Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
File: JGJNNpZGiPmJxkSsIBH0Fl086wc.mft (raw, json)
Hash identifier: Lmi+gRiaqwu1SlWgwkilSeAdKFGYYXZA9bZK+WMLtPY=
Subject key identifier: 5A:DB:B4:59:66:4E:D0:16:C2:94:E8:73:1C:CA:76:36:26:E8:D0:D9
Authority key identifier: 24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
Certificate issuer: /CN=24624d36964688f989c644ac2011f4165d3ceb07
Certificate serial: 019647B317553381630485DAF8669F4C1D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
Manifest number: 084F
Signing time: Fri 18 Apr 2025 07:00:41 +0000
Manifest this update: Fri 18 Apr 2025 07:00:41 +0000
Manifest next update: Sat 19 Apr 2025 07:00:41 +0000
Files and hashes: 1: JGJNNpZGiPmJxkSsIBH0Fl086wc.crl (hash: x/XMFwIIoYfAwc+hPIAG9ys+f5gGbgniVm9ceN3MdnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:b3:17:55:33:81:63:04:85:da:f8:66:9f:4c:1d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24624d36964688f989c644ac2011f4165d3ceb07
Validity
Not Before: Apr 18 07:00:41 2025 GMT
Not After : Apr 19 07:00:41 2025 GMT
Subject: CN=5adbb459664ed016c294e8731cca763626e8d0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:7a:eb:a9:1c:43:af:5d:7c:f4:64:7d:b9:
9a:d0:b5:97:55:6c:e8:87:c9:b0:5f:3b:f6:44:60:
54:a7:20:19:f2:72:5a:1e:22:5b:9c:fa:4f:e4:ff:
61:ea:09:64:5b:02:fd:57:14:4e:ff:9d:8e:d0:10:
8d:85:bb:f5:c2:1c:07:61:5d:09:de:b6:12:83:ba:
da:c3:10:c6:fd:d3:61:7f:e1:b7:b5:d9:b5:61:82:
5d:b4:c6:be:2a:f4:ee:8a:f8:1d:37:5c:31:9b:cd:
be:0c:19:67:2b:14:eb:e3:5a:32:98:0a:73:5e:bc:
1a:0c:38:f8:44:9c:db:50:6a:19:c3:14:ff:8a:71:
60:27:14:b0:40:90:56:be:09:d6:cd:ab:6a:ef:1f:
45:84:7d:ed:fe:12:bc:02:33:4c:b8:61:1e:8d:24:
d6:1b:c5:ad:65:8e:c4:f3:d2:f8:ff:52:ec:1b:3b:
16:db:06:b3:f8:8a:58:cc:d8:43:9b:fb:15:67:74:
fe:9a:fa:59:e7:cc:10:89:50:9a:8c:71:5c:f5:21:
13:89:24:0f:1b:35:97:fb:93:cb:bf:43:f2:f0:33:
59:1c:3d:24:4c:fb:b4:13:e7:6e:92:23:32:72:65:
5f:9d:30:07:7b:74:21:70:f6:cb:37:b9:ec:cc:7f:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DB:B4:59:66:4E:D0:16:C2:94:E8:73:1C:CA:76:36:26:E8:D0:D9
X509v3 Authority Key Identifier:
keyid:24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cd:d3:56:bd:4f:cf:d7:f2:4b:d7:6d:92:cc:c0:c6:b0:fd:
fd:b7:86:44:07:a4:a5:26:68:d0:99:70:d5:c8:f6:38:46:26:
dd:a1:ad:cc:fa:2d:08:da:20:f2:ae:86:c3:80:42:19:37:bd:
