Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: sWraGE6b5LOVjpS0LesOqrvfkCH+H2c+j9MuyOJm5NA=
Subject key identifier: CE:8A:F6:B1:CF:2D:D3:D6:3B:C4:22:95:9B:0E:51:E6:9E:F8:DA:89
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 01965492D17896BF2CCA4BC9D17B893618F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 10B5
Signing time: Sun 20 Apr 2025 19:00:30 +0000
Manifest this update: Sun 20 Apr 2025 19:00:30 +0000
Manifest next update: Mon 21 Apr 2025 19:00:30 +0000
Files and hashes: 1: 2f42Ui-pru7wNiS6tvX-43aKjFs.roa (hash: mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: q9NBm7fSJV6qhStaf56I+/o8glZqq6p7yDwWOwE56Co=)
3: Xhs8fAc0SGAyN4KDD0cOKWAqtow.roa (hash: 0rR/+YP0FGlnVR+donPj6Q3O2XueDV+VyXKsGyjN1KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:d1:78:96:bf:2c:ca:4b:c9:d1:7b:89:36:18:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Apr 20 19:00:30 2025 GMT
Not After : Apr 21 19:00:30 2025 GMT
Subject: CN=ce8af6b1cf2dd3d63bc422959b0e51e69ef8da89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:62:d6:0c:be:d0:c9:85:9d:ba:a3:62:ce:ca:
3e:87:19:ca:eb:36:d3:f2:6a:27:d8:19:b3:bc:73:
d6:2b:ec:c2:bc:26:82:6c:30:07:ca:ef:5e:62:d3:
b9:9a:26:20:d6:83:b2:46:d4:7b:da:da:27:e1:b0:
5d:29:1c:d9:81:17:eb:27:45:9f:eb:55:c9:0d:d1:
9a:5c:18:64:d6:7b:84:44:22:83:e2:5d:6a:49:30:
1b:8a:e0:86:78:b2:11:bd:81:b7:78:b5:46:db:f4:
95:f8:74:e5:da:e0:38:5a:5c:5f:a2:bb:39:60:3b:
b4:89:67:18:90:ad:08:a3:9f:ce:01:65:de:ff:0d:
15:08:02:a8:7a:d9:cc:68:55:82:c8:2f:25:c9:bd:
74:9e:9e:81:9b:f0:e8:14:16:c8:90:ab:a9:c1:b5:
22:53:bb:6b:ef:92:97:de:02:26:44:4a:67:fa:3b:
68:df:d7:4d:8d:9b:75:dc:16:96:97:8a:b5:d2:11:
ec:3e:e0:15:1c:5b:8c:c9:db:f6:b3:c7:41:c5:1e:
34:08:29:e3:c0:5c:23:aa:23:d1:da:9c:60:07:f5:
ae:24:0a:36:a6:8e:de:f0:f7:ec:bf:e8:37:0f:1a:
5e:e3:de:37:12:82:2e:c7:39:75:cc:99:cf:52:85:
e3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8A:F6:B1:CF:2D:D3:D6:3B:C4:22:95:9B:0E:51:E6:9E:F8:DA:89
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2c:2e:2f:bf:88:fd:bb:e6:47:65:bd:8e:09:f2:19:6a:d2:
97:e4:54:a6:6d:a4:2a:44:79:76:62:82:76:e9:e8:37:80:f7:
41:91:8e:8c:47:8e:00:36:b3:1c:4c:41:e2:99:5e:4a:c5:02:
a2:d2:05:7a:82:c1:af:05:ec:28:8d:29:07:fa:27:27:19:9a:
99:1b:cf:31:c6:e8:54:7e:f3:6f:76:e3:d8:cc:eb:99:da:b6:
ae:16:cd:0a:a9:b6:26:22:22:20:b7:55:28:cc:12:62:a2:08:
16:ef:d8:9d:2c:0f:ac:de:5e:3b:0a:59:1a:0a:c6:24:7f:df:
c8:79:d7:1f:02:d6:e1:ae:88:0d:93:69:1f:2c:d6:60:b5:e3:
97:04:01:87:5a:fe:7f:fe:3e:6f:f7:69:06:60:3c:e2:9a:88:
79:b0:06:aa:00:4f:14:20:97:46:80:83:b6:ae:87:53:87:64:
27:2a:da:b7:40:52:56:d5:db:32:0d:1d:20:1f:27:43:f2:44:
02:65:73:ea:f9:49:5a:56:bb:0f:ad:51:d3:a7:3a:1a:f1:1f:
ab:3c:2e:bf:c6:f8:cb:e2:a8:26:a5:f3:45:c9:90:97:88:f2:
38:5a:2a:f1:c3:bc:ff:a5:1e:2a:cb:d5:1a:69:ba:ed:1c:d3:
47:93:28:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUktF4lr8sykvJ0XuJNhj3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Mjk1Y2U3MTI0NzNkMGUzZTZkYWE3NzdkYjg5MDZmODAw
MWRmNzAwHhcNMjUwNDIwMTkwMDMwWhcNMjUwNDIxMTkwMDMwWjAzMTEwLwYDVQQD
EyhjZThhZjZiMWNmMmRkM2Q2M2JjNDIyOTU5YjBlNTFlNjllZjhkYTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42LWDL7QyYWduqNizso+hxnK6zbT
8mon2BmzvHPWK+zCvCaCbDAHyu9eYtO5miYg1oOyRtR72ton4bBdKRzZgRfrJ0Wf
61XJDdGaXBhk1nuERCKD4l1qSTAbiuCGeLIRvYG3eLVG2/SV+HTl2uA4Wlxfors5
YDu0iWcYkK0Io5/OAWXe/w0VCAKoetnMaFWCyC8lyb10np6Bm/DoFBbIkKupwbUi
U7tr75KX3gImREpn+jto39dNjZt13BaWl4q10hHsPuAVHFuMydv2s8dBxR40CCnj
wFwjqiPR2pxgB/WuJAo2po7e8Pfsv+g3Dxpe4943EoIuxzl1zJnPUoXjpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6K9rHPLdPWO8QilZsOUeae+NqJMB8GA1UdIwQY
MBaAFCQpXOcSRz0OPm2qd324kG+AAd9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjkt
OTk1NTMxODYyNDE5LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjktOTk1NTMxODYyNDE5
LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWywuL7+I
/bvmR2W9jgnyGWrSl+RUpm2kKkR5dmKCdunoN4D3QZGOjEeOADazHExB4pleSsUC
otIFeoLBrwXsKI0pB/onJxmamRvPMcboVH7zb3bj2Mzrmdq2rhbNCqm2JiIiILdV
KMwSYqIIFu/YnSwPrN5eOwpZGgrGJH/fyHnXHwLW4a6IDZNpHyzWYLXjlwQBh1r+
f/4+b/dpBmA84pqIebAGqgBPFCCXRoCDtq6HU4dkJyrat0BSVtXbMg0dIB8nQ/JE
AmVz6vlJWla7D61R06c6GvEfqzwuv8b4y+KoJqXzRcmQl4jyOFoq8cO8/6UeKsvV
Gmm67RzTR5MoEw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:15 2025 by rpki-client