Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
File: jmcNnjgoGVjuocw46s67vcM4HTY.mft (raw, json)
Hash identifier: 9HmRTrZisFjsass+Pi/ZaUMzP6M7eOMAJtzxjKm8Y64=
Subject key identifier: 63:8A:B3:85:66:AA:CB:27:A7:24:62:CD:8B:5D:9C:58:CC:E1:47:43
Authority key identifier: 8E:67:0D:9E:38:28:19:58:EE:A1:CC:38:EA:CE:BB:BD:C3:38:1D:36
Certificate issuer: /CN=8e670d9e38281958eea1cc38eacebbbdc3381d36
Certificate serial: 01965914543C8C0EB96694B695D44EB25A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmcNnjgoGVjuocw46s67vcM4HTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
Manifest number: 09DA
Signing time: Mon 21 Apr 2025 16:00:26 +0000
Manifest this update: Mon 21 Apr 2025 16:00:26 +0000
Manifest next update: Tue 22 Apr 2025 16:00:26 +0000
Files and hashes: 1: jmcNnjgoGVjuocw46s67vcM4HTY.crl (hash: 90cJIVVnehT3WvMQrBcd/txDtxazbjP0tzJ+hH48yLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmcNnjgoGVjuocw46s67vcM4HTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:54:3c:8c:0e:b9:66:94:b6:95:d4:4e:b2:5a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e670d9e38281958eea1cc38eacebbbdc3381d36
Validity
Not Before: Apr 21 16:00:26 2025 GMT
Not After : Apr 22 16:00:26 2025 GMT
Subject: CN=638ab38566aacb27a72462cd8b5d9c58cce14743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:75:94:98:d9:e5:fe:be:a8:eb:f7:e9:49:
ca:24:73:ec:c3:b4:52:8c:63:af:45:a6:10:2f:84:
5d:89:66:73:80:1a:bc:38:7e:d2:80:9b:c7:54:05:
a0:1b:da:29:24:21:e3:12:52:ed:a8:9c:d4:43:66:
8b:55:50:1c:27:ab:8f:07:32:1f:b8:9b:86:8a:fa:
d1:8c:45:b0:ba:2a:c0:5f:c5:b7:e7:98:92:8b:f0:
13:3c:48:21:be:3b:aa:02:4c:59:88:37:e0:d9:85:
4c:98:4c:3d:be:c1:8b:d9:7b:b0:83:de:8e:c3:db:
59:4f:e9:88:8c:68:de:75:aa:63:1c:81:62:b8:b2:
a7:74:c9:2e:de:79:a8:a2:15:0a:15:47:3d:be:ce:
6e:36:b8:8a:2d:3f:d8:15:0a:09:65:30:cf:13:0c:
a5:08:b1:27:56:43:6a:3a:14:ac:20:18:c8:d0:1e:
57:8b:ae:8f:81:cc:9c:9a:73:6a:b3:71:38:f0:eb:
16:40:92:f8:58:43:27:88:e4:20:f4:13:93:52:ab:
b8:f6:4f:08:52:60:63:aa:69:5d:59:a7:01:1f:34:
13:89:3e:e3:9f:da:bf:63:07:4e:72:e7:64:47:10:
01:2a:13:1e:2c:d9:97:d6:89:be:df:55:03:9b:7a:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8A:B3:85:66:AA:CB:27:A7:24:62:CD:8B:5D:9C:58:CC:E1:47:43
X509v3 Authority Key Identifier:
keyid:8E:67:0D:9E:38:28:19:58:EE:A1:CC:38:EA:CE:BB:BD:C3:38:1D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmcNnjgoGVjuocw46s67vcM4HTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d6:34:83:57:a6:3f:89:a7:2e:ed:32:24:dd:6b:0e:d3:fc:
