Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: HO9QqJ489qOmXG0l6l9ad/fIziJeoPI9dAjg51uFNUc=
Subject key identifier: B3:74:DE:A0:24:02:7B:32:AC:0E:81:4A:7B:60:FD:4C:D7:88:C5:6A
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 01964D7E2D517191555550DC5CE640AC98B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 10:00:36 +0000
Manifest this update: Sat 19 Apr 2025 10:00:36 +0000
Manifest next update: Sun 20 Apr 2025 10:00:36 +0000
Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: ZW+xhCXwYBvYvAXQZextiauobh9qTKjiu+I75PyOVcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:2d:51:71:91:55:55:50:dc:5c:e6:40:ac:98:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Apr 19 10:00:36 2025 GMT
Not After : Apr 20 10:00:36 2025 GMT
Subject: CN=b374dea024027b32ac0e814a7b60fd4cd788c56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:de:b7:63:c7:d9:35:ea:a8:95:8f:f6:c3:
c6:8e:03:3d:09:89:e3:d1:14:4d:45:60:5f:5d:58:
c5:b3:70:08:91:72:7f:15:c1:c7:9f:87:0e:c3:c2:
1c:e3:4d:ce:0a:78:9b:07:fd:c5:4a:a3:d7:13:2f:
12:01:b8:1c:fa:da:2a:6a:30:65:35:8c:ea:60:4d:
7b:e8:dd:b3:da:56:e5:90:50:2c:f6:8d:cd:e6:fe:
29:af:4b:a7:a2:fb:5e:9b:dd:44:28:a5:90:6a:69:
37:79:29:9d:6f:81:f8:aa:06:74:99:89:11:26:92:
6e:74:d2:8d:df:ce:0a:5f:60:54:05:e3:be:2e:f9:
92:93:f7:07:19:03:ae:f4:53:c5:18:5c:21:2b:39:
44:15:43:a8:15:a1:b8:44:1f:93:e3:15:d4:fa:3a:
06:36:fe:44:d7:2a:55:55:b9:a9:90:6e:5d:75:cb:
5d:bf:ad:a5:9b:8d:0a:fc:36:1a:77:5b:b8:b8:b5:
6e:65:9a:0e:90:b6:3d:e5:0e:a5:70:8a:3f:f6:25:
b0:f7:3f:ed:9f:26:74:73:6a:4e:b1:c0:16:1d:72:
64:93:90:08:a7:3b:78:87:3d:1c:cd:f8:31:31:75:
ed:91:48:e9:fc:e8:72:01:73:dd:ee:03:87:ec:b9:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:74:DE:A0:24:02:7B:32:AC:0E:81:4A:7B:60:FD:4C:D7:88:C5:6A
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:44:3b:42:8d:a1:3f:19:a5:74:2c:12:10:0c:fa:57:21:f3:
3e:99:e2:7f:43:73:67:f0:86:29:c9:aa:b0:8f:9a:10:ba:54:
86:7f:c5:c8:99:eb:3f:cf:90:69:6a:29:7f:3a:53:b9:60:6a:
13:c9:91:bb:94:d1:d9:e2:98:7c:72:90:dc:94:9d:e8:2a:ef:
da:16:93:7b:f8:5c:22:f0:e7:b5:ef:cb:91:f7:87:3b:87:02:
05:84:82:f6:c7:8f:c1:e0:80:27:c1:6d:00:57:a4:37:e9:ac:
62:5b:80:da:9b:2c:36:1e:d8:19:1a:30:56:0a:e5:ed:a7:38:
e8:a2:29:7e:09:0d:18:74:65:7c:96:d2:c5:9e:b1:d9:39:d8:
d5:58:ca:8e:48:12:bb:15:1e:2f:ca:7a:07:8a:eb:db:fb:4b:
16:6c:d2:82:7e:09:23:28:de:7e:58:43:ce:b7:7c:2e:8f:5f:
a4:d2:9e:9a:2f:3e:80:e1:58:a5:e3:88:56:03:3f:6b:68:99:
80:33:12:fb:45:34:1a:01:c6:bc:2d:bf:9d:9f:f0:f2:a3:ad:
1a:0f:9e:35:45:cc:0c:81:f2:42:94:43:db:8b:2c:12:b2:60:
33:1d:59:9b:57:ec:91:37:25:60:53:ed:b3:94:c3:a7:5e:20:
d0:3b:8a:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfi1RcZFVVVDcXOZArJi3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDc1ZjVhZDllY2NmZjY5YzM1YTYzMGRjZmYyYzVhNjYz
ZmQ3Y2YwHhcNMjUwNDE5MTAwMDM2WhcNMjUwNDIwMTAwMDM2WjAzMTEwLwYDVQQD
EyhiMzc0ZGVhMDI0MDI3YjMyYWMwZTgxNGE3YjYwZmQ0Y2Q3ODhjNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumHet2PH2TXqqJWP9sPGjgM9CYnj
0RRNRWBfXVjFs3AIkXJ/FcHHn4cOw8Ic403OCnibB/3FSqPXEy8SAbgc+toqajBl
NYzqYE176N2z2lblkFAs9o3N5v4pr0unovtem91EKKWQamk3eSmdb4H4qgZ0mYkR
JpJudNKN384KX2BUBeO+LvmSk/cHGQOu9FPFGFwhKzlEFUOoFaG4RB+T4xXU+joG
Nv5E1ypVVbmpkG5ddctdv62lm40K/DYad1u4uLVuZZoOkLY95Q6lcIo/9iWw9z/t
nyZ0c2pOscAWHXJkk5AIpzt4hz0czfgxMXXtkUjp/OhyAXPd7gOH7Lnm+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN03qAkAnsyrA6BSntg/UzXiMVqMB8GA1UdIwQY
MBaAFCVHX1rZ7M/2nDWmMNz/LFpmP9fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEt
NGQ0NmM2YTcwMTBhLzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEtNGQ0NmM2YTcwMTBh
LzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0Q7Qo2h
PxmldCwSEAz6VyHzPpnif0NzZ/CGKcmqsI+aELpUhn/FyJnrP8+QaWopfzpTuWBq
E8mRu5TR2eKYfHKQ3JSd6Crv2haTe/hcIvDnte/LkfeHO4cCBYSC9sePweCAJ8Ft
AFekN+msYluA2pssNh7YGRowVgrl7ac46KIpfgkNGHRlfJbSxZ6x2TnY1VjKjkgS
uxUeL8p6B4rr2/tLFmzSgn4JIyjeflhDzrd8Lo9fpNKemi8+gOFYpeOIVgM/a2iZ
gDMS+0U0GgHGvC2/nZ/w8qOtGg+eNUXMDIHyQpRD24ssErJgMx1Zm1fskTclYFPt
s5TDp14g0DuKaA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:35 2025 by rpki-client