Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier: yB9u18cWVOtEr5P1tusXURQPsf55VSOUPqpAfp4vAZc=
Subject key identifier: 26:F9:E5:72:2A:F9:BE:BF:A0:7C:96:77:FA:24:FE:87:35:5B:12:C0
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial: 01965EDF52CF22D3FEA0501BD4242C631FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number: 0117
Signing time: Tue 22 Apr 2025 19:00:16 +0000
Manifest this update: Tue 22 Apr 2025 19:00:16 +0000
Manifest next update: Wed 23 Apr 2025 19:00:16 +0000
Files and hashes: 1: 5mE6WJ9C1aVlmVoIkqUjqUKu6GA.roa (hash: iW1w4Z2DczRn4meCeEiq3QUgbwsTpwLpy6/um6q5LvU=)
2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: DUDRq359P5Rfy8m+4lE/5DykPsUTapubUoi8EUrR2cA=)
3: UABXDisY7UIcuu729SEVeaTHi9g.roa (hash: OYLFe1eOiXjeIqPxbtFA6YEKDGNFPpOrX8ZmLcir4vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:52:cf:22:d3:fe:a0:50:1b:d4:24:2c:63:1f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Validity
Not Before: Apr 22 19:00:16 2025 GMT
Not After : Apr 23 19:00:16 2025 GMT
Subject: CN=26f9e5722af9bebfa07c9677fa24fe87355b12c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:75:a1:b4:50:5e:20:db:16:6d:5b:ac:c4:
10:49:59:00:f0:1a:ad:9a:96:1c:ac:ed:f4:f4:61:
9a:c3:da:b9:6e:7b:0e:3f:54:31:a6:33:4a:a4:af:
e7:80:14:ac:6c:71:a5:e8:cd:45:ad:7e:d6:94:04:
18:b0:8d:0c:e3:03:3e:65:5a:01:18:95:73:35:66:
9a:7b:e2:91:5f:22:25:47:88:87:93:8e:cb:0f:4d:
0d:c4:f7:5f:b2:0e:12:cc:b5:39:d5:ca:f9:fc:cb:
ce:e2:ce:8f:df:7d:54:15:92:29:cb:e9:4f:d5:1e:
87:d6:52:34:a3:e4:1e:8b:eb:c0:da:11:61:68:ec:
56:54:ce:a2:91:4f:2d:26:ae:16:c0:1c:8d:c6:b6:
de:11:4e:44:60:82:c7:63:41:7e:7e:93:22:f7:d2:
bc:9f:f5:99:c9:9d:a3:c8:e5:61:dd:81:df:4e:d4:
2f:82:33:7a:af:fa:a8:91:c2:8f:83:a8:9e:fd:c2:
d5:7b:b8:24:a6:77:f3:cb:ba:32:9e:89:29:c3:28:
7f:9a:11:d2:d3:37:d9:0f:b8:c3:87:e9:cc:4e:6e:
8c:4d:a6:3d:80:da:1e:e7:80:7b:26:2f:c5:d1:8d:
ae:8a:7e:dc:ed:67:85:5e:79:d4:82:5b:41:f5:d0:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F9:E5:72:2A:F9:BE:BF:A0:7C:96:77:FA:24:FE:87:35:5B:12:C0
X509v3 Authority Key Identifier:
keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ec:12:5e:ac:b4:e1:01:fe:69:01:37:d0:5b:48:70:d1:4e:
5d:34:93:83:2d:6e:1a:98:f2:e0:e2:f7:48:8e:27:a3:7c:76:
75:1c:6d:89:01:fd:0a:bb:64:6c:e6:ca:b1:61:2b:2e:3b:3d:
61:f7:d9:bf:96:d0:56:ba:47:5b:cb:b3:0e:9e:f7:08:6b:37:
8d:f3:13:bc:75:c4:2b:88:9d:9b:42:05:02:a3:dc:d0:32:ec:
38:49:0a:66:90:fa:f5:34:fe:12:e7:87:a2:b0:8f:48:27:a5:
d5:12:85:6f:96:98:69:be:95:09:0a:15:81:01:b7:21:aa:ed:
53:65:f8:c4:82:ca:f6:ad:97:62:7f:bd:53:ce:1b:95:40:44:
e1:40:d1:ce:ca:56:51:8d:39:fc:5c:3b:bf:6d:97:67:e8:0b:
07:bc:2b:46:0a:74:72:4e:3d:20:35:8d:00:1b:f6:d2:89:75:
84:45:b9:05:7e:ce:46:0a:54:64:c6:01:ff:99:50:19:2e:97:
0c:2b:16:a1:63:e5:1a:94:e1:e3:27:b8:69:1d:b7:02:99:d6:
a3:9b:7c:f0:b1:0a:04:05:df:aa:ba:5b:35:14:85:7a:69:3a:
d1:f2:f6:e0:8c:4b:ec:62:79:1b:87:5a:e5:b6:19:40:06:f2:
39:e4:1a:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZe31LPItP+oFAb1CQsYx+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDBhNWNhMmNmMWJkOTEyZjQyY2M4Y2Y2NTFmNmZlODhl
NzI2YTQwHhcNMjUwNDIyMTkwMDE2WhcNMjUwNDIzMTkwMDE2WjAzMTEwLwYDVQQD
EygyNmY5ZTU3MjJhZjliZWJmYTA3Yzk2NzdmYTI0ZmU4NzM1NWIxMmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn51obRQXiDbFm1brMQQSVkA8Bqt
mpYcrO309GGaw9q5bnsOP1QxpjNKpK/ngBSsbHGl6M1FrX7WlAQYsI0M4wM+ZVoB
GJVzNWaae+KRXyIlR4iHk47LD00NxPdfsg4SzLU51cr5/MvO4s6P331UFZIpy+lP
1R6H1lI0o+Qei+vA2hFhaOxWVM6ikU8tJq4WwByNxrbeEU5EYILHY0F+fpMi99K8
n/WZyZ2jyOVh3YHfTtQvgjN6r/qokcKPg6ie/cLVe7gkpnfzy7oynokpwyh/mhHS
0zfZD7jDh+nMTm6MTaY9gNoe54B7Ji/F0Y2uin7c7WeFXnnUgltB9dDfhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCb55XIq+b6/oHyWd/ok/oc1WxLAMB8GA1UdIwQY
MBaAFCTQpcos8b2RL0LMjPZR9v6I5yakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQt
ZGIxM2NjM2YxZGI2LzEvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQtZGIxM2NjM2YxZGI2
LzEvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuwSXqy0
4QH+aQE30FtIcNFOXTSTgy1uGpjy4OL3SI4no3x2dRxtiQH9CrtkbObKsWErLjs9
YffZv5bQVrpHW8uzDp73CGs3jfMTvHXEK4idm0IFAqPc0DLsOEkKZpD69TT+EueH
orCPSCel1RKFb5aYab6VCQoVgQG3IartU2X4xILK9q2XYn+9U84blUBE4UDRzspW
UY05/Fw7v22XZ+gLB7wrRgp0ck49IDWNABv20ol1hEW5BX7ORgpUZMYB/5lQGS6X
DCsWoWPlGpTh4ye4aR23ApnWo5t88LEKBAXfqrpbNRSFemk60fL24IxL7GJ5G4da
5bYZQAbyOeQaog==
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:00:41 2025 by rpki-client