Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
File: J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft (raw, json)
Hash identifier: rwfty/rU8qpjZWP/YFz4z6VR8PngpmHFsgZdMtBYXeg=
Subject key identifier: 79:1A:D9:E2:1D:70:B2:F4:60:8C:D7:70:2A:18:18:28:E6:15:2D:02
Authority key identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
Certificate issuer: /CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Certificate serial: 01964F3546F0F0C19BCB15ECA720984C2089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
Manifest number: 03AE
Signing time: Sat 19 Apr 2025 18:00:13 +0000
Manifest this update: Sat 19 Apr 2025 18:00:13 +0000
Manifest next update: Sun 20 Apr 2025 18:00:13 +0000
Files and hashes: 1: J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl (hash: iBGs9evlrTkTzuMpQHNphrhjiXqG3QXemBH0sBfH0Lc=)
2: Ri5k7SQxU6x0UFludmWvZ0B6TWI.roa (hash: TLxEmCkGZUEaMyJcwR/yeYXTxZGAU/9BCp1xDMGwRT4=)
3: TIq2cJHpR6KvpC_5zEbT28CzxmQ.roa (hash: AjELo4AcRNi6tjWnrWUw4e1yYtJi2dPHt3KwG3rn9eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:46:f0:f0:c1:9b:cb:15:ec:a7:20:98:4c:20:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Validity
Not Before: Apr 19 18:00:13 2025 GMT
Not After : Apr 20 18:00:13 2025 GMT
Subject: CN=791ad9e21d70b2f4608cd7702a181828e6152d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:fe:3b:51:af:dc:4b:3a:4c:ca:23:15:b2:
d5:31:db:d8:1e:31:73:c8:ac:c1:a2:f4:89:c4:6d:
61:7a:a3:ee:04:c9:fe:e1:ba:04:c0:3b:07:96:48:
7c:47:92:cb:03:02:49:21:96:62:bb:b6:82:18:b0:
04:ff:a9:07:7e:35:1d:eb:47:0a:53:ff:d7:46:80:
bd:56:1e:a9:15:a9:45:a0:02:56:d0:8b:5a:d7:0c:
e9:7e:e0:e7:6e:ce:41:78:cc:31:01:2c:42:7c:6c:
10:50:23:1f:2e:78:76:eb:08:15:82:26:e6:5c:f3:
6c:ab:6e:e8:97:66:fb:c9:5d:18:33:39:a2:ea:f9:
ae:30:02:54:46:23:ff:37:df:b9:28:4a:95:61:6a:
b4:a7:c4:19:20:91:20:67:ad:bd:b4:16:d2:c2:b9:
1e:cf:b1:8a:d5:69:4b:f3:ee:95:35:0d:5d:5a:6b:
e3:47:28:99:9e:53:52:29:ac:7e:83:a0:4a:7e:42:
b7:8f:0f:3f:bc:dd:43:4d:55:b3:e8:14:20:6b:aa:
56:ca:a9:a4:d3:6e:1b:b5:89:2e:dd:86:a4:36:e6:
46:7b:4b:f6:9d:03:1d:1f:a2:fc:91:92:b2:c7:17:
3d:03:b1:35:4f:93:a8:92:3f:79:91:64:8b:fa:6a:
04:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1A:D9:E2:1D:70:B2:F4:60:8C:D7:70:2A:18:18:28:E6:15:2D:02
X509v3 Authority Key Identifier:
keyid:27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:05:70:e7:6e:75:a2:47:9e:62:df:21:8b:16:5e:70:c7:77:
6f:95:24:40:c6:af:e6:d0:9d:4a:19:74:53:2c:86:a4:fc:f5:
70:30:9e:f9:b6:ba:a8:81:62:5e:90:26:3f:17:7e:40:6a:f7:
ab:cb:02:56:22:1f:f6:d1:a4:2c:f2:fb:f3:98:7d:ae:88:df:
a5:2f:40:80:b6:87:b7:07:53:49:cc:3b:d2:41:43:38:97:c2:
db:de:db:b1:6f:65:71:ac:90:6e:9d:ae:f3:a5:c6:1d:db:7e:
2f:40:20:60:27:00:66:e1:fa:8e:11:9f:21:6e:5e:bd:1e:bf:
8e:35:6b:b7:ed:45:61:63:a9:02:00:b5:51:db:a0:65:eb:b7:
ec:85:bf:c4:34:d3:09:8b:b5:6a:08:39:ef:53:84:f2:cc:cd:
30:61:fe:62:02:fc:64:1d:11:d0:48:1f:16:66:32:dc:68:30:
13:21:e7:88:0e:7d:0a:cd:91:f4:c9:c1:f8:77:e9:09:39:2a:
7f:08:68:06:18:d3:8f:9e:28:e9:73:04:c3:cd:35:e4:2b:48:
92:ac:e1:52:45:8e:56:c6:3e:9d:25:f0:e0:79:7d:c0:66:8e:
13:52:fe:40:e6:1c:d2:28:35:5d:73:7d:44:cb:33:c1:8b:d5:
3f:84:a1:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPNUbw8MGbyxXspyCYTCCJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODczYWZlNjMzMGI3YWU5ZWU1NjJlMGM5ODhlOWZkNWVh
OGY1NjcwHhcNMjUwNDE5MTgwMDEzWhcNMjUwNDIwMTgwMDEzWjAzMTEwLwYDVQQD
Eyg3OTFhZDllMjFkNzBiMmY0NjA4Y2Q3NzAyYTE4MTgyOGU2MTUyZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+z+O1Gv3Es6TMojFbLVMdvYHjFz
yKzBovSJxG1heqPuBMn+4boEwDsHlkh8R5LLAwJJIZZiu7aCGLAE/6kHfjUd60cK
U//XRoC9Vh6pFalFoAJW0Ita1wzpfuDnbs5BeMwxASxCfGwQUCMfLnh26wgVgibm
XPNsq27ol2b7yV0YMzmi6vmuMAJURiP/N9+5KEqVYWq0p8QZIJEgZ629tBbSwrke
z7GK1WlL8+6VNQ1dWmvjRyiZnlNSKax+g6BKfkK3jw8/vN1DTVWz6BQga6pWyqmk
024btYku3YakNuZGe0v2nQMdH6L8kZKyxxc9A7E1T5Ookj95kWSL+moEJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHka2eIdcLL0YIzXcCoYGCjmFS0CMB8GA1UdIwQY
MBaAFCeHOv5jMLeunuVi4MmI6f1eqPVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMzk0MTYtZjQ2YS00ZjgyLWIxZTEt
ZTBkMWY3Y2FjZmYxLzEvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kMzk0MTYtZjQ2YS00ZjgyLWIxZTEtZTBkMWY3Y2FjZmYx
LzEvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwVw5251
okeeYt8hixZecMd3b5UkQMav5tCdShl0UyyGpPz1cDCe+ba6qIFiXpAmPxd+QGr3
q8sCViIf9tGkLPL785h9rojfpS9AgLaHtwdTScw70kFDOJfC297bsW9lcayQbp2u
86XGHdt+L0AgYCcAZuH6jhGfIW5evR6/jjVrt+1FYWOpAgC1UdugZeu37IW/xDTT
CYu1agg571OE8szNMGH+YgL8ZB0R0EgfFmYy3GgwEyHniA59Cs2R9MnB+HfpCTkq
fwhoBhjTj54o6XMEw8015CtIkqzhUkWOVsY+nSXw4Hl9wGaOE1L+QOYc0ig1XXN9
RMszwYvVP4ShnQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:43 2025 by rpki-client