Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
File: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft (raw, json)
Hash identifier: 9UDMqk8p82I0oosBJ50bC26KHgzZVxZ1yS3PWCYILc4=
Subject key identifier: 8D:4B:B9:F7:EF:85:F6:CD:71:93:7F:B1:02:B3:EE:E2:BC:69:33:51
Authority key identifier: 26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
Certificate issuer: /CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Certificate serial: 0196477BE39B1E6C880B07D9B52F630E514B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
Manifest number: 14F4
Signing time: Fri 18 Apr 2025 06:00:23 +0000
Manifest this update: Fri 18 Apr 2025 06:00:23 +0000
Manifest next update: Sat 19 Apr 2025 06:00:23 +0000
Files and hashes: 1: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl (hash: v6jGpfNDlOzNkPzcoObeOCaJRbi+3w4OqCCFO0RaIhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:7b:e3:9b:1e:6c:88:0b:07:d9:b5:2f:63:0e:51:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Validity
Not Before: Apr 18 06:00:23 2025 GMT
Not After : Apr 19 06:00:23 2025 GMT
Subject: CN=8d4bb9f7ef85f6cd71937fb102b3eee2bc693351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:78:6c:9b:c2:6c:25:ce:96:f2:c3:e6:04:
ac:55:4f:43:c5:d0:04:29:69:9f:2d:6b:48:94:dd:
83:ca:c8:e1:a4:d7:1c:58:d0:9f:a0:e9:06:df:d2:
31:e6:4f:bb:ff:76:59:c5:b0:c2:a6:86:60:30:2f:
d7:db:87:5c:c2:18:f6:93:c6:a9:a9:96:08:74:bf:
ec:22:e1:c7:25:25:a8:7c:cc:d8:bc:68:0d:36:81:
07:fd:9f:aa:45:34:96:a0:27:9d:82:5d:a6:20:10:
8c:cd:e2:9d:33:95:55:ba:91:1d:9b:21:75:25:57:
38:cf:1b:e5:03:7c:2a:ee:33:b6:34:bc:0d:e2:a0:
58:47:ab:bf:e6:49:e0:24:d2:db:78:be:6e:fd:a0:
77:35:d2:5c:5c:53:21:cf:5c:b2:86:1d:32:f8:07:
fb:31:a5:a6:5b:6c:0c:23:76:4c:1a:b6:ea:98:67:
da:6b:7c:ac:b7:f1:44:55:ea:16:6b:63:42:22:fd:
4b:74:6e:71:31:d4:79:8f:31:54:e7:d8:2a:72:d6:
a3:63:80:ed:3e:25:d2:a1:31:7b:22:af:75:eb:be:
d7:00:d9:09:3f:67:4f:28:c9:f8:9c:de:6c:32:fa:
27:f3:cc:99:8f:fe:36:c8:4a:02:33:da:f4:30:fa:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:B9:F7:EF:85:F6:CD:71:93:7F:B1:02:B3:EE:E2:BC:69:33:51
X509v3 Authority Key Identifier:
keyid:26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a8:a1:ea:fc:55:69:dc:15:8c:52:00:da:22:99:77:fb:a3:
84:02:fe:74:65:69:1d:a6:b1:f3:44:77:44:23:7e:78:e6:0f:
e9:7d:50:96:53:b5:83:fb:24:b9:88:cc:15:10:67:f2:f3:49:
c6:1b:51:f8:8f:39:80:5b:7f:75:f2:73:e3:fb:e6:41:0a:82:
db:21:aa:b9:b3:87:04:be:50:10:92:a1:22:3c:42:b6:5a:50:
5e:69:bb:a6:02:21:71:fd:ea:e6:ec:e3:f6:c9:e6:cb:84:71:
f0:70:2c:ba:65:39:e4:5e:53:e3:08:8b:43:e5:fd:ca:98:db:
b1:2a:25:6b:06:28:95:87:5a:2a:de:cb:4e:a4:13:8a:8f:9e:
e5:07:8d:5b:66:ba:77:2e:51:55:41:d6:2a:8b:0f:53:be:66:
bf:59:b5:98:57:d8:cf:c6:0c:a5:ab:09:45:32:f8:ea:cf:46:
6f:8b:f3:1a:40:87:8d:da:e3:ee:48:55:4f:a6:10:14:2f:a4:
7e:8a:ec:a5:9d:f2:23:d4:e7:0a:49:47:b7:8d:2f:2a:1d:01:
f1:76:77:f0:c5:e3:12:6f:b2:23:56:58:a1:67:33:71:6c:6a:
a2:69:fc:de:30:9f:e0:a0:c0:4b:38:f7:d7:02:09:a8:e3:9f:
54:9a:92:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZHe+ObHmyICwfZtS9jDlFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OGY1MzhlNzkxNmRjNjRjZDYxMDBjYzEwZjZmYWE2YmNi
YTE4NzQwHhcNMjUwNDE4MDYwMDIzWhcNMjUwNDE5MDYwMDIzWjAzMTEwLwYDVQQD
Eyg4ZDRiYjlmN2VmODVmNmNkNzE5MzdmYjEwMmIzZWVlMmJjNjkzMzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp094bJvCbCXOlvLD5gSsVU9DxdAE
KWmfLWtIlN2DysjhpNccWNCfoOkG39Ix5k+7/3ZZxbDCpoZgMC/X24dcwhj2k8ap
qZYIdL/sIuHHJSWofMzYvGgNNoEH/Z+qRTSWoCedgl2mIBCMzeKdM5VVupEdmyF1
JVc4zxvlA3wq7jO2NLwN4qBYR6u/5kngJNLbeL5u/aB3NdJcXFMhz1yyhh0y+Af7
MaWmW2wMI3ZMGrbqmGfaa3yst/FEVeoWa2NCIv1LdG5xMdR5jzFU59gqctajY4Dt
PiXSoTF7Iq91677XANkJP2dPKMn4nN5sMvon88yZj/42yEoCM9r0MPrIbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1LuffvhfbNcZN/sQKz7uK8aTNRMB8GA1UdIwQY
MBaAFCaPU455FtxkzWEAzBD2+qa8uhh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm85VGpua1czR1ROWVFETUVQYjZwcnk2R0hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lODA4NDktMDY5ZS00OTY2LWJlMmMt
NjBkYjNmNWVmZDllLzEvSm85VGpua1czR1ROWVFETUVQYjZwcnk2R0hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lODA4NDktMDY5ZS00OTY2LWJlMmMtNjBkYjNmNWVmZDll
LzEvSm85VGpua1czR1ROWVFETUVQYjZwcnk2R0hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKih6vxV
adwVjFIA2iKZd/ujhAL+dGVpHaax80R3RCN+eOYP6X1QllO1g/skuYjMFRBn8vNJ
xhtR+I85gFt/dfJz4/vmQQqC2yGqubOHBL5QEJKhIjxCtlpQXmm7pgIhcf3q5uzj
9snmy4Rx8HAsumU55F5T4wiLQ+X9ypjbsSolawYolYdaKt7LTqQTio+e5QeNW2a6
dy5RVUHWKosPU75mv1m1mFfYz8YMpasJRTL46s9Gb4vzGkCHjdrj7khVT6YQFC+k
forspZ3yI9TnCklHt40vKh0B8XZ38MXjEm+yI1ZYoWczcWxqomn83jCf4KDASzj3
1wIJqOOfVJqSnQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:40 2025 by rpki-client