Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
File: J2zuYEMhsPEryjZ7VMBzmqil8To.mft (raw, json)
Hash identifier: I3mMxa5jATJyuLuoKlpq/B7Gm/wmLUuXh1ehK6CFU74=
Subject key identifier: 89:31:75:D9:32:D0:FC:74:98:6E:66:A1:FE:B3:DC:EE:CD:24:0A:5D
Authority key identifier: 27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
Certificate issuer: /CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Certificate serial: 01964F6CFCD903BED6FF4ACFE1D677AA036B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
Manifest number: 0E4D
Signing time: Sat 19 Apr 2025 19:01:04 +0000
Manifest this update: Sat 19 Apr 2025 19:01:04 +0000
Manifest next update: Sun 20 Apr 2025 19:01:04 +0000
Files and hashes: 1: J2zuYEMhsPEryjZ7VMBzmqil8To.crl (hash: Fxx4fMftHoDbgm5E0do4I6LErNlpDocLkyZuoJ+WKf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:fc:d9:03:be:d6:ff:4a:cf:e1:d6:77:aa:03:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Validity
Not Before: Apr 19 19:01:04 2025 GMT
Not After : Apr 20 19:01:04 2025 GMT
Subject: CN=893175d932d0fc74986e66a1feb3dceecd240a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:e5:8e:9a:d2:0c:dc:c7:90:e5:70:ca:1b:
8d:e1:ba:b0:ef:e2:c4:2a:4c:6b:60:92:90:41:eb:
b2:79:2c:fe:b6:7f:77:14:20:69:b3:1b:29:68:1d:
c8:b6:26:10:55:5a:0c:5a:5c:d3:91:18:60:a9:91:
97:e0:84:53:a4:cc:41:77:ee:b4:02:2a:87:ec:d9:
46:13:7e:11:1c:6b:01:3c:b1:ef:c8:74:23:95:42:
ab:1e:ec:4d:1e:9d:2a:88:f6:7e:df:27:2f:6b:a2:
ae:9e:22:7f:13:6a:ee:42:05:37:8b:e3:da:95:0e:
6f:0f:3c:ee:23:42:b4:1c:66:a0:e0:02:df:ad:06:
e6:e7:88:7d:97:ac:87:aa:20:03:b1:a2:b2:83:0e:
d9:ee:37:9f:0d:7c:b4:42:27:87:1c:6f:b5:a4:ec:
89:34:14:b6:ed:51:30:53:71:64:23:a4:e4:61:15:
c7:fa:a5:10:59:90:af:bd:c7:fa:5a:44:a6:22:85:
25:09:67:b2:8c:8a:37:b5:63:ce:96:ef:f1:6b:12:
28:95:4b:9c:5f:57:35:dc:a2:28:16:d2:75:72:bd:
08:61:97:60:18:0c:04:c5:84:ca:24:ae:62:3b:4d:
4f:bc:7e:ad:c6:ba:85:71:40:4e:ed:de:6c:01:a1:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:31:75:D9:32:D0:FC:74:98:6E:66:A1:FE:B3:DC:EE:CD:24:0A:5D
X509v3 Authority Key Identifier:
keyid:27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1a:74:10:0c:90:a9:ec:5e:a1:49:9d:04:9b:ae:fe:c6:25:
1e:96:f0:36:67:93:cc:ab:e7:c5:0f:c9:24:73:c5:1d:06:6a:
92:0a:14:8a:4f:c8:66:3f:4b:da:ab:be:f1:90:85:47:88:b1:
42:02:5d:e9:ad:7a:ca:97:a5:15:e3:3e:d9:f4:70:3c:78:6d:
27:d6:30:77:6c:0c:a2:73:ac:b8:13:d4:5b:65:66:8e:4e:74:
97:03:e5:7f:47:c8:dc:c0:68:1f:23:f5:4a:fb:f8:2c:81:6a:
ba:c2:d1:44:90:db:3d:d9:6e:8e:8e:d2:98:e1:72:5e:fd:d5:
68:a2:90:d5:a0:f3:85:ad:00:8c:be:9b:cd:38:df:09:d0:df:
e7:ca:ad:93:e7:80:86:cc:77:f6:f0:27:91:32:d8:63:a9:d1:
dd:4e:f9:f4:71:40:b8:a2:a9:81:cb:09:68:56:5a:57:f6:e5:
07:59:4a:3c:f1:86:6f:ed:ba:65:df:de:39:1d:3f:67:29:a9:
c9:dd:45:50:7c:ba:74:10:2b:6e:6b:9c:39:2c:d6:3f:df:b5:
2b:f3:ff:d8:f9:7c:a6:dc:dc:da:7a:22:04:c7:62:c8:40:06:
f3:62:c7:a9:7c:09:a6:7b:7d:05:47:e8:b1:7d:3c:34:bf:aa:
11:57:29:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbPzZA77W/0rP4dZ3qgNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NmNlZTYwNDMyMWIwZjEyYmNhMzY3YjU0YzA3MzlhYThh
NWYxM2EwHhcNMjUwNDE5MTkwMTA0WhcNMjUwNDIwMTkwMTA0WjAzMTEwLwYDVQQD
Eyg4OTMxNzVkOTMyZDBmYzc0OTg2ZTY2YTFmZWIzZGNlZWNkMjQwYTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdLljprSDNzHkOVwyhuN4bqw7+LE
KkxrYJKQQeuyeSz+tn93FCBpsxspaB3ItiYQVVoMWlzTkRhgqZGX4IRTpMxBd+60
AiqH7NlGE34RHGsBPLHvyHQjlUKrHuxNHp0qiPZ+3ycva6KuniJ/E2ruQgU3i+Pa
lQ5vDzzuI0K0HGag4ALfrQbm54h9l6yHqiADsaKygw7Z7jefDXy0QieHHG+1pOyJ
NBS27VEwU3FkI6TkYRXH+qUQWZCvvcf6WkSmIoUlCWeyjIo3tWPOlu/xaxIolUuc
X1c13KIoFtJ1cr0IYZdgGAwExYTKJK5iO01PvH6txrqFcUBO7d5sAaFKfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkxddky0Px0mG5mof6z3O7NJApdMB8GA1UdIwQY
MBaAFCds7mBDIbDxK8o2e1TAc5qopfE6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJ6dVlFTWhzUEVyeWpaN1ZNQnptcWlsOFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hNTk5NTUtODZjZi00NjU1LWExZjgt
MjU4OTU0YjRmZTVhLzEvSjJ6dVlFTWhzUEVyeWpaN1ZNQnptcWlsOFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hNTk5NTUtODZjZi00NjU1LWExZjgtMjU4OTU0YjRmZTVh
LzEvSjJ6dVlFTWhzUEVyeWpaN1ZNQnptcWlsOFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehp0EAyQ
qexeoUmdBJuu/sYlHpbwNmeTzKvnxQ/JJHPFHQZqkgoUik/IZj9L2qu+8ZCFR4ix
QgJd6a16ypelFeM+2fRwPHhtJ9Ywd2wMonOsuBPUW2Vmjk50lwPlf0fI3MBoHyP1
Svv4LIFqusLRRJDbPdlujo7SmOFyXv3VaKKQ1aDzha0AjL6bzTjfCdDf58qtk+eA
hsx39vAnkTLYY6nR3U759HFAuKKpgcsJaFZaV/blB1lKPPGGb+26Zd/eOR0/Zymp
yd1FUHy6dBArbmucOSzWP9+1K/P/2Pl8ptzc2noiBMdiyEAG82LHqXwJpnt9BUfo
sX08NL+qEVcpLg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:51 2025 by rpki-client