Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File: jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier: tueDF72Xgx/XcX8/tUmL5Nu8wd8d5JnDR9XVed5PgPQ=
Subject key identifier: 7B:2B:DA:DA:2D:09:76:80:2B:00:A1:D1:7A:A5:B0:EA:14:A8:85:77
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial: 01958C970F06347ACF8E3D274E158194180A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number: 0ABE
Signing time: Wed 12 Mar 2025 23:01:04 +0000
Manifest this update: Wed 12 Mar 2025 23:01:04 +0000
Manifest next update: Thu 13 Mar 2025 23:01:04 +0000
Files and hashes: 1: 2W4793sjPA5QMW_mlfEBfSoM2Is.roa (hash: xqASKHMV7rljYXyQYNSClQ6vovvo85JsyWpLw7N75ps=)
2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: mOdMckVGSEcRXshsFds+RWmwMedAyKk+8DiiBbbZZHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:0f:06:34:7a:cf:8e:3d:27:4e:15:81:94:18:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Validity
Not Before: Mar 12 23:01:04 2025 GMT
Not After : Mar 13 23:01:04 2025 GMT
Subject: CN=7b2bdada2d0976802b00a1d17aa5b0ea14a88577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:6a:70:28:e6:1c:a2:5f:25:24:7f:80:d0:
5e:73:82:90:64:01:5c:26:f9:0c:09:41:a9:ce:31:
e5:9d:b4:c9:ec:ae:60:94:f0:84:3a:1b:95:7a:d0:
92:f0:2d:34:b2:41:b1:14:cc:b5:46:29:b6:3c:80:
e2:98:03:af:cf:12:ea:7a:69:a5:f5:7e:e4:db:55:
15:72:38:d7:a4:a6:5c:0f:c2:b4:63:ef:38:a0:f7:
23:55:e7:b1:a8:7e:b9:28:62:17:fb:32:08:45:5e:
13:83:41:a8:c7:23:21:99:2f:58:7a:64:61:00:bb:
04:28:2a:fe:31:ab:7f:e8:5e:8f:28:b4:07:a7:5f:
cb:83:84:c0:f8:b9:41:fc:cb:c7:67:3f:d5:93:ac:
a4:cc:26:d6:b1:e3:9e:29:5f:02:68:b8:08:7e:99:
9d:f2:b8:89:60:6f:1b:aa:c2:e9:cf:b5:85:fc:76:
3c:55:ab:25:7f:df:db:90:5c:b7:ec:e0:b7:4b:55:
3a:e7:4c:90:9a:47:2d:23:01:5a:3f:33:e0:d6:13:
a8:a1:12:32:3e:fe:60:10:cf:ca:16:28:64:5b:73:
6c:92:40:64:e8:4d:5a:0c:cc:ed:d5:2c:ad:5e:73:
71:e7:f0:d5:a5:f5:aa:f8:ae:5b:0b:7c:7b:fe:e8:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:DA:DA:2D:09:76:80:2B:00:A1:D1:7A:A5:B0:EA:14:A8:85:77
X509v3 Authority Key Identifier:
keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:74:94:02:88:f8:e2:d1:2e:a2:1a:04:ce:16:f5:9e:d3:97:
1e:c9:88:2f:70:37:1e:12:95:3a:1c:72:50:08:20:ac:cb:f6:
43:1b:5b:55:b8:a3:ad:bc:ad:e8:c7:f5:dc:28:89:39:62:b1:
50:3a:cd:50:39:20:0e:48:09:44:a2:11:0e:c1:99:f0:12:62:
6e:43:76:9c:48:61:df:8b:6c:01:61:c5:44:50:92:b3:09:c1:
14:96:85:e9:aa:9a:a8:49:08:64:bf:5d:50:19:e6:f4:8a:fd:
33:0f:5f:0f:d6:3e:db:42:ad:96:29:01:59:1c:fb:3d:9d:29:
8e:f3:e2:9e:ec:a3:78:59:ec:55:4d:48:38:74:90:e0:dc:a2:
de:76:0f:7b:45:77:1b:33:97:7c:35:4a:ff:f5:d3:a2:26:19:
b9:70:8a:b3:5b:3c:67:1e:c6:77:4b:6d:db:e8:81:ad:15:75:
99:27:c8:09:05:4f:75:a0:20:2c:6f:c7:77:87:f4:e6:c5:43:
f8:69:66:ca:b3:89:13:80:d7:49:18:a6:75:22:57:2d:ae:e4:
cb:17:c7:61:6d:ee:e3:49:4c:8d:e9:d4:68:2a:44:ab:e9:50:
4a:8d:4f:38:7d:c6:1e:4c:ab:97:cb:40:37:ff:c6:93:4f:cc:
17:f0:fe:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMlw8GNHrPjj0nThWBlBgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlM2JmM2QwYjc2NWYyZWE0MjQ2MWQxMjM3Y2U3ZWFkZTQz
YjY4YWYwHhcNMjUwMzEyMjMwMTA0WhcNMjUwMzEzMjMwMTA0WjAzMTEwLwYDVQQD
Eyg3YjJiZGFkYTJkMDk3NjgwMmIwMGExZDE3YWE1YjBlYTE0YTg4NTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYZqcCjmHKJfJSR/gNBec4KQZAFc
JvkMCUGpzjHlnbTJ7K5glPCEOhuVetCS8C00skGxFMy1Rim2PIDimAOvzxLqemml
9X7k21UVcjjXpKZcD8K0Y+84oPcjVeexqH65KGIX+zIIRV4Tg0GoxyMhmS9YemRh
ALsEKCr+Mat/6F6PKLQHp1/Lg4TA+LlB/MvHZz/Vk6ykzCbWseOeKV8CaLgIfpmd
8riJYG8bqsLpz7WF/HY8Vaslf9/bkFy37OC3S1U650yQmkctIwFaPzPg1hOooRIy
Pv5gEM/KFihkW3NskkBk6E1aDMzt1SytXnNx5/DVpfWq+K5bC3x7/uhkIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsr2totCXaAKwCh0XqlsOoUqIV3MB8GA1UdIwQY
MBaAFI4789C3ZfLqQkYdEjfOfq3kO2ivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMt
NTE3NjZiOWNhODZmLzEvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82MTkyNTAtMTJlNy00ZWExLTkzOWMtNTE3NjZiOWNhODZm
LzEvamp2ejBMZGw4dXBDUmgwU044NS1yZVE3YUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3SUAoj4
4tEuohoEzhb1ntOXHsmIL3A3HhKVOhxyUAggrMv2QxtbVbijrbyt6Mf13CiJOWKx
UDrNUDkgDkgJRKIRDsGZ8BJibkN2nEhh34tsAWHFRFCSswnBFJaF6aqaqEkIZL9d
UBnm9Ir9Mw9fD9Y+20KtlikBWRz7PZ0pjvPinuyjeFnsVU1IOHSQ4Nyi3nYPe0V3
GzOXfDVK//XToiYZuXCKs1s8Zx7Gd0tt2+iBrRV1mSfICQVPdaAgLG/Hd4f05sVD
+GlmyrOJE4DXSRimdSJXLa7kyxfHYW3u40lMjenUaCpEq+lQSo1POH3GHkyrl8tA
N//Gk0/MF/D+8g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:14 2025 by rpki-client