Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: Zx5m6HLv+3jtopraKGUm957GXleLXkVBuPhoMkJLJGo=
Subject key identifier: B4:0A:45:77:39:D3:47:4A:FF:0F:AD:5B:44:DD:05:23:C8:3E:60:0F
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 01965192121E082BD871DC41384FA6FF18F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 09F9
Signing time: Sun 20 Apr 2025 05:00:49 +0000
Manifest this update: Sun 20 Apr 2025 05:00:49 +0000
Manifest next update: Mon 21 Apr 2025 05:00:49 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: KuLtptM/TAYXJFe3azjjITqBRvBMjoSSXJ1j23B0aQM=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:92:12:1e:08:2b:d8:71:dc:41:38:4f:a6:ff:18:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Apr 20 05:00:49 2025 GMT
Not After : Apr 21 05:00:49 2025 GMT
Subject: CN=b40a457739d3474aff0fad5b44dd0523c83e600f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:c2:f4:3c:70:ca:e3:90:97:aa:4f:d8:67:
bc:d1:fb:33:c0:91:b2:a1:25:51:2f:68:a0:8c:97:
6f:61:02:47:29:df:3d:00:e7:fb:7c:58:4c:c1:2b:
42:a9:d2:52:79:2c:7b:16:0a:aa:c4:42:f7:68:39:
5a:fb:68:bc:d4:db:4e:09:57:42:16:af:68:32:f3:
3e:7d:de:49:59:30:e2:d4:98:32:bf:a9:b1:5a:5e:
c8:2f:cd:8a:2e:26:1d:4b:54:98:7c:c8:a2:33:d5:
ab:bb:1c:65:b4:d7:3e:b1:b5:47:29:1b:78:4c:33:
4d:87:fb:18:22:06:a9:78:ac:08:ab:77:01:bf:75:
44:cd:0c:b4:a1:b4:10:26:99:7e:01:5d:36:99:5d:
90:31:d8:87:29:48:76:ef:79:f9:29:eb:a7:be:02:
2d:4f:d6:4e:f2:51:ce:39:36:ce:ce:15:53:37:02:
17:b9:4e:3a:ae:ef:1e:7e:2e:7e:e2:ba:5e:76:b4:
65:40:a4:91:63:74:ce:bc:b2:66:ea:e1:f9:74:92:
f0:88:4b:cb:b2:8f:0e:4f:44:15:3a:e9:71:4b:5d:
3b:b2:d9:13:0e:a2:7e:e1:2b:1c:87:61:6b:29:c4:
1d:89:e6:f4:b6:6f:f7:dc:2a:1a:d9:ec:31:b4:55:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:45:77:39:D3:47:4A:FF:0F:AD:5B:44:DD:05:23:C8:3E:60:0F
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:37:f0:d0:a9:cd:8f:aa:d3:f0:70:1a:8c:8e:23:bd:dc:6d:
fa:8e:e7:36:45:3b:f5:c3:0f:29:d0:7a:6d:f7:ef:e9:e8:79:
c4:1e:aa:70:7c:b8:98:b5:d3:75:58:50:f0:97:cf:44:3c:d0:
1f:e3:e4:7f:2a:94:57:b5:5d:a5:ed:49:d8:7b:c3:e6:70:ec:
93:25:87:8d:a3:7b:7c:ab:13:d6:ec:6c:30:d3:e9:22:7e:44:
02:66:f9:06:59:c0:eb:60:07:8e:09:5b:0e:27:c4:c6:78:af:
70:cd:5d:41:bc:53:a3:bb:18:c3:ca:51:1d:ae:1e:f8:0b:ef:
f6:e3:df:46:d4:1e:7f:38:c2:5a:99:91:10:dd:64:9c:f4:9e:
02:73:d2:5f:8e:28:ee:5f:f2:a5:8f:12:fd:1d:82:56:23:3a:
45:f6:c7:aa:51:2c:a3:a1:04:66:ec:95:7b:7e:c9:60:cf:5f:
1d:26:a9:16:80:7e:b6:d2:40:a6:92:43:dc:a2:b3:32:c3:18:
4e:2b:93:62:ba:54:c8:a3:f1:e4:9e:f3:86:27:b7:79:c6:62:
09:b3:e5:21:58:0e:10:32:68:0a:b2:ff:d6:98:3e:f5:ad:a9:
b2:cd:1d:3b:3c:62:eb:e1:e0:0f:a6:7a:9d:f2:18:2b:10:36:
c6:16:3c:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRkhIeCCvYcdxBOE+m/xj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjg5M2VkZjMzMjA4ZDdhMmNmNjIyNjg2MTM3NjlmYjQ5
NjdjNjYwHhcNMjUwNDIwMDUwMDQ5WhcNMjUwNDIxMDUwMDQ5WjAzMTEwLwYDVQQD
EyhiNDBhNDU3NzM5ZDM0NzRhZmYwZmFkNWI0NGRkMDUyM2M4M2U2MDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsDC9DxwyuOQl6pP2Ge80fszwJGy
oSVRL2igjJdvYQJHKd89AOf7fFhMwStCqdJSeSx7FgqqxEL3aDla+2i81NtOCVdC
Fq9oMvM+fd5JWTDi1Jgyv6mxWl7IL82KLiYdS1SYfMiiM9WruxxltNc+sbVHKRt4
TDNNh/sYIgapeKwIq3cBv3VEzQy0obQQJpl+AV02mV2QMdiHKUh273n5KeunvgIt
T9ZO8lHOOTbOzhVTNwIXuU46ru8efi5+4rpedrRlQKSRY3TOvLJm6uH5dJLwiEvL
so8OT0QVOulxS107stkTDqJ+4Ssch2FrKcQdieb0tm/33Coa2ewxtFVx7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQKRXc500dK/w+tW0TdBSPIPmAPMB8GA1UdIwQY
MBaAFI34k+3zMgjXos9iJoYTdp+0lnxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYt
Zjg3Nzg3YjFkMDNjLzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYtZjg3Nzg3YjFkMDNj
LzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzfw0KnN
j6rT8HAajI4jvdxt+o7nNkU79cMPKdB6bffv6eh5xB6qcHy4mLXTdVhQ8JfPRDzQ
H+PkfyqUV7Vdpe1J2HvD5nDskyWHjaN7fKsT1uxsMNPpIn5EAmb5BlnA62AHjglb
DifExnivcM1dQbxTo7sYw8pRHa4e+Avv9uPfRtQefzjCWpmREN1knPSeAnPSX44o
7l/ypY8S/R2CViM6RfbHqlEso6EEZuyVe37JYM9fHSapFoB+ttJAppJD3KKzMsMY
TiuTYrpUyKPx5J7zhie3ecZiCbPlIVgOEDJoCrL/1pg+9a2pss0dOzxi6+HgD6Z6
nfIYKxA2xhY8IA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:45 2025 by rpki-client