Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: +1o6pwkgiq8PQVLpjuZbBOEp4XLLER/S+uJu32iM9o4=
Subject key identifier: 86:D1:B2:2E:3B:23:09:06:20:43:71:23:64:8E:21:79:11:A3:E6:45
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 01962B29D3B0E99AE7FED865E927227779C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 0FB6
Signing time: Sat 12 Apr 2025 18:01:23 +0000
Manifest this update: Sat 12 Apr 2025 18:01:23 +0000
Manifest next update: Sun 13 Apr 2025 18:01:23 +0000
Files and hashes: 1: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=)
2: ds8x3qHhuROEI3eYeW-J-KnoVOY.roa (hash: sZSMC1BrQoLmX+rojH+SOE/CV/DFjkpNZIlB8RClTc0=)
3: jQInECNXc0p8Lpjj-s1SoXORrsY.roa (hash: QgcQD1WSSYMYOa1FRqEex60YkyPfDqbnNuvvBLNxxGQ=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: NdShFpWi1G97xjuZFPQPqOsSFGVX0ErJOokTsEOjHKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:29:d3:b0:e9:9a:e7:fe:d8:65:e9:27:22:77:79:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Apr 12 18:01:23 2025 GMT
Not After : Apr 13 18:01:23 2025 GMT
Subject: CN=86d1b22e3b23090620437123648e217911a3e645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:a8:39:b1:8e:e7:9b:da:2c:bb:7b:70:51:
68:50:b6:62:dc:74:85:c9:7e:1f:a8:2d:0b:8b:5f:
67:4c:9a:45:34:9b:7d:41:a6:71:9e:31:dd:44:9e:
67:d6:7c:96:2b:c0:9d:e3:02:aa:01:2f:e8:8c:80:
09:10:7a:98:11:39:28:ca:33:bc:53:32:a2:c7:a9:
ad:df:1f:a0:85:1f:52:d7:c9:23:9a:dd:74:73:ca:
f5:81:a5:e6:35:81:c6:ec:c4:0d:da:4e:de:c5:45:
a5:82:b0:a9:26:fc:13:ff:5f:e6:c7:21:17:5c:c7:
e9:f6:3f:00:b9:15:5a:a2:a7:50:04:66:1a:07:39:
20:b4:e7:54:1f:c2:b9:71:0d:42:1d:c6:31:fc:53:
b7:1b:b4:a7:03:0b:5d:f6:6e:48:4c:e4:0c:a0:6c:
cc:e7:9e:25:21:94:c3:ef:63:2d:bd:45:96:05:2e:
f8:47:eb:37:68:98:24:56:a4:5f:bf:93:d0:0b:f5:
d4:6d:41:06:e5:00:dc:5c:b8:d5:87:15:92:28:1f:
0b:5d:1b:0f:ae:8e:51:a2:87:01:60:ee:09:7d:1c:
0a:83:d5:19:a5:2e:87:fb:7b:45:11:d3:b1:66:5f:
d1:f5:ae:8d:3f:f7:ed:b4:11:14:e2:b8:ad:6c:73:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D1:B2:2E:3B:23:09:06:20:43:71:23:64:8E:21:79:11:A3:E6:45
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b4:32:c8:05:ef:e2:31:6c:dc:94:24:f2:fa:49:d9:6e:f7:
49:1e:8c:94:4a:ba:b3:2d:51:e7:9d:93:e8:66:10:a7:06:f0:
f6:95:47:9b:42:90:d9:5c:43:d3:62:3e:5a:bc:70:c0:b7:da:
83:84:8b:d1:f2:fe:20:d4:54:05:f4:c3:54:9b:b2:9e:ec:86:
73:9a:7d:be:e1:3c:d3:d5:e6:83:af:8b:83:3d:85:e8:ff:a5:
4f:93:ec:21:b1:09:a8:fe:30:aa:9f:15:13:81:f9:59:15:3d:
55:2c:df:8a:79:19:51:78:fc:86:66:ce:f1:73:d5:bf:02:ff:
97:62:d1:67:17:85:e3:de:9b:7f:9b:35:c4:7a:da:a1:85:46:
43:00:3f:dc:85:a0:5c:17:ab:f4:2d:6d:6b:4c:65:78:46:1e:
af:0d:09:30:60:90:6a:64:30:83:2e:36:0a:91:5c:b8:7e:75:
2c:69:60:e8:a7:99:1a:60:9a:90:9b:5d:36:bd:1d:58:88:6a:
e6:26:43:7f:b8:8b:44:cf:dc:fa:63:d7:75:38:10:b0:6c:e6:
9c:96:56:d2:2e:96:0f:e5:ac:0a:5a:da:f7:d8:60:4d:d5:a2:
32:08:50:5e:08:d4:e2:7c:87:6c:be:9d:2c:ef:a8:e1:a7:83:
85:eb:3b:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYrKdOw6Zrn/thl6Scid3nCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTA5MmJiYzJjYWNhZTI0Nzc3NGY2MmIwZmRiZGM0NGE5
NzRjZjIwHhcNMjUwNDEyMTgwMTIzWhcNMjUwNDEzMTgwMTIzWjAzMTEwLwYDVQQD
Eyg4NmQxYjIyZTNiMjMwOTA2MjA0MzcxMjM2NDhlMjE3OTExYTNlNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArouoObGO55vaLLt7cFFoULZi3HSF
yX4fqC0Li19nTJpFNJt9QaZxnjHdRJ5n1nyWK8Cd4wKqAS/ojIAJEHqYETkoyjO8
UzKix6mt3x+ghR9S18kjmt10c8r1gaXmNYHG7MQN2k7exUWlgrCpJvwT/1/mxyEX
XMfp9j8AuRVaoqdQBGYaBzkgtOdUH8K5cQ1CHcYx/FO3G7SnAwtd9m5ITOQMoGzM
554lIZTD72MtvUWWBS74R+s3aJgkVqRfv5PQC/XUbUEG5QDcXLjVhxWSKB8LXRsP
ro5RoocBYO4JfRwKg9UZpS6H+3tFEdOxZl/R9a6NP/fttBEU4ritbHP/xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbRsi47IwkGIENxI2SOIXkRo+ZFMB8GA1UdIwQY
MBaAFKyQkrvCysriR3dPYrD9vcRKl0zyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMt
YTNmYzE5NmFhYmIzLzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMtYTNmYzE5NmFhYmIz
LzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbQyyAXv
4jFs3JQk8vpJ2W73SR6MlEq6sy1R552T6GYQpwbw9pVHm0KQ2VxD02I+WrxwwLfa
g4SL0fL+INRUBfTDVJuynuyGc5p9vuE809Xmg6+Lgz2F6P+lT5PsIbEJqP4wqp8V
E4H5WRU9VSzfinkZUXj8hmbO8XPVvwL/l2LRZxeF496bf5s1xHraoYVGQwA/3IWg
XBer9C1ta0xleEYerw0JMGCQamQwgy42CpFcuH51LGlg6KeZGmCakJtdNr0dWIhq
5iZDf7iLRM/c+mPXdTgQsGzmnJZW0i6WD+WsClra99hgTdWiMghQXgjU4nyHbL6d
LO+o4aeDhes7Vg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:43:08 2025 by rpki-client