Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File: jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier: jOcXgBl+AMXdG9QVJdS10CyGm7LjJDI8cc2nq9YMTow=
Subject key identifier: 78:8C:E1:4A:E5:EF:C0:2D:3A:B9:97:04:20:3B:79:B3:AC:AD:C0:90
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer: /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial: 01965BDEDB92EB7C8B350F4C568FFB3392E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number: 078D
Signing time: Tue 22 Apr 2025 05:00:53 +0000
Manifest this update: Tue 22 Apr 2025 05:00:53 +0000
Manifest next update: Wed 23 Apr 2025 05:00:53 +0000
Files and hashes: 1: OL1d446I3yxzCjYzKmvnNJ7y4OM.roa (hash: JsE4VCK3qUktBFupzIAgFOT4HayiXvdUAIXOsvhciFE=)
2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: tyXE2G7JLfehzwc2yvcoF+vRpgW0qiPCPWrZahZSMuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:db:92:eb:7c:8b:35:0f:4c:56:8f:fb:33:92:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Validity
Not Before: Apr 22 05:00:53 2025 GMT
Not After : Apr 23 05:00:53 2025 GMT
Subject: CN=788ce14ae5efc02d3ab99704203b79b3acadc090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:8e:d3:68:65:31:34:bd:6a:2d:e6:71:52:
11:9b:ab:ca:ce:c7:14:f2:57:b3:b9:b8:35:4c:f6:
96:57:47:86:e7:9a:7e:2e:dd:11:e8:af:9b:52:a1:
c3:79:09:23:b5:43:c9:a4:20:36:57:46:fb:15:11:
d1:af:4a:1b:f1:72:c8:10:63:5b:0b:b8:a5:92:97:
82:53:e7:c8:53:d8:38:db:8e:e6:13:04:21:95:15:
54:87:3d:b4:a9:e2:97:a9:a1:fa:98:49:bd:e2:a5:
a8:25:0c:13:49:82:f7:5f:f4:96:14:3a:19:1e:c6:
95:bd:d3:9d:fb:41:6a:0c:b1:86:a3:b9:33:3d:4c:
58:e7:0b:e8:91:86:73:c8:b0:7f:80:14:81:a6:25:
f7:73:55:ac:d0:8b:58:36:1f:93:f7:fa:b2:21:73:
25:43:65:21:70:e4:73:07:f5:50:5e:2a:90:b3:13:
44:22:6d:d8:49:c8:04:98:3a:11:16:57:29:97:27:
22:22:40:ff:11:03:98:40:c8:b8:72:8d:70:b0:e5:
20:5c:a8:48:15:b9:f0:8f:52:40:9f:9e:ac:34:f1:
ac:05:b2:9f:e5:26:89:da:6f:8f:a8:b0:9e:ee:ae:
fd:74:c0:55:86:4b:ad:99:24:ae:a6:13:26:6f:83:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8C:E1:4A:E5:EF:C0:2D:3A:B9:97:04:20:3B:79:B3:AC:AD:C0:90
X509v3 Authority Key Identifier:
keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0e:60:7c:9c:3f:f6:f0:6f:7b:1f:bc:f0:c2:7c:b6:a3:80:
12:d8:a1:c2:dc:80:a5:5b:87:c7:64:0d:73:b7:06:4d:d5:76:
b6:b1:83:bd:5a:90:4f:a1:56:5f:1d:74:d7:e0:13:67:59:31:
3e:2f:6b:d7:75:04:fe:5c:4f:7e:c9:98:e2:7c:18:24:23:d6:
27:ba:a2:41:8b:45:8a:df:9a:2b:42:e3:cf:04:2b:39:88:25:
bf:74:e2:bf:c2:46:eb:83:e8:71:bf:7a:07:97:c7:39:3b:91:
69:57:f3:7c:a2:3b:3b:6a:17:92:57:74:45:3d:44:db:7a:5c:
cb:e7:a0:d7:b7:3b:2a:9a:d5:38:d4:a6:a9:3e:ed:5c:c3:d3:
5c:94:6a:e6:71:0c:fe:d3:ea:85:22:d4:57:1b:25:50:7e:28:
51:fe:16:7e:f7:70:9e:22:5c:55:ff:40:60:c4:ef:43:29:9c:
6f:00:e4:bb:68:8a:c4:e9:80:2e:0d:5e:fc:f1:4c:45:09:2a:
64:17:0b:80:0a:bb:76:16:8c:41:5c:70:b0:d1:44:63:07:c4:
f4:4d:7f:bf:77:ab:19:57:a0:de:e5:2c:ce:af:2f:46:68:56:
21:db:bf:a2:29:69:0b:7a:c5:5a:ef:08:42:50:1f:43:11:a1:
11:db:c2:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZb3tuS63yLNQ9MVo/7M5LgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTU2YjUyYjhlNGU3MDlmYTU2OWI1YWUzNzJjNmUyODI2
NmYyMzIwHhcNMjUwNDIyMDUwMDUzWhcNMjUwNDIzMDUwMDUzWjAzMTEwLwYDVQQD
Eyg3ODhjZTE0YWU1ZWZjMDJkM2FiOTk3MDQyMDNiNzliM2FjYWRjMDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/yO02hlMTS9ai3mcVIRm6vKzscU
8lezubg1TPaWV0eG55p+Lt0R6K+bUqHDeQkjtUPJpCA2V0b7FRHRr0ob8XLIEGNb
C7ilkpeCU+fIU9g4247mEwQhlRVUhz20qeKXqaH6mEm94qWoJQwTSYL3X/SWFDoZ
HsaVvdOd+0FqDLGGo7kzPUxY5wvokYZzyLB/gBSBpiX3c1Ws0ItYNh+T9/qyIXMl
Q2UhcORzB/VQXiqQsxNEIm3YScgEmDoRFlcplyciIkD/EQOYQMi4co1wsOUgXKhI
Fbnwj1JAn56sNPGsBbKf5SaJ2m+PqLCe7q79dMBVhkutmSSuphMmb4PkbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiM4Url78AtOrmXBCA7ebOsrcCQMB8GA1UdIwQY
MBaAFI5Va1K45OcJ+labWuNyxuKCZvIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84OGYyYTUtMjdlOC00NjcxLWE4ZDMt
Y2RlNzAyYzBlYzhiLzEvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84OGYyYTUtMjdlOC00NjcxLWE4ZDMtY2RlNzAyYzBlYzhi
LzEvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGg5gfJw/
9vBvex+88MJ8tqOAEtihwtyApVuHx2QNc7cGTdV2trGDvVqQT6FWXx101+ATZ1kx
Pi9r13UE/lxPfsmY4nwYJCPWJ7qiQYtFit+aK0LjzwQrOYglv3Tiv8JG64Pocb96
B5fHOTuRaVfzfKI7O2oXkld0RT1E23pcy+eg17c7KprVONSmqT7tXMPTXJRq5nEM
/tPqhSLUVxslUH4oUf4WfvdwniJcVf9AYMTvQymcbwDku2iKxOmALg1e/PFMRQkq
ZBcLgAq7dhaMQVxwsNFEYwfE9E1/v3erGVeg3uUszq8vRmhWIdu/oilpC3rFWu8I
QlAfQxGhEdvCMQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:01 2025 by rpki-client