fe:a1:49:d9:4a:c7:71:ce:48:02:76:cb:bb:1d:6f:bc:64:31:
bc:85:59:b3:d1:8e:44:26:55:88:29:38:bd:60:2b:c7:69:e1:
dc:3f:2e:c8:5d:dc:e3:ef:42:c2:ba:10:77:01:67:56:40:36:
5e:1a:d8:0b:c3:3b:76:43:fb:d6:07:ac:e7:5f:a0:1c:96:06:
91:4c:ee:36:f8:af:6c:00:1b:8a:d0:bf:9a:dc:a3:ec:7a:92:
35:97:86:da:66:13:8b:cf:6f:1f:b1:32:64:b3:1a:c6:62:ce:
51:4a:2a:f2:0f:ff:ce:e4:06:0c:cd:6b:ff:8b:a4:8d:6b:d8:
7f:26:98:56:db:da:59:a0:a8:f8:a8:b5:77:68:c6:68:81:3c:
22:eb:1b:d3:4f:b3:6e:fc:f2:26:23:f3:05:c7:01:04:3d:ef:
5e:84:13:5a:a1:e8:d6:db:46:88:5f:ab:3c:b9:fd:29:75:39:
8d:f5:ea:e7:9d:0a:2d:7f:3a:7e:47:3c:86:af:cf:a4:f0:9b:
fc:9e:e0:ad:53:ab:ad:26:f0:cb:f6:c0:62:39:de:6e:56:a3:
9f:a0:a8:e3:dd:41:2f:e3:8f:fa:fc:95:d6:ae:36:1b:57:f6:
45:65:ba:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFFQ8jA65ZpS2ldROslqPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjcwZDllMzgyODE5NThlZWExY2MzOGVhY2ViYmJkYzMz
ODFkMzYwHhcNMjUwNDIxMTYwMDI2WhcNMjUwNDIyMTYwMDI2WjAzMTEwLwYDVQQD
Eyg2MzhhYjM4NTY2YWFjYjI3YTcyNDYyY2Q4YjVkOWM1OGNjZTE0NzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngx1lJjZ5f6+qOv36UnKJHPsw7RS
jGOvRaYQL4RdiWZzgBq8OH7SgJvHVAWgG9opJCHjElLtqJzUQ2aLVVAcJ6uPBzIf
uJuGivrRjEWwuirAX8W355iSi/ATPEghvjuqAkxZiDfg2YVMmEw9vsGL2Xuwg96O
w9tZT+mIjGjedapjHIFiuLKndMku3nmoohUKFUc9vs5uNriKLT/YFQoJZTDPEwyl
CLEnVkNqOhSsIBjI0B5Xi66PgcycmnNqs3E48OsWQJL4WEMniOQg9BOTUqu49k8I
UmBjqmldWacBHzQTiT7jn9q/YwdOcudkRxABKhMeLNmX1om+31UDm3r9gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOKs4VmqssnpyRizYtdnFjM4UdDMB8GA1UdIwQY
MBaAFI5nDZ44KBlY7qHMOOrOu73DOB02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1jTm5qZ29HVmp1b2N3NDZzNjd2Y000SFRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81YTFjYWQtMGM2NS00ODAwLTg4NjUt
Y2NhOWRmNmUxOWUzLzEvam1jTm5qZ29HVmp1b2N3NDZzNjd2Y000SFRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81YTFjYWQtMGM2NS00ODAwLTg4NjUtY2NhOWRmNmUxOWUz
LzEvam1jTm5qZ29HVmp1b2N3NDZzNjd2Y000SFRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9Y0g1em
P4mnLu0yJN1rDtP8/qFJ2UrHcc5IAnbLux1vvGQxvIVZs9GORCZViCk4vWArx2nh
3D8uyF3c4+9CwroQdwFnVkA2XhrYC8M7dkP71ges51+gHJYGkUzuNvivbAAbitC/
mtyj7HqSNZeG2mYTi89vH7EyZLMaxmLOUUoq8g//zuQGDM1r/4ukjWvYfyaYVtva
WaCo+Ki1d2jGaIE8Iusb00+zbvzyJiPzBccBBD3vXoQTWqHo1ttGiF+rPLn9KXU5
jfXq550KLX86fkc8hq/PpPCb/J7grVOrrSbwy/bAYjneblajn6Co491BL+OP+vyV
1q42G1f2RWW6sQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:50 2025 by rpki-client