80:a5:f1:de:76:18:f1:05:56:25:f8:88:c4:88:7c:86:f6:09:
a8:ee:e8:45:1b:e7:aa:6e:06:2e:fd:53:4b:69:de:ae:8c:98:
05:46:6e:e6:1c:0a:a5:97:82:0c:33:59:24:d9:4b:39:7c:33:
e3:f2:84:7f:cc:ba:af:eb:c6:93:3c:4c:6e:4d:7c:00:5c:8c:
6b:2e:8a:ac:53:a6:1b:16:a5:d2:9a:6a:e4:53:f2:c5:72:b6:
28:3f:97:70:83:4b:23:f2:32:99:7a:3f:36:d0:5a:c6:3c:13:
15:09:49:6c:9e:0d:ad:40:79:ef:58:b1:1c:7a:30:ac:8e:42:
17:29:98:2c:7f:26:b6:f5:75:20:f8:3c:4a:29:b4:a0:0d:1f:
1a:84:0f:30:fb:b8:99:c3:d2:92:10:95:93:fe:b5:52:61:8d:
a2:07:0c:2d:57:dc:52:bc:86:94:ad:f1:cc:d1:e8:c6:c6:0b:
e7:bc:57:4c:12:88:ab:3d:0c:71:03:6a:c8:0a:c5:6a:2f:5d:
31:f6:d3:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZHsxdVM4FjBIXa+GafTB1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NjI0ZDM2OTY0Njg4Zjk4OWM2NDRhYzIwMTFmNDE2NWQz
Y2ViMDcwHhcNMjUwNDE4MDcwMDQxWhcNMjUwNDE5MDcwMDQxWjAzMTEwLwYDVQQD
Eyg1YWRiYjQ1OTY2NGVkMDE2YzI5NGU4NzMxY2NhNzYzNjI2ZThkMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvN666kcQ69dfPRkfbma0LWXVWzo
h8mwXzv2RGBUpyAZ8nJaHiJbnPpP5P9h6glkWwL9VxRO/52O0BCNhbv1whwHYV0J
3rYSg7rawxDG/dNhf+G3tdm1YYJdtMa+KvTuivgdN1wxm82+DBlnKxTr41oymApz
XrwaDDj4RJzbUGoZwxT/inFgJxSwQJBWvgnWzatq7x9FhH3t/hK8AjNMuGEejSTW
G8WtZY7E89L4/1LsGzsW2waz+IpYzNhDm/sVZ3T+mvpZ58wQiVCajHFc9SETiSQP
GzWX+5PLv0Py8DNZHD0kTPu0E+dukiMycmVfnTAHe3QhcPbLN7nszH/VAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrbtFlmTtAWwpTocxzKdjYm6NDZMB8GA1UdIwQY
MBaAFCRiTTaWRoj5icZErCAR9BZdPOsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkdKTk5wWkdpUG1KeGtTc0lCSDBGbDA4NndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83MzkyOTEtMmQ1Yy00YzFkLTkwNzkt
MDI3ZThjMDkxNDZiLzEvSkdKTk5wWkdpUG1KeGtTc0lCSDBGbDA4NndjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83MzkyOTEtMmQ1Yy00YzFkLTkwNzktMDI3ZThjMDkxNDZi
LzEvSkdKTk5wWkdpUG1KeGtTc0lCSDBGbDA4NndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm83TVr1P
z9fyS9dtkszAxrD9/beGRAekpSZo0Jlw1cj2OEYm3aGtzPotCNog8q6Gw4BCGTe9
gKXx3nYY8QVWJfiIxIh8hvYJqO7oRRvnqm4GLv1TS2neroyYBUZu5hwKpZeCDDNZ
JNlLOXwz4/KEf8y6r+vGkzxMbk18AFyMay6KrFOmGxal0ppq5FPyxXK2KD+XcINL
I/IymXo/NtBaxjwTFQlJbJ4NrUB571ixHHowrI5CFymYLH8mtvV1IPg8Sim0oA0f
GoQPMPu4mcPSkhCVk/61UmGNogcMLVfcUryGlK3xzNHoxsYL57xXTBKIqz0McQNq
yArFai9dMfbTwg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 11:19:47 2025 by rpki-client