Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: nE0mkYgtFo516jEHR2D1tmo34J4qrW4vSAMwtplxmQo=
Subject key identifier: 7E:34:29:A8:41:86:65:76:13:23:59:2D:85:52:E0:93:0A:AC:F2:D1
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 019638E4F976B4842E693A76EE435FB2F8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 14F8
Signing time: Tue 15 Apr 2025 10:00:51 +0000
Manifest this update: Tue 15 Apr 2025 10:00:51 +0000
Manifest next update: Wed 16 Apr 2025 10:00:51 +0000
Files and hashes: 1: JXdwz8Kh5s8D4fZUiI7MP0vHa-g.roa (hash: aGy7W4wvxfuA3DMrWGQip2XzAfgBaKwU1Q707mDCSqY=)
2: W1sV2SXycnhhhyOvaUwWx8t1ifs.roa (hash: HcxcuKRHaI2x0IIJ12wkt3W53ioexeV4UAL0OsdORr4=)
3: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: +7BOIePiWYp9o/XaIRjSEhQsHUXRTlzuelr4iV8YXT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:e4:f9:76:b4:84:2e:69:3a:76:ee:43:5f:b2:f8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Apr 15 10:00:51 2025 GMT
Not After : Apr 16 10:00:51 2025 GMT
Subject: CN=7e3429a8418665761323592d8552e0930aacf2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:f2:db:77:c2:cd:30:1b:2b:a0:05:ad:b0:
9a:48:25:d8:18:3b:b6:4f:57:26:0e:7d:f8:d5:0a:
77:35:25:07:14:03:db:f0:d2:a3:f7:21:c8:71:5f:
b5:b7:5c:17:4f:07:dd:8a:28:d1:66:b6:18:5c:87:
5f:58:37:fa:bc:34:9a:71:21:b5:45:1c:4c:f6:88:
e7:2b:13:f9:d8:2c:d5:37:47:3f:3f:19:84:6a:13:
78:11:08:68:07:d2:40:04:45:e5:69:f2:aa:65:7a:
c8:62:fa:90:12:09:ed:aa:f5:44:ab:8b:d0:d3:34:
c6:0c:99:54:ef:27:d6:50:98:8d:c5:9e:3f:33:e1:
0d:ec:f1:29:77:40:23:80:df:76:fc:39:86:2a:7c:
39:0d:b1:77:86:46:cb:54:60:92:2b:33:c2:69:d3:
66:af:f6:25:5b:c4:1e:1e:3f:1b:7b:22:c4:a4:93:
c6:32:d1:d8:7b:7c:59:50:e9:6e:81:a7:34:ae:51:
d2:45:ee:dc:d9:c5:b4:4b:a0:09:69:0c:a9:6d:4e:
09:65:61:91:cc:f7:1b:21:b1:e0:50:ef:43:da:11:
cc:7a:38:de:46:83:9e:db:ec:32:5b:10:cf:62:52:
a9:64:76:2a:fe:72:b9:83:88:d6:da:de:c2:9d:c0:
3d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:34:29:A8:41:86:65:76:13:23:59:2D:85:52:E0:93:0A:AC:F2:D1
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:26:f9:5c:ae:da:c5:fd:87:cd:20:34:1d:79:1b:78:0c:4f:
24:ed:62:4a:f6:ce:85:7b:db:60:f0:d4:51:a0:7a:31:9f:ec:
4a:67:38:01:fb:25:9c:b1:6c:37:b7:bb:98:d6:1c:2c:ea:1f:
87:9a:7e:09:38:99:3d:5e:47:3e:88:04:fa:b3:95:e2:02:58:
af:fd:02:e1:37:02:80:54:1d:39:15:15:ef:4e:8c:f5:f7:c3:
9b:61:1a:8b:c3:96:42:7f:46:a2:d5:f1:09:df:cf:37:3c:12:
d7:0c:ec:ca:27:84:d7:94:1b:a5:45:e1:84:d7:d4:9a:cd:41:
7f:b0:eb:2a:87:72:72:71:f5:a2:bf:36:3b:57:1f:85:09:d2:
48:84:d3:f7:fb:21:35:57:f6:f0:2b:e8:7a:d1:7a:a3:34:ec:
ba:46:90:f5:0e:b6:de:88:04:ac:52:72:cb:a2:01:9a:58:6e:
0f:4b:1c:bb:22:71:ca:c6:6b:af:ba:b1:10:da:f5:6c:cb:f6:
e2:3b:1b:4b:69:19:87:6e:3b:11:0d:5e:86:fb:3b:4c:0f:4f:
43:aa:83:49:1a:24:0f:e8:c6:c7:a3:d6:7e:e1:06:c1:c4:2e:
db:89:5a:dd:73:55:09:0a:54:22:bf:5d:21:b4:bb:ea:7b:a6:
a4:03:e9:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY45Pl2tIQuaTp27kNfsvizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZWU3YTNhZDE1MmJiODcyNWE3ZGI5YmI3NTIwODA0YjZm
MTE1NWYwHhcNMjUwNDE1MTAwMDUxWhcNMjUwNDE2MTAwMDUxWjAzMTEwLwYDVQQD
Eyg3ZTM0MjlhODQxODY2NTc2MTMyMzU5MmQ4NTUyZTA5MzBhYWNmMmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusry23fCzTAbK6AFrbCaSCXYGDu2
T1cmDn341Qp3NSUHFAPb8NKj9yHIcV+1t1wXTwfdiijRZrYYXIdfWDf6vDSacSG1
RRxM9ojnKxP52CzVN0c/PxmEahN4EQhoB9JABEXlafKqZXrIYvqQEgntqvVEq4vQ
0zTGDJlU7yfWUJiNxZ4/M+EN7PEpd0AjgN92/DmGKnw5DbF3hkbLVGCSKzPCadNm
r/YlW8QeHj8beyLEpJPGMtHYe3xZUOlugac0rlHSRe7c2cW0S6AJaQypbU4JZWGR
zPcbIbHgUO9D2hHMejjeRoOe2+wyWxDPYlKpZHYq/nK5g4jW2t7CncA9bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH40KahBhmV2EyNZLYVS4JMKrPLRMB8GA1UdIwQY
MBaAFI7uejrRUruHJafbm7dSCAS28RVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanU1Nk90RlN1NGNscDl1YnQxSUlCTGJ4RlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83OTc5YjItYzNkOS00ZjMzLWEwOWYt
NDk1OTFhZmUxN2YwLzEvanU1Nk90RlN1NGNscDl1YnQxSUlCTGJ4RlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83OTc5YjItYzNkOS00ZjMzLWEwOWYtNDk1OTFhZmUxN2Yw
LzEvanU1Nk90RlN1NGNscDl1YnQxSUlCTGJ4RlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCb5XK7a
xf2HzSA0HXkbeAxPJO1iSvbOhXvbYPDUUaB6MZ/sSmc4AfslnLFsN7e7mNYcLOof
h5p+CTiZPV5HPogE+rOV4gJYr/0C4TcCgFQdORUV706M9ffDm2Eai8OWQn9GotXx
Cd/PNzwS1wzsyieE15QbpUXhhNfUms1Bf7DrKodycnH1or82O1cfhQnSSITT9/sh
NVf28CvoetF6ozTsukaQ9Q623ogErFJyy6IBmlhuD0scuyJxysZrr7qxENr1bMv2
4jsbS2kZh247EQ1ehvs7TA9PQ6qDSRokD+jGx6PWfuEGwcQu24la3XNVCQpUIr9d
IbS76numpAPpEw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 15:10:58 2025 by rpki-client