Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
File: Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft (raw, json)
Hash identifier: fefGaLJiSLsAUQvaj3av7/yJwvmz0VxbbD0qp1GCu2w=
Subject key identifier: 01:0D:32:63:A3:59:1A:5C:2C:5A:AC:2A:84:42:3A:4F:83:BF:1B:22
Authority key identifier: 26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
Certificate issuer: /CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Certificate serial: 01960B67D7FCA0388914A94810F7A46376A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
Manifest number: 14D9
Signing time: Sun 06 Apr 2025 14:01:16 +0000
Manifest this update: Sun 06 Apr 2025 14:01:16 +0000
Manifest next update: Mon 07 Apr 2025 14:01:16 +0000
Files and hashes: 1: Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl (hash: lCmfhdJKn0GjUSfumhZqxZ1Q9lTYDCOXzJdjq61KZJM=)
2: JsFuF67j5QQhkERyLc9f-ELIcO4.roa (hash: Jr+i8Pi7L5/o/8dCQ8fKEW/EXyo8XR/bahrVO/hjd9g=)
3: k4opLHE596mDmmleF3IyTuI3JYo.roa (hash: FNLuUm2MqOPcBwdnPkx8HwmBWDjGjRFM7nXpuuRMMIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:67:d7:fc:a0:38:89:14:a9:48:10:f7:a4:63:76:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Validity
Not Before: Apr 6 14:01:16 2025 GMT
Not After : Apr 7 14:01:16 2025 GMT
Subject: CN=010d3263a3591a5c2c5aac2a84423a4f83bf1b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:d8:c2:c3:93:b3:db:86:d1:23:b1:45:5c:
f4:22:b0:cf:77:53:cd:b4:85:3a:e8:e1:74:e9:e6:
da:63:1a:dd:ab:05:2f:65:aa:f5:3e:6e:ef:cf:5c:
44:18:d4:fd:37:dd:20:11:9c:5a:98:13:b4:e6:72:
28:80:5f:84:f1:c8:96:4a:f0:0e:84:ff:c7:c7:54:
ef:ba:54:55:0a:6d:7a:28:35:33:78