Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: QWfK4gWo9xDIB+eYMlpL7w2wuhhiz16on+h7yHaUqSw=
Subject key identifier: DD:6E:62:42:75:AA:1F:BF:88:0D:FA:F6:17:3A:7D:28:8C:5E:B1:3B
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 0196586F5C2476D25893A524CF226358F44E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: E7
Signing time: Mon 21 Apr 2025 13:00:15 +0000
Manifest this update: Mon 21 Apr 2025 13:00:15 +0000
Manifest next update: Tue 22 Apr 2025 13:00:15 +0000
Files and hashes: 1: 1-nkTyOMqH94a8OlfukcDf7YbkNc.roa (hash: Z6uvUYmhirGQlJwClrs+HtNhQJGa2PNo7VCbu68pXz8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: 9gNzZ+lrfxR5nXBX2S7v1olH3bzSYi5wxXfsuZmKNPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:5c:24:76:d2:58:93:a5:24:cf:22:63:58:f4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Apr 21 13:00:15 2025 GMT
Not After : Apr 22 13:00:15 2025 GMT
Subject: CN=dd6e624275aa1fbf880dfaf6173a7d288c5eb13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:f1:85:17:ed:3d:fc:b8:4c:c4:43:89:8f:
50:bd:26:9b:16:a7:9c:4b:24:a0:42:b8:b5:ea:4d:
e4:a4:fa:8c:1e:50:22:16:1f:3e:d4:5f:9a:a1:2e:
70:71:d6:0e:07:d1:e2:a8:a7:54:40:44:b5:f6:7f:
21:33:50:ee:10:54:36:68:6c:f6:45:37:1f:ae:72:
15:90:51:15:48:90:d0:f9:af:ca:7c:27:59:5a:66:
78:74:08:eb:be:58:ec:66:02:c5:a3:0c:47:42:40:
96:14:ff:c6:79:e4:4a:aa:a7:ce:a9:cc:aa:e2:07:
39:14:ef:4c:ba:eb:29:72:e2:82:be:7b:4e:e8:3f:
cd:c5:71:29:b8:ab:da:06:97:88:b0:1f:15:15:3b:
54:7f:d9:3a:29:8e:8a:1b:6c:05:e3:53:f2:ad:32:
7f:e8:30:27:8c:12:bc:1e:15:49:53:7d:45:68:a0:
f7:66:bd:dd:32:0a:b5:36:82:5d:7b:b6:b5:9b:91:
eb:4c:9f:97:cd:41:d8:ae:6c:b2:7a:02:46:99:d4:
e8:f0:02:66:97:f0:a6:4f:e6:f8:0e:a0:7c:b0:f5:
95:8b:bb:92:ee:c8:b3:3a:8c:0b:80:b7:a4:7d:43:
c8:72:eb:85:89:eb:68:b2:86:56:3a:e0:e5:9d:97:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6E:62:42:75:AA:1F:BF:88:0D:FA:F6:17:3A:7D:28:8C:5E:B1:3B
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ea:d5:18:9b:13:b3:9a:af:47:2b:a6:6e:91:57:17:3d:f1:
e6:4d:e2:02:db:eb:ef:a5:56:a4:37:6c:c7:d2:71:99:b8:5a:
10:b9:99:fe:72:7a:7d:c9:7e:d8:74:65:0b:35:16:1c:73:5b:
07:e9:1f:d9:c0:ac:bd:0a:ed:96:8b:01:12:d6:8a:38:7f:dc:
6f:ac:8c:b1:98:68:9d:b6:9e:02:7f:5c:26:03:2a:b1:fe:7e:
6b:eb:6c:03:52:4c:dc:8f:a1:b2:6c:5f:59:93:96:1e:32:92:
11:91:30:10:88:75:0e:5a:86:ef:8e:41:ee:6e:d6:cf:59:ed:
9a:66:e2:cd:1e:b0:1c:b3:fc:52:3d:15:16:69:07:af:7a:12:
d4:44:ea:9e:7e:ec:53:77:4f:1c:b3:99:ef:b2:40:2b:c9:6f:
24:2f:de:2a:ac:65:1e:65:7a:1a:ba:57:5c:6d:20:d6:aa:48:
3a:85:ab:7f:49:a7:b9:9a:a4:b1:18:38:f5:bb:55:85:22:bb:
cc:84:26:bb:97:41:2c:14:17:98:96:43:d5:05:37:90:a3:e4:
82:84:ab:e5:b0:63:02:f8:ce:43:f7:6d:32:50:94:a3:2e:2b:
20:69:f0:df:6e:b7:c3:d1:5b:24:a1:8a:a7:ae:17:34:e1:7b:
b2:86:c5:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYb1wkdtJYk6UkzyJjWPROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YjFhMjIzYjdlNzNmZDIzNDYyYzIwNGU2MGU5ZDQ4MTVj
Zjc2M2YwHhcNMjUwNDIxMTMwMDE1WhcNMjUwNDIyMTMwMDE1WjAzMTEwLwYDVQQD
EyhkZDZlNjI0Mjc1YWExZmJmODgwZGZhZjYxNzNhN2QyODhjNWViMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRLxhRftPfy4TMRDiY9QvSabFqec
SySgQri16k3kpPqMHlAiFh8+1F+aoS5wcdYOB9HiqKdUQES19n8hM1DuEFQ2aGz2
RTcfrnIVkFEVSJDQ+a/KfCdZWmZ4dAjrvljsZgLFowxHQkCWFP/GeeRKqqfOqcyq
4gc5FO9MuuspcuKCvntO6D/NxXEpuKvaBpeIsB8VFTtUf9k6KY6KG2wF41PyrTJ/
6DAnjBK8HhVJU31FaKD3Zr3dMgq1NoJde7a1m5HrTJ+XzUHYrmyyegJGmdTo8AJm
l/CmT+b4DqB8sPWVi7uS7sizOowLgLekfUPIcuuFietosoZWOuDlnZcwWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1uYkJ1qh+/iA369hc6fSiMXrE7MB8GA1UdIwQY
MBaAFCWxoiO35z/SNGLCBOYOnUgVz3Y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMt
YTczZjBiNzQxOGFiLzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMtYTczZjBiNzQxOGFi
LzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOrVGJsT
s5qvRyumbpFXFz3x5k3iAtvr76VWpDdsx9JxmbhaELmZ/nJ6fcl+2HRlCzUWHHNb
B+kf2cCsvQrtlosBEtaKOH/cb6yMsZhonbaeAn9cJgMqsf5+a+tsA1JM3I+hsmxf
WZOWHjKSEZEwEIh1DlqG745B7m7Wz1ntmmbizR6wHLP8Uj0VFmkHr3oS1ETqnn7s
U3dPHLOZ77JAK8lvJC/eKqxlHmV6GrpXXG0g1qpIOoWrf0mnuZqksRg49btVhSK7
zIQmu5dBLBQXmJZD1QU3kKPkgoSr5bBjAvjOQ/dtMlCUoy4rIGnw3263w9FbJKGK
p64XNOF7sobFJA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:37 2025 by rpki-client