Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json)
Hash identifier: nJA17U1JoRZVVHbeq+zw1F4xfHmz68u/rKL+hv956oc=
Subject key identifier: 06:A0:D5:C1:40:57:F6:7E:52:CB:BC:F6:F3:3B:F7:99:00:FB:14:46
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 019644E8F52D1CE26EA85BC3E3AE84EBEE8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
Manifest number: 143D
Signing time: Thu 17 Apr 2025 18:00:39 +0000
Manifest this update: Thu 17 Apr 2025 18:00:39 +0000
Manifest next update: Fri 18 Apr 2025 18:00:39 +0000
Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: JIgaUS6Pv2romCZgC2q6g+c4P6k4XhIBcqUafqJr6NE=)
2: gC97AQKQbgiW9Krq-_q2apqCHmc.roa (hash: IvEX/4r+S7SQha7hWBWTDBpux0NlV5BKH8odMNrPeJQ=)
3: g_n97b-ezr2pU8M_arTz7b0GI28.roa (hash: f/1b/CBZ/cmdffSZ/BO1Ow8CLoficDzJ57IxUPZ8+ZA=)
4: zhoAHh4wgcaK6VZRodYWCuN75nI.roa (hash: kV8XnwO8Zz8GVVhAZVUdjX5IeFTvNwptdgYC4YvJ97E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:f5:2d:1c:e2:6e:a8:5b:c3:e3:ae:84:eb:ee:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Apr 17 18:00:39 2025 GMT
Not After : Apr 18 18:00:39 2025 GMT
Subject: CN=06a0d5c14057f67e52cbbcf6f33bf79900fb1446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:ae:6c:b6:04:54:17:85:a6:67:5c:d7:13:
2e:b4:1c:83:ae:85:49:b8:05:18:9f:4f:b8:39:07:
75:fb:1d:03:b6:e6:b3:4a:36:56:ef:58:a2:b9:71:
23:92:f8:93:d5:f0:33:a3:66:b0:d7:34:e2:8c:7b:
61:4b:75:4d:47:dd:ca:96:d6:b7:a9:38:f4:9c:4b:
fb:7f:8f:b2:6d:12:a1:90:f9:76:89:00:39:85:fe:
94:62:ab:58:50:bb:a4:cf:0a:e2:85:cf:74:32:47:
fb:bc:db:c1:91:1f:3a:f7:70:16:26:dd:b9:24:f9:
56:f3:d0:6b:96:4f:aa:a7:15:f7:62:e8:50:68:b8:
11:96:7a:96:03:10:c0:1d:1c:e6:d5:a0:61:2c:55:
52:45:19:4f:f4:c3:04:03:a3:fc:2a:9a:37:27:09:
cf:d8:81:25:32:6e:35:90:69:d5:67:b4:2e:70:ec:
b0:8b:a0:f8:10:b7:ee:9e:9d:9b:9e:dd:bb:36:93:
c2:f7:06:8d:f8:ae:9c:64:d0:a6:e6:d2:83:7d:a6:
55:8d:2b:a9:c6:a3:f4:87:fd:5e:5e:bb:f7:e2:8f:
4a:00:d8:15:24:1e:43:7d:89:f9:46:f3:a3:51:de:
ea:68:75:88:47:78:2e:e0:1e:62:ce:5a:99:82:a5:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A0:D5:C1:40:57:F6:7E:52:CB:BC:F6:F3:3B:F7:99:00:FB:14:46
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:50:e3:29:4d:3e:8c:0e:25:cc:5f:a8:04:02:ff:a0:7f:04:
53:ac:81:33:e7:10:41:6f:5b:f8:b0:ee:39:9f:ad:19:18:17:
e3:2e:e9:8f:07:0a:0f:26:ab:c1:63:a7:f1:dc:99:8c:50:6a:
08:24:16:00:59:3b:27:94:87:fc:55:0d:d0:91:ac:f4:13:0f:
9d:14:e4:54:10:28:50:d0:d9:f6:83:66:98:6a:0f:c9:8b:41:
55:60:e2:cb:20:46:51:1a:33:dc:0c:b9:ae:64:ab:df:36:59:
fc:38:f4:a8:b2:de:03:94:ec:19:87:08:a3:fe:b6:c1:44:d7:
3f:9d:38:2f:72:79:5a:c1:b7:2e:c8:33:e5:06:a7:06:b2:c8:
16:f8:a5:fe:a4:e1:dd:49:e0:51:b2:28:a3:c7:8c:2a:e6:d3:
7e:9a:53:46:cf:49:0e:ac:76:0a:e2:41:f4:41:c0:86:e2:8d:
02:2a:bf:62:8a:a7:d0:9b:27:18:a8:77:8c:95:d2:f3:e2:06:
aa:fd:b4:3f:63:65:7c:eb:d5:8d:34:00:49:53:f3:ee:ed:80:
e6:9e:cf:e3:af:84:fe:e3:78:46:a4:ec:59:ee:c5:2e:30:b6:
87:18:a4:e5:45:50:be:d6:45:3d:2c:49:2a:76:a7:f5:b2:69:
4f:9c:8b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZE6PUtHOJuqFvD466E6+6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDI5YTM2ZmMwY2NhMmUwYThkMDQ1ZjAyMmRmYzgzMWE1
MTczMDgwHhcNMjUwNDE3MTgwMDM5WhcNMjUwNDE4MTgwMDM5WjAzMTEwLwYDVQQD
EygwNmEwZDVjMTQwNTdmNjdlNTJjYmJjZjZmMzNiZjc5OTAwZmIxNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox6ubLYEVBeFpmdc1xMutByDroVJ
uAUYn0+4OQd1+x0DtuazSjZW71iiuXEjkviT1fAzo2aw1zTijHthS3VNR93Klta3
qTj0nEv7f4+ybRKhkPl2iQA5hf6UYqtYULukzwrihc90Mkf7vNvBkR8693AWJt25
JPlW89Brlk+qpxX3YuhQaLgRlnqWAxDAHRzm1aBhLFVSRRlP9MMEA6P8Kpo3JwnP
2IElMm41kGnVZ7QucOywi6D4ELfunp2bnt27NpPC9waN+K6cZNCm5tKDfaZVjSup
xqP0h/1eXrv34o9KANgVJB5DfYn5RvOjUd7qaHWIR3gu4B5izlqZgqWoJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAag1cFAV/Z+Usu89vM795kA+xRGMB8GA1UdIwQY
MBaAFCcCmjb8DMouCo0EXwIt/IMaUXMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTct
NTBkMGE1MzIzNjQxLzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTctNTBkMGE1MzIzNjQx
LzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlDjKU0+
jA4lzF+oBAL/oH8EU6yBM+cQQW9b+LDuOZ+tGRgX4y7pjwcKDyarwWOn8dyZjFBq
CCQWAFk7J5SH/FUN0JGs9BMPnRTkVBAoUNDZ9oNmmGoPyYtBVWDiyyBGURoz3Ay5
rmSr3zZZ/Dj0qLLeA5TsGYcIo/62wUTXP504L3J5WsG3Lsgz5QanBrLIFvil/qTh
3UngUbIoo8eMKubTfppTRs9JDqx2CuJB9EHAhuKNAiq/Yoqn0JsnGKh3jJXS8+IG
qv20P2NlfOvVjTQASVPz7u2A5p7P46+E/uN4RqTsWe7FLjC2hxik5UVQvtZFPSxJ
Knan9bJpT5yL7g==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:55:58 2025 by rpki-client