Mon 21 Apr 2025 07:00:32 +0000
Manifest next update: Tue 22 Apr 2025 07:00:32 +0000
Files and hashes: 1: 9Ikrgii6aWEfsxAWAi789vrE9wg.roa (hash: iLnyK1Sj4Jg60yb2gV/nuNI+npfH3YvqxRf21D1k0LY=)
2: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: v6gBwYxwBPk9B2Hwf9U/dJsS2kX/yIn2EZrEsJwibW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:0a:eb:09:e7:31:11:df:af:fa:8d:05:7d:67:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956
Validity
Not Before: Apr 21 07:00:32 2025 GMT
Not After : Apr 22 07:00:32 2025 GMT
Subject: CN=88233eab62f2b673eac9d8ceff7e7dfa323a62e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ed:bb:a5:3c:cb:69:b7:57:b9:96:d0:f6:6b:
b6:4f:7a:47:0d:24:84:37:10:18:11:cb:1e:37:d8:
bc:85:83:e3:47:a5:d4:14:25:f5:53:8d:53:07:0b:
f2:d9:a6:e3:c6:5f:4a:92:e6:15:5c:21:b4:4a:6d:
a6:71:dd:b7:e3:05:3f:92:34:bb:f9:77:10:f7:ba:
cc:a8:1b:db:b7:c3:46:09:18:ee:19:a5:30:6f:6c:
d3:72:1e:9a:f2:89:96:2a:48:2e:24:d3:10:f9:30:
84:81:3c:8d:c4:a1:29:99:2a:de:eb:bd:5d:84:1f:
81:75:93:7e:d2:d5:fc:41:68:7f:5e:1d:65:c6:32:
bc:dc:b4:8f:5e:d8:61:ee:af:c5:e9:b1:e6:3d:21:
76:8e:5e:56:b3:dd:8f:2d:47:45:4d:02:34:68:44:
f0:a7:fe:38:2f:f5:ed:e6:db:28:a7:05:ee:07:f8:
3f:ab:c1:4c:b1:07:9a:ba:78:50:f8:f1:d7:67:56:
bb:af:67:dd:7f:dc:db:06:44:67:54:0e:7a:84:8a:
ee:e3:25:48:d1:39:70:72:3e:98:e7:59:9f:7c:42:
1b:0b:48:65:17:6a:e6:6c:d7:71:7b:05:df:8e:06:
63:8b:8b:9d:ce:23:79:37:98:0f:21:11:54:54:d2:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:23:3E:AB:62:F2:B6:73:EA:C9:D8:CE:FF:7E:7D:FA:32:3A:62:E9
X509v3 Authority Key Identifier:
keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:89:8f:e7:8e:d9:20:df:45:3f:95:79:76:c6:75:89:9a:37:
ac:69:b3:3e:e8:18:e6:35:25:cd:eb:74:96:d7:5f:64:bd:0a:
6d:3a:49:0d:85:b7:ad:4a:a4:a4:23:ee:01:3f:6e:9f:56:72:
cb:ac:41:0e:6f:d7:6d:01:d6:e5:9b:cd:9c:4b:a2:01:60:e3:
c1:59:7e:a1:0b:3f:54:9f:9b:b6:dd:26:e4:f4:32:b2:1c:6c:
0b:7d:65:75:ba:b4:7c:eb:7c:da:5a:85:4f:b0:e7:20:a4:93:
1a:73:a3:cb:d5:87:e3:2f:d3:c9:70:4c:95:d8:3a:5d:99:56:
c2:27:cf:61:91:91:f1:fe:37:66:db:16:e5:7a:70:8b:e2:80:
c7:b3:72:9b:b1:63:d2:79:64:71:2d:45:f6:c0:72:ef:96:06:
41:80:22:11:31:5c:c8:f8:1d:0d:b6:3f:5c:1e:44:9e:1c:ad:
9a:f7:83:77:ce:af:97:83:28:43:f8:31:4a:f0:39:8e:56:1d:
db:9e:15:b9:ff:09:bd:ff:71:e7:68:de:e3:85:7b:60:ae:6e:
32:9b:36:5e:a7:8f:10:e6:c7:9b:d2:d9:c0:a8:52:3a:f8:d6:
63:e3:e6:b1:13:28:af:15:87:82:0a:4b:48:52:55:f7:59:36:
20:9e:28:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJgrrCecxEd+v+o0FfWfPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNDhkY2VjYmJjYzA1MmM2NTlmOTcxNjA5MjI5ZTM2NTZh
M2Q5NTYwHhcNMjUwNDIxMDcwMDMyWhcNMjUwNDIyMDcwMDMyWjAzMTEwLwYDVQQD
Eyg4ODIzM2VhYjYyZjJiNjczZWFjOWQ4Y2VmZjdlN2RmYTMyM2E2MmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u27pTzLabdXuZbQ9mu2T3pHDSSE
NxAYEcseN9i8hYPjR6XUFCX1U41TBwvy2abjxl9KkuYVXCG0Sm2mcd234wU/kjS7
+XcQ97rMqBvbt8NGCRjuGaUwb2zTch6a8omWKkguJNMQ+TCEgTyNxKEpmSre671d
hB+BdZN+0tX8QWh/Xh1lxjK83LSPXthh7q/F6bHmPSF2jl5Ws92PLUdFTQI0aETw
p/44L/Xt5tsopwXuB/g/q8FMsQeaunhQ+PHXZ1a7r2fdf9zbBkRnVA56hIru4yVI
0Tlwcj6Y51mffEIbC0hlF2rmbNdxewXfjgZji4udziN5N5gPIRFUVNIwVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgjPqti8rZz6snYzv9+ffoyOmLpMB8GA1UdIwQY
MBaAFIxI3Oy7zAUsZZ+XFgkinjZWo9lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wZGQ2NjgtOTcyNS00OGJjLTgwZjYt
MTViMDE4NWU3YTc5LzEvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wZGQ2NjgtOTcyNS00OGJjLTgwZjYtMTViMDE4NWU3YTc5
LzEvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoImP547Z
IN9FP5V5dsZ1iZo3rGmzPugY5jUlzet0ltdfZL0KbTpJDYW3rUqkpCPuAT9un1Zy
y6xBDm/XbQHW5ZvNnEuiAWDjwVl+oQs/VJ+btt0m5PQyshxsC31ldbq0fOt82lqF
T7DnIKSTGnOjy9WH4y/TyXBMldg6XZlWwifPYZGR8f43ZtsW5Xpwi+KAx7Nym7Fj
0nlkcS1F9sBy75YGQYAiETFcyPgdDbY/XB5EnhytmveDd86vl4MoQ/gxSvA5jlYd
254Vuf8Jvf9x52je44V7YK5uMps2XqePEObHm9LZwKhSOvjWY+PmsRMorxWHggpL
SFJV91k2IJ4o5w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:20:00 2025 by rpki-client