Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
File: jvzJdu-QODrOfwtOCeTYGe0Nm14.mft (raw, json)
Hash identifier: 4Xt7aG7nRMx9B1gVXVbV23MpIVbyfy+JTXCi4zM7wm8=
Subject key identifier: 16:7D:FC:6C:AD:2A:35:ED:DD:D5:0F:75:FE:8C:01:0A:2F:B1:6C:72
Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
Certificate issuer: /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Certificate serial: 019653EE2A035482E362D982F2DE7ABA16E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
Manifest number: 11E7
Signing time: Sun 20 Apr 2025 16:00:39 +0000
Manifest this update: Sun 20 Apr 2025 16:00:39 +0000
Manifest next update: Mon 21 Apr 2025 16:00:39 +0000
Files and hashes: 1: iZWDIUILuFWunNVYaqJwiBg2ZXU.roa (hash: BgNy6gZxNs+Fc3c2uaucV4KzH/PC8AB8rNSrrgEVedo=)
2: jvzJdu-QODrOfwtOCeTYGe0Nm14.crl (hash: STdN1ZJrrzT2brevOKMsHBgp364X8YKC40ZLxW+Wmwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:2a:03:54:82:e3:62:d9:82:f2:de:7a:ba:16:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Validity
Not Before: Apr 20 16:00:39 2025 GMT
Not After : Apr 21 16:00:39 2025 GMT
Subject: CN=167dfc6cad2a35edddd50f75fe8c010a2fb16c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:be:29:01:e3:d9:23:22:a5:8b:a4:de:e1:
0d:48:ad:bd:83:cb:11:df:1a:f9:0a:b1:3d:2d:10:
b9:b3:ad:51:e0:ab:21:e4:71:e8:16:27:90:33:3e:
1c:bf:39:98:8e:1c:2f:61:17:b5:d9:53:c6:70:65:
f2:ff:ff:c7:a9:5b:3e:a6:64:81:e1:5a:7d:fb:dd:
4e:ff:4f:77:75:7c:74:24:f8:87:cf:81:28:36:d9:
96:5a:ac:69:b5:94:89:4f:f3:6e:71:bc:aa:2a:35:
0d:5e:74:3c:50:d9:b4:b0:4a:56:50:12:5d:8d:17:
d6:b5:54:20:6e:ef:e6:aa:d6:7b:a4:66:ac:cc:12:
a4:54:13:9e:b0:39:8c:ea:76:d4:2a:69:a6:41:69:
42:d3:0a:f0:08:f0:1a:09:a6:74:50:df:78:66:8f:
88:0b:0b:f8:c4:82:7e:8e:67:c1:50:2a:ea:91:86:
09:54:56:e2:c6:b4:3c:18:3c:99:9a:fa:61:74:52:
90:b7:0a:4d:3e:3f:7f:91:a6:c5:42:0f:35:84:ce:
33:45:72:14:cd:46:41:e6:e6:bd:ab:e4:37:2b:f9:
52:a4:e4:b2:9a:ba:d3:18:5c:e0:0f:65:b1:76:37:
3b:19:55:b2:39:46:75:99:a6:88:bb:54:7a:a3:f5:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7D:FC:6C:AD:2A:35:ED:DD:D5:0F:75:FE:8C:01:0A:2F:B1:6C:72
X509v3 Authority Key Identifier:
keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:91:b4:f3:e5:7b:c6:eb:c0:d6:94:06:33:5d:94:5e:52:ef:
9d:a9:67:16:23:7f:02:e8:34:ee:9e:ba:00:98:f5:85:95:71:
31:07:7c:4a:f5:32:ed:27:26:6f:8d:e5:98:3e:f6:f2:ab:0d:
6d:61:5c:4b:a0:49:b5:89:ab:a5:33:17:52:ed:c7:5c:ac:38:
35:cc:04:77:b1:d6:10:aa:b9:ad:25:fe:ba:07:13:79:21:e3:
02:26:af:8c:65:cd:77:8e:a5:1d:5d:5b:49:5e:5b:69:34:f3:
2e:78:7b:4a:4c:bc:25:f6:ef:b4:b9:65:34:75:e5:52:6a:93:
7f:7f:07:04:34:7f:53:ca:60:99:1c:bd:f2:e9:a8:43:48:c2:
ef:2e:9b:24:49:93:d0:0b:13:5a:93:bf:68:aa:95:2d:1b:13:
7b:04:c3:96:0e:0e:57:c9:30:08:42:87:20:56:2a:3a:c1:58:
5a:77:d2:e9:ff:8b:0c:b3:70:be:e2:f2:2b:cb:3b:40:25:65:
2a:1b:f2:05:18:5f:30:95:a7:bc:85:c3:c6:06:94:a0:74:2a:
d7:64:9f:70:5a:c5:97:bb:5d:8a:4c:3d:23:b0:b4:72:a0:b6:
ec:62:82:62:ec:67:8e:ee:a3:1d:9d:d8:7a:e9:ee:95:a3:b4:
38:29:2e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZT7ioDVILjYtmC8t56uhblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZmNjOTc2ZWY5MDM4M2FjZTdmMGI0ZTA5ZTRkODE5ZWQw
ZDliNWUwHhcNMjUwNDIwMTYwMDM5WhcNMjUwNDIxMTYwMDM5WjAzMTEwLwYDVQQD
EygxNjdkZmM2Y2FkMmEzNWVkZGRkNTBmNzVmZThjMDEwYTJmYjE2YzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZe+KQHj2SMipYuk3uENSK29g8sR
3xr5CrE9LRC5s61R4Ksh5HHoFieQMz4cvzmYjhwvYRe12VPGcGXy///HqVs+pmSB
4Vp9+91O/093dXx0JPiHz4EoNtmWWqxptZSJT/NucbyqKjUNXnQ8UNm0sEpWUBJd
jRfWtVQgbu/mqtZ7pGaszBKkVBOesDmM6nbUKmmmQWlC0wrwCPAaCaZ0UN94Zo+I
Cwv4xIJ+jmfBUCrqkYYJVFbixrQ8GDyZmvphdFKQtwpNPj9/kabFQg81hM4zRXIU
zUZB5ua9q+Q3K/lSpOSymrrTGFzgD2Wxdjc7GVWyOUZ1maaIu1R6o/WGyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZ9/GytKjXt3dUPdf6MAQovsWxyMB8GA1UdIwQY
MBaAFI78yXbvkDg6zn8LTgnk2BntDZteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZ6SmR1LVFPRHJPZnd0T0NlVFlHZTBObTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni85ZTQ3NjQtNzIzNC00YmE0LThlOGEt
ZTI3NTRmNmZiNGM1LzEvanZ6SmR1LVFPRHJPZnd0T0NlVFlHZTBObTE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni85ZTQ3NjQtNzIzNC00YmE0LThlOGEtZTI3NTRmNmZiNGM1
LzEvanZ6SmR1LVFPRHJPZnd0T0NlVFlHZTBObTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZG08+V7
xuvA1pQGM12UXlLvnalnFiN/Aug07p66AJj1hZVxMQd8SvUy7Scmb43lmD728qsN
bWFcS6BJtYmrpTMXUu3HXKw4NcwEd7HWEKq5rSX+ugcTeSHjAiavjGXNd46lHV1b
SV5baTTzLnh7Sky8JfbvtLllNHXlUmqTf38HBDR/U8pgmRy98umoQ0jC7y6bJEmT
0AsTWpO/aKqVLRsTewTDlg4OV8kwCEKHIFYqOsFYWnfS6f+LDLNwvuLyK8s7QCVl
KhvyBRhfMJWnvIXDxgaUoHQq12SfcFrFl7tdikw9I7C0cqC27GKCYuxnju6jHZ3Y
eunulaO0OCku4Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:41 2025 by rpki-client