Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
File: JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft (raw, json)
Hash identifier: 0PohxH33L+ByzJdVIN2J7bAMiwo2tostYauLhqEFUYU=
Subject key identifier: 4B:0D:7B:58:73:50:18:95:A5:5F:D0:A3:A9:8B:38:18:E9:24:76:14
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial: 01965BA7F78D0A2D0C590F0752BE93C25609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
Manifest number: 1356
Signing time: Tue 22 Apr 2025 04:00:56 +0000
Manifest this update: Tue 22 Apr 2025 04:00:56 +0000
Manifest next update: Wed 23 Apr 2025 04:00:56 +0000
Files and hashes: 1: HNZKASXvOu7ez_JH9PuMKg51dfc.roa (hash: E5GVRIyB2FPDqpFEdeZFkQOEeY/IVLgHRxxoYqNwjnk=)
2: JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl (hash: UsoY/xAw0p9XSXCIHudCwBI5tM5KF7RO1LvH558R1b4=)
3: ZiGKQNYVWU0UTegHy0tzFPtdAFA.roa (hash: 8ysxTHtlcBGpselXIHgOo3ohrRPYZzrFKyhkLGGKcWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:f7:8d:0a:2d:0c:59:0f:07:52:be:93:c2:56:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Validity
Not Before: Apr 22 04:00:56 2025 GMT
Not After : Apr 23 04:00:56 2025 GMT
Subject: CN=4b0d7b5873501895a55fd0a3a98b3818e9247614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:fa:5a:ca:36:29:06:1e:c0:b2:5b:38:2d:
12:15:0b:6c:72:86:c1:a8:06:69:2a:84:ad:c8:d7:
17:88:e1:4f:aa:77:df:b1:91:27:cf:ed:e5:78:ee:
43:7a:38:92:a8:de:3b:06:7b:b7:b7:b4:be:de:14:
f7:6e:5d:92:22:3e:14:4d:1a:12:6e:68:aa:16:a7:
f1:ba:89:d7:06:d2:a1:bd:a5:a2:de:e2:89:bb:e0:
76:af:0b:84:f7:02:76:72:80:f4:08:7d:ff:ec:80:
ba:6b:63:02:1a:0c:eb:4b:da:0a:86:aa:20:7d:5e:
02:ea:37:71:38:09:a2:ca:4a:1d:a1:54:d3:69:63:
41:44:24:fc:c8:46:f2:60:0d:48:b6:1c:52:2f:65:
f9:ef:00:eb:b7:65:c2:3c:54:9f:8b:ec:51:e2:ed:
23:2e:ec:a0:2e:af:06:2e:8a:51:d1:7d:e9:29:86:
30:3b:e3:fb:15:43:10:12:9b:4a:68:89:c6:65:81:
9a:22:27:be:ae:95:41:4b:9b:de:d5:0b:03:3d:23:
29:58:17:1e:42:6a:74:d8:a8:13:45:7d:c9:64:5d:
70:d1:96:86:ac:f9:7f:90:9e:c1:c8:79:ad:79:33:
d2:41:5d:78:35:87:e9:c3:84:14:ad:02:85:1a:61:
e4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:7B:58:73:50:18:95:A5:5F:D0:A3:A9:8B:38:18:E9:24:76:14
X509v3 Authority Key Identifier:
keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5a:69:62:6a:81:98:8f:6c:d1:37:34:8b:22:a8:16:9d:25:
6d:c0:39:1a:9c:e1:9e:75:df:d7:b6:74:a4:ea:97:23:34:c2:
11:37:5f:9f:c1:96:d3:89:22:d2:e9:69:0c:58:b9:4d:34:06:
e1:be:03:83:a9:31:75:c1:4c:2a:32:f4:53:68:60:97:56:5e:
7a:1a:b3:bb:ad:b5:11:86:a9:61:82:d1:9f:b2:d5:51:59:f0:
70:ca:12:a7:6e:52:39:ca:d6:89:e1:6a:6d:f8:24:83:94:db:
1d:34:4a:5c:24:1d:b6:dd:a2:d8:13:16:cf:b3:b5:67:9d:c1:
b2:4e:a6:85:73:d8:81:4e:07:91:8a:b9:04:e9:cb:33:94:02:
a5:9b:57:33:b7:1d:70:a6:54:4f:03:63:86:a0:50:01:bf:60:
c8:db:71:fb:fc:d7:4c:5d:a7:f4:f3:cd:14:e4:c7:b8:72:a6:
34:26:7c:d7:e2:a8:4a:91:8e:07:a3:18:39:0e:8d:8d:70:a6:
c2:a3:4f:92:30:77:57:1d:e4:9b:cc:0f:d6:ff:c9:e5:ab:da:
48:0d:8a:6e:8a:bb:ad:a2:3e:f5:52:e0:95:81:ab:e2:37:e3:
8f:72:42:73:b1:b3:e0:1e:fa:be:63:84:f3:12:33:5f:cf:ab:
ac:d7:1d:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbp/eNCi0MWQ8HUr6TwlYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NjQ1MmEzNDIwZjRmMThkZmEzYTE0ZDI2YjMzNDhmZGZj
ZjNkM2IwHhcNMjUwNDIyMDQwMDU2WhcNMjUwNDIzMDQwMDU2WjAzMTEwLwYDVQQD
Eyg0YjBkN2I1ODczNTAxODk1YTU1ZmQwYTNhOThiMzgxOGU5MjQ3NjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt/6Wso2KQYewLJbOC0SFQtscobB
qAZpKoStyNcXiOFPqnffsZEnz+3leO5DejiSqN47Bnu3t7S+3hT3bl2SIj4UTRoS
bmiqFqfxuonXBtKhvaWi3uKJu+B2rwuE9wJ2coD0CH3/7IC6a2MCGgzrS9oKhqog
fV4C6jdxOAmiykodoVTTaWNBRCT8yEbyYA1IthxSL2X57wDrt2XCPFSfi+xR4u0j
LuygLq8GLopR0X3pKYYwO+P7FUMQEptKaInGZYGaIie+rpVBS5ve1QsDPSMpWBce
Qmp02KgTRX3JZF1w0ZaGrPl/kJ7ByHmteTPSQV14NYfpw4QUrQKFGmHkRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsNe1hzUBiVpV/Qo6mLOBjpJHYUMB8GA1UdIwQY
MBaAFCVkUqNCD08Y36OhTSazNI/fzz07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTct
ZjM4YjI4OWZmOTY5LzEvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTctZjM4YjI4OWZmOTY5
LzEvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlppYmqB
mI9s0Tc0iyKoFp0lbcA5GpzhnnXf17Z0pOqXIzTCETdfn8GW04ki0ulpDFi5TTQG
4b4Dg6kxdcFMKjL0U2hgl1Zeehqzu621EYapYYLRn7LVUVnwcMoSp25SOcrWieFq
bfgkg5TbHTRKXCQdtt2i2BMWz7O1Z53Bsk6mhXPYgU4HkYq5BOnLM5QCpZtXM7cd
cKZUTwNjhqBQAb9gyNtx+/zXTF2n9PPNFOTHuHKmNCZ81+KoSpGOB6MYOQ6NjXCm
wqNPkjB3Vx3km8wP1v/J5avaSA2Kboq7raI+9VLglYGr4jfjj3JCc7Gz4B76vmOE
8xIzX8+rrNcdcA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:43:46 2025 by rpki-client