Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier: PCcJwh+3oUakjkzQbuHpp4tpyzBcrF1gUYBzcTeB2lo=
Subject key identifier: 83:0B:F8:CC:D5:0B:BD:4F:F8:EA:C5:2B:6B:BD:EC:01:76:FC:C2:0A
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial: 01958B4DF050EC117CCDAA4741D154DF7B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number: 11B7
Signing time: Wed 12 Mar 2025 17:01:35 +0000
Manifest this update: Wed 12 Mar 2025 17:01:35 +0000
Manifest next update: Thu 13 Mar 2025 17:01:35 +0000
Files and hashes: 1: hIJG4JYkLEhwraYEYvL-fraByuk.roa (hash: 5YFKdkA5FRK1IPjfHxOUcAbA5SZ2reBZq68WODkSIGA=)
2: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: lL34JyYeKJwN/bAeCQUMjGe6jlpnQaAXo0oTjJVoNlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:f0:50:ec:11:7c:cd:aa:47:41:d1:54:df:7b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Validity
Not Before: Mar 12 17:01:35 2025 GMT
Not After : Mar 13 17:01:35 2025 GMT
Subject: CN=830bf8ccd50bbd4ff8eac52b6bbdec0176fcc20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:2d:02:a0:7b:d3:a2:0a:b3:32:26:b3:81:
71:6a:a6:22:bb:52:0e:ec:3b:c2:f6:ed:ad:b7:38:
03:00:ce:fd:b3:2e:3c:f9:0b:e1:82:2e:fc:c7:c7:
e8:6a:70:0d:93:00:41:a4:20:b0:ab:7d:a1:73:a6:
47:44:8f:1e:ce:af:7e:58:3a:b5:e0:ad:01:77:32:
d7:2b:71:54:4b:21:2f:90:68:21:0c:69:fd:1e:71:
e4:8b:61:38:76:d2:58:1a:6f:ad:04:93:70:44:d1:
fe:0f:63:c4:48:e7:59:69:76:34:3e:34:bb:e6:88:
b4:2d:85:62:e9:99:6b:bc:3e:02:30:fd:64:81:64:
65:73:e2:2b:d2:8e:15:9c:a3:a2:a0:36:a6:49:4e:
e8:0e:6d:8c:ef:24:20:9b:1f:b5:34:44:ea:03:fa:
94:cc:f0:36:48:d7:88:67:48:5e:ed:45:1d:73:6a:
a9:7e:63:2a:e4:8f:4e:3f:5d:4f:59:60:3c:b6:cf:
ce:47:f5:79:a2:24:97:ec:74:ac:69:79:7c:db:0f:
a6:cd:39:c7:c5:cd:d7:22:81:d6:aa:c6:bf:26:7b:
8c:ca:e5:25:37:fd:cb:b6:53:08:9e:39:8f:fe:fc:
00:55:70:a3:23:a7:ea:60:97:35:89:31:8a:d5:05:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0B:F8:CC:D5:0B:BD:4F:F8:EA:C5:2B:6B:BD:EC:01:76:FC:C2:0A
X509v3 Authority Key Identifier:
keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5e:8c:4c:0d:46:47:ae:da:e3:90:93:6a:77:9b:96:1b:41:
47:d6:e2:84:f0:94:c6:78:d8:85:5e:31:d0:09:e5:e2:00:53:
8c:7b:d8:94:ac:13:c4:20:ea:76:b7:c7:7b:38:7c:0f:23:6c:
30:34:4d:9e:3e:ed:2f:de:77:97:0f:b0:73:8a:79:b4:0b:12:
93:b7:e3:eb:d4:37:1a:57:72:52:bb:e1:ed:35:f6:0d:19:aa:
43:47:a8:71:9a:6a:2e:ce:95:29:c0:04:a6:57:a1:a2:3c:c1:
40:e8:7c:55:80:f9:e1:54:85:03:5a:e5:2e:d5:ee:62:fa:b8:
13:3d:e7:49:53:75:c5:a9:1c:b6:44:3a:2e:96:3b:3b:ac:5a:
d4:cf:12:ed:c7:80:0c:11:ac:9d:1b:3f:18:4a:d4:45:a5:d1:
09:d5:7a:d3:9a:32:34:3f:30:c7:d4:14:ff:dd:fd:f8:c9:6d:
23:1a:8d:d5:ab:29:7c:54:88:18:73:d7:ab:49:00:1e:6e:52:
fe:d9:d3:c9:56:5a:75:79:26:dd:0d:79:a5:1c:cf:89:d7:0c:
50:d0:4a:1c:6f:2c:27:03:b5:14:78:1c:d6:88:b0:ff:21:7c:
ab:e8:f5:87:94:a9:46:2d:d0:d1:c5:04:20:6d:ef:57:52:d9:
d5:6d:2a:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTfBQ7BF8zapHQdFU33tqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4OThkYjhjYjg2MWJiYmRkMWZiNzU2MmRlZjRkNzdkODY0
MmMzMjQwHhcNMjUwMzEyMTcwMTM1WhcNMjUwMzEzMTcwMTM1WjAzMTEwLwYDVQQD
Eyg4MzBiZjhjY2Q1MGJiZDRmZjhlYWM1MmI2YmJkZWMwMTc2ZmNjMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp78tAqB706IKszIms4FxaqYiu1IO
7DvC9u2ttzgDAM79sy48+Qvhgi78x8foanANkwBBpCCwq32hc6ZHRI8ezq9+WDq1
4K0BdzLXK3FUSyEvkGghDGn9HnHki2E4dtJYGm+tBJNwRNH+D2PESOdZaXY0PjS7
5oi0LYVi6ZlrvD4CMP1kgWRlc+Ir0o4VnKOioDamSU7oDm2M7yQgmx+1NETqA/qU
zPA2SNeIZ0he7UUdc2qpfmMq5I9OP11PWWA8ts/OR/V5oiSX7HSsaXl82w+mzTnH
xc3XIoHWqsa/JnuMyuUlN/3LtlMInjmP/vwAVXCjI6fqYJc1iTGK1QUpiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIML+MzVC71P+OrFK2u97AF2/MIKMB8GA1UdIwQY
MBaAFIiY24y4Ybu90ft1Yt70132GQsMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YTZjZjUtMTM0Mi00YzNiLTg3YWYt
MTYwYzI0YzY2NjMwLzEvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85YTZjZjUtMTM0Mi00YzNiLTg3YWYtMTYwYzI0YzY2NjMw
LzEvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZl6MTA1G
R67a45CTaneblhtBR9bihPCUxnjYhV4x0Anl4gBTjHvYlKwTxCDqdrfHezh8DyNs
MDRNnj7tL953lw+wc4p5tAsSk7fj69Q3GldyUrvh7TX2DRmqQ0eocZpqLs6VKcAE
plehojzBQOh8VYD54VSFA1rlLtXuYvq4Ez3nSVN1xakctkQ6LpY7O6xa1M8S7ceA
DBGsnRs/GErURaXRCdV605oyND8wx9QU/939+MltIxqN1aspfFSIGHPXq0kAHm5S
/tnTyVZadXkm3Q15pRzPidcMUNBKHG8sJwO1FHgc1oiw/yF8q+j1h5SpRi3Q0cUE
IG3vV1LZ1W0qWg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:50 2025 by rpki-client