Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json)
Hash identifier: x+oGUjNDaZLAdfjrMfcRBekv2Ndk1VciyoCVeIpV9is=
Subject key identifier: C8:16:9A:4D:B8:6C:41:30:2A:E9:43:C2:56:AF:E3:27:68:61:6E:B6
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial: 0196545BB69D07C71372CEA98A1E242AD0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
Manifest number: 03A6
Signing time: Sun 20 Apr 2025 18:00:18 +0000
Manifest this update: Sun 20 Apr 2025 18:00:18 +0000
Manifest next update: Mon 21 Apr 2025 18:00:18 +0000
Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: yz2kNzBpxv4w7WIZfqmIhqjPqtP2C3rdMUJssvpjFO0=)
2: MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa (hash: gbTLg78j8QXaXHSAXv6UFJxOI7JnWlqhBTReKaDFIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:b6:9d:07:c7:13:72:ce:a9:8a:1e:24:2a:d0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Validity
Not Before: Apr 20 18:00:18 2025 GMT
Not After : Apr 21 18:00:18 2025 GMT
Subject: CN=c8169a4db86c41302ae943c256afe32768616eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:9a:f0:77:e5:f8:fd:5d:67:b7:8b:e0:c4:
91:6e:2d:1d:d1:c0:4b:d0:66:73:16:32:47:69:1f:
bf:12:ff:5c:0d:1e:d1:cb:22:67:6c:fe:59:d7:49:
12:22:2f:a5:74:8a:6b:00:4a:78:7e:76:cc:7a:2b:
0a:6c:0b:90:48:fb:ae:e3:e1:93:f9:87:da:a6:98:
8c:5a:0f:02:13:14:7c:6c:8f:f5:7f:45:bc:c4:06:
8c:94:bd:ff:48:70:d6:90:a4:73:f5:4d:eb:5b:13:
ac:88:82:9c:e6:d1:12:9f:e0:6e:96:14:af:9e:c8:
7c:32:e9:f6:de:b0:ed:d5:6d:43:8a:01:41:33:fd:
81:42:2f:14:41:8b:d9:fc:04:64:a4:62:74:74:9f:
e2:47:84:e3:0d:54:b5:f5:14:35:af:3e:4b:e7:a3:
f0:11:66:13:49:de:bb:ff:f2:2c:68:aa:e3:7f:2a:
4b:ea:85:62:58:39:6a:a1:bc:a8:5e:a3:11:ea:6d:
a0:1e:cb:8a:ca:93:9a:af:2d:3c:ef:6c:bf:40:37:
35:65:21:21:7e:73:87:59:0b:02:5d:c3:83:d1:44:
63:36:ed:69:97:b3:88:4a:7d:ce:87:a6:65:5b:b7:
84:67:e3:c7:ab:f2:29:4e:c6:2b:62:c8:3f:4b:bd:
09:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:16:9A:4D:B8:6C:41:30:2A:E9:43:C2:56:AF:E3:27:68:61:6E:B6
X509v3 Authority Key Identifier:
keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:01:a8:a7:1a:13:63:aa:ab:9d:ba:e0:3e:57:2e:41:2d:c8:
03:78:42:6b:28:1c:3c:50:14:a8:30:e4:e9:06:70:79:09:c7:
29:03:13:a8:60:5a:d2:d7:1e:06:93:43:ad:8d:42:a9:a6:a4:
1d:1a:85:40:62:04:7e:b1:72:ba:d0:2a:06:ea:d3:71:29:da:
0d:c6:9e:57:72:8e:aa:a2:b1:50:29:ec:38:ac:b2:6b:32:3f:
b9:20:47:85:8b:8c:7e:d5:8f:c1:cd:06:ef:1f:74:2c:54:e0:
b3:79:ab:45:9e:fb:1b:fd:bc:34:ca:85:45:25:eb:df:41:4e:
d1:97:ea:79:0b:08:b7:92:d9:cd:f0:23:87:e8:d0:83:8d:25:
77:56:67:9f:cf:22:70:28:57:4b:84:0b:a4:1d:a7:0e:71:fd:
35:2a:34:62:33:cb:3b:bf:72:db:53:69:ca:cf:d9:45:5d:75:
0d:d9:7d:56:00:47:f5:f9:22:38:14:2f:b0:8b:9b:2c:2e:9b:
11:b8:0b:e3:29:a6:88:97:12:19:9b:83:42:04:49:3e:d5:17:
c1:2c:a0:a4:bd:00:26:ef:43:d2:fb:94:51:be:2b:6e:9d:3c:
ea:3c:a3:c5:c0:db:ef:96:51:8f:01:30:0c:5d:0f:65:80:4d:
6e:4d:28:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUW7adB8cTcs6pih4kKtCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZWE5NzQ3YmQwMWE0NTdmYTJiYjAyZmNjMGFjODIzMTQw
YjUxOGYwHhcNMjUwNDIwMTgwMDE4WhcNMjUwNDIxMTgwMDE4WjAzMTEwLwYDVQQD
EyhjODE2OWE0ZGI4NmM0MTMwMmFlOTQzYzI1NmFmZTMyNzY4NjE2ZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqea8Hfl+P1dZ7eL4MSRbi0d0cBL
0GZzFjJHaR+/Ev9cDR7RyyJnbP5Z10kSIi+ldIprAEp4fnbMeisKbAuQSPuu4+GT
+YfappiMWg8CExR8bI/1f0W8xAaMlL3/SHDWkKRz9U3rWxOsiIKc5tESn+BulhSv
nsh8Mun23rDt1W1DigFBM/2BQi8UQYvZ/ARkpGJ0dJ/iR4TjDVS19RQ1rz5L56Pw
EWYTSd67//IsaKrjfypL6oViWDlqobyoXqMR6m2gHsuKypOary0872y/QDc1ZSEh
fnOHWQsCXcOD0URjNu1pl7OISn3Oh6ZlW7eEZ+PHq/IpTsYrYsg/S70JMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgWmk24bEEwKulDwlav4ydoYW62MB8GA1UdIwQY
MBaAFCXql0e9AaRX+iuwL8wKyCMUC1GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjIt
MDE2ZDZkY2ZhZDgxLzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjItMDE2ZDZkY2ZhZDgx
LzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwGopxoT
Y6qrnbrgPlcuQS3IA3hCaygcPFAUqDDk6QZweQnHKQMTqGBa0tceBpNDrY1Cqaak
HRqFQGIEfrFyutAqBurTcSnaDcaeV3KOqqKxUCnsOKyyazI/uSBHhYuMftWPwc0G
7x90LFTgs3mrRZ77G/28NMqFRSXr30FO0ZfqeQsIt5LZzfAjh+jQg40ld1Znn88i
cChXS4QLpB2nDnH9NSo0YjPLO79y21Npys/ZRV11Ddl9VgBH9fkiOBQvsIubLC6b
EbgL4ymmiJcSGZuDQgRJPtUXwSygpL0AJu9D0vuUUb4rbp086jyjxcDb75ZRjwEw
DF0PZYBNbk0oMw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:10 2025 by rpki-client