Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: bmYpsZhW+l5dRFZCyLuUlRBCU0lZ6+JuTEHkSlSRRxs=
Subject key identifier: CB:E2:1C:39:99:68:68:B2:A8:57:EB:54:6C:C3:41:36:8D:72:6E:20
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 01963F8B550C53D472DF6D4F23F0F94B3109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 0328
Signing time: Wed 16 Apr 2025 17:00:17 +0000
Manifest this update: Wed 16 Apr 2025 17:00:17 +0000
Manifest next update: Thu 17 Apr 2025 17:00:17 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: ljE6JjSRB0Ujy886CtpLkaYTJX047D3Trrk0zGiIlHg=)
2: cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (hash: pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=)
3: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (hash: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:55:0c:53:d4:72:df:6d:4f:23:f0:f9:4b:31:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Apr 16 17:00:17 2025 GMT
Not After : Apr 17 17:00:17 2025 GMT
Subject: CN=cbe21c39996868b2a857eb546cc341368d726e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:6f:d0:e4:e9:61:69:c0:8f:78:93:0b:6d:
52:61:7d:0d:54:b7:66:b3:4a:48:ad:00:ed:81:8c:
44:96:73:7d:07:b5:d3:b0:79:7d:a3:7e:e0:3a:a1:
36:de:4a:ce:a2:e3:58:f3:25:a7:6d:ff:ea:0e:d4:
d3:5c:25:12:13:23:77:e2:8a:21:f8:c0:b7:f8:b3:
a9:d1:08:4c:95:d3:4e:21:f5:d2:13:a1:ab:e4:68:
ce:0e:cc:b1:70:b2:6f:8e:bc:3f:fc:dd:8d:95:fa:
3d:30:f1:48:a6:de:21:c1:46:11:cb:e6:c0:dd:ea:
61:88:c4:74:9b:b5:d2:67:0d:c6:17:64:2a:7e:8d:
ec:32:74:55:c2:95:59:dd:60:1c:75:d4:85:92:1d:
95:54:29:32:9e:a9:dc:45:b4:87:cf:42:5c:09:3e:
6c:b9:c4:c0:29:42:7c:e8:4e:da:e4:a0:79:37:5e:
41:25:ec:9f:53:f4:ed:eb:25:08:f9:4a:7e:c8:89:
a9:7e:79:62:d5:21:19:ae:81:dc:32:27:ff:5f:50:
45:be:53:c5:3d:7b:c0:d7:5e:62:76:62:47:67:3d:
87:f5:3a:db:00:2b:f5:42:04:82:72:a8:26:f3:90:
c5:8b:a3:7c:d8:d8:80:64:f4:08:34:0d:a7:8b:04:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E2:1C:39:99:68:68:B2:A8:57:EB:54:6C:C3:41:36:8D:72:6E:20
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cd:f6:2c:a3:a1:f6:53:83:ea:f3:a7:64:02:0d:23:14:a6:
86:06:91:ee:2f:a7:51:14:80:e4:91:17:a8:b0:48:31:49:59:
71:c3:8b:eb:b9:e2:9f:a2:9f:17:94:62:5e:d1:d3:f8:f4:61:
41:a2:f0:5a:6f:dd:dc:53:31:74:22:da:5f:2c:e9:45:54:cb:
43:ac:00:2f:11:32:59:c1:3c:26:2d:28:01:e5:b8:58:ed:36:
0a:a0:94:b1:7f:14:7a:25:77:5b:73:6d:54:e9:09:32:e1:d1:
88:83:ae:49:c8:85:ab:ee:bd:d1:b5:0d:87:bf:3e:e8:c9:20:
71:cd:01:e2:6f:54:83:22:14:e7:7d:eb:05:45:0f:89:90:bc:
67:dd:5b:5c:82:1d:d4:76:a1:7a:5b:fa:44:49:62:fd:0c:38:
41:3a:59:c4:23:31:ff:6d:29:0d:ef:65:f9:ff:64:f3:b1:39:
42:5d:1f:94:dd:1b:83:2f:ea:d6:ec:4f:d3:26:ee:bb:49:23:
93:3e:69:26:00:d0:01:6a:eb:3a:a1:cd:12:32:c5:9e:ff:1e:
f6:e3:67:23:bf:ea:61:37:3b:c6:26:66:9a:5b:cb:d8:13:5c:
cb:b8:73:e4:50:54:a0:4b:1d:b4:ec:06:c1:e3:97:de:bf:82:
e9:1b:aa:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/i1UMU9Ry321PI/D5SzEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTdmNzNiZjAyZjc1NGIxZTYzMTdlZTlhNGYzZTg4NjM3
ZjFhYTcwHhcNMjUwNDE2MTcwMDE3WhcNMjUwNDE3MTcwMDE3WjAzMTEwLwYDVQQD
EyhjYmUyMWMzOTk5Njg2OGIyYTg1N2ViNTQ2Y2MzNDEzNjhkNzI2ZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi1v0OTpYWnAj3iTC21SYX0NVLdm
s0pIrQDtgYxElnN9B7XTsHl9o37gOqE23krOouNY8yWnbf/qDtTTXCUSEyN34ooh
+MC3+LOp0QhMldNOIfXSE6Gr5GjODsyxcLJvjrw//N2Nlfo9MPFIpt4hwUYRy+bA
3ephiMR0m7XSZw3GF2Qqfo3sMnRVwpVZ3WAcddSFkh2VVCkynqncRbSHz0JcCT5s
ucTAKUJ86E7a5KB5N15BJeyfU/Tt6yUI+Up+yImpfnli1SEZroHcMif/X1BFvlPF
PXvA115idmJHZz2H9TrbACv1QgSCcqgm85DFi6N82NiAZPQINA2niwQYBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMviHDmZaGiyqFfrVGzDQTaNcm4gMB8GA1UdIwQY
MBaAFCRX9zvwL3VLHmMX7ppPPohjfxqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTct
NWZhMzgwNzQ5NDk3LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTctNWZhMzgwNzQ5NDk3
LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQc32LKOh
9lOD6vOnZAINIxSmhgaR7i+nURSA5JEXqLBIMUlZccOL67nin6KfF5RiXtHT+PRh
QaLwWm/d3FMxdCLaXyzpRVTLQ6wALxEyWcE8Ji0oAeW4WO02CqCUsX8UeiV3W3Nt
VOkJMuHRiIOuSciFq+690bUNh78+6Mkgcc0B4m9UgyIU533rBUUPiZC8Z91bXIId
1Hahelv6REli/Qw4QTpZxCMx/20pDe9l+f9k87E5Ql0flN0bgy/q1uxP0ybuu0kj
kz5pJgDQAWrrOqHNEjLFnv8e9uNnI7/qYTc7xiZmmlvL2BNcy7hz5FBUoEsdtOwG
weOX3r+C6Ruqww==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:28:30 2025 by rpki-client