Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File: jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier: HRAxjV4/popLsE+oCB8nudGibTPrkHKXWTXgliPXfqg=
Subject key identifier: 15:9C:2B:69:5D:26:71:50:E9:3C:19:35:CB:E4:5A:47:1A:70:30:A6
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial: 019510FDD3D88F038C2ECBD2BBCCA28D621A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number: 0A7E
Signing time: Sun 16 Feb 2025 23:00:24 +0000
Manifest this update: Sun 16 Feb 2025 23:00:24 +0000
Manifest next update: Mon 17 Feb 2025 23:00:24 +0000
Files and hashes: 1: 2W4793sjPA5QMW_mlfEBfSoM2Is.roa (hash: xqASKHMV7rljYXyQYNSClQ6vovvo85JsyWpLw7N75ps=)
2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: H5je1Y0MHvoZZh3argo3u9lHV4ErWuRcs7FFvRPNWhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:d3:d8:8f:03:8c:2e:cb:d2:bb:cc:a2:8d:62:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Validity
Not Before: Feb 16 23:00:24 2025 GMT
Not After : Feb 17 23:00:24 2025 GMT
Subject: CN=159c2b695d267150e93c1935cbe45a471a7030a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:8f:6c:6a:bb:f3:cf:7e:ab:15:de:04:15:
62:44:06:eb:95:67:f5:41:c8:71:ea:d5:91:76:5e:
24:4c:ee:40:53:50:9d:26:04:05:78:c0:3c:dc:07:
a6:52:5b:da:51:31:33:00:28:6c:ca:f7:dc:59:9c:
e0:4f:2b:7b:5d:31:2e:11:50:88:f4:1d:df:39:6b:
95:11:11:1f:f8:5d:20:c0:dc:29:a9:3d:fa:11:fb:
47:c1:d5:a1:73:aa:0c:3c:ea:2e:62:91:1d:37:76:
36:a1:ba:e5:7f:24:ba:f6:1d:7a:47:e1:b9:2e:20:
d9:5e:c8:73:04:c2:28:8f:f3:61:12:4f:f7:9b:66:
31:a3:15:24:18:63:a6:14:ee:02:7e:b4:f9:c1:9f:
06:8d:e7:11:0c:a9:76:a8:bf:be:12:f3:8d:5e:7f:
04:5f:01:95:7f:f2:52:67:bc:73:6e:28:0e:ad:ec:
de:48:7d:64:5a:a6:1a:78:cd:10:6d:18:3d:a8:35:
73:30:64:29:90:8d:84:6c:3f:9b:36:b8:1a:61:e5:
f1:0b:39:90:98:ec:d0:f5:40:3c:f9:d1:ec:09:68:
f8:76:a1:0f:d2:8f:43:2e:0d:66:03:5a:7f:bd:4c:
a3:3c:82:c2:8c:2c:95:43:a1:5c:84:2e:2a:c8:79:
54:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9C:2B:69:5D:26:71:50:E9:3C:19:35:CB:E4:5A:47:1A:70:30:A6
X509v3 Authority Key Identifier:
keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4a:96:f7:02:45:f8:89:7c:c4:cf:c4:bb:18:b9:15:21:60:
88:b0:67:69:ae:35:c5:18:3d:89:32:99:cf:e4:af:e9:66:ba:
53:72:04:00:bd:5d:43:f8:05:90:78:4b:7f:eb:64:62:57:f0:
69:4a:b8:58:dc:03:9a:3a:cc:9f:b3:d9:01:1f:26:17:fa:c5:
a2:72:70:29:b5:a9:4c:35:3a:d0:3c:4d:d6:f5:2e:f2:6a:ca:
c0:73:89:7a:3a:79:6d:19:5a:5e:9d:8d:72:16:b4:4b:22:d7:
a7:bd:90:19:ea:d3:97:aa:46:f2:37:ca:91:f1:9c:05:df:97:
a8:2e:c4:3e:1a:a9:c6:7b:b7:19:d9:bb:8d:74:2d:b3:2c:d1:
07:d8:cc:b2:79:da:f8:61:f9:fe:9d:ce:81:46:51:5a:3a:76:
d2:72:61:37:f0:25:ec:32:cd:04:c4:0c:59:fc:eb:3a:9d:d6:
d9:07:08:37:78:20:1e:c1:cc:1f:88:bb:3d:9c:1b:e3:f5:94:
da:46:4b:c8:0f:f9:bc:05:5d:8f:55:9a:98:4c:e0:7d:b3:40:
e2:37:0a:03:c2:ff:97:94:31:79:f9:70:ca:d2:b1:e2:4e:c1:
de:d8:11:51:d7:7a:78:b8:01:21:9f:81:f2:70:84:d9:d6:bc:
ea:68:72:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/dPYjwOMLsvSu8yijWIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlM2JmM2QwYjc2NWYyZWE0MjQ2MWQxMjM3Y2U3ZWFkZTQz
YjY4YWYwHhcNMjUwMjE2MjMwMDI0WhcNMjUwMjE3MjMwMDI0WjAzMTEwLwYDVQQD
EygxNTljMmI2OTVkMjY3MTUwZTkzYzE5MzVjYmU0NWE0NzFhNzAzMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlWPbGq7889+qxXeBBViRAbrlWf1
Qchx6tWRdl4kTO5AU1CdJgQFeMA83AemUlvaUTEzAChsyvfcWZzgTyt7XTEuEVCI
9B3fOWuVEREf+F0gwNwpqT36EftHwdWhc6oMPOouYpEdN3Y2obrlfyS69h16R+G5
LiDZXshzBMIoj/NhEk/3m2YxoxUkGGOmFO4CfrT5wZ8GjecRDKl2qL++EvONXn8E
XwGVf/JSZ7xzbigOrezeSH1kWqYaeM0QbRg9qDVzMGQpkI2EbD+bNrgaYeXxCzmQ
mOzQ9UA8+dHsCWj4dqEP0o9DLg1mA1p/vUyjPILCjCyVQ6FchC4qyHlUuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWcK2ldJnFQ6TwZNcvkWkcacDCmMB8GA1UdIwQY
MBaAFI4789C3ZfLqQkYdEjfOfq3kO2ivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMt
NTE3NjZiOWNhODZmLzEvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMtNTE3NjZiOWNhODZm
LzEvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0qW9wJF
+Il8xM/Euxi5FSFgiLBnaa41xRg9iTKZz+Sv6Wa6U3IEAL1dQ/gFkHhLf+tkYlfw
aUq4WNwDmjrMn7PZAR8mF/rFonJwKbWpTDU60DxN1vUu8mrKwHOJejp5bRlaXp2N
cha0SyLXp72QGerTl6pG8jfKkfGcBd+XqC7EPhqpxnu3Gdm7jXQtsyzRB9jMsnna
+GH5/p3OgUZRWjp20nJhN/Al7DLNBMQMWfzrOp3W2QcIN3ggHsHMH4i7PZwb4/WU
2kZLyA/5vAVdj1WamEzgfbNA4jcKA8L/l5QxeflwytKx4k7B3tgRUdd6eLgBIZ+B
8nCE2da86mhyOg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:03 2025 by rpki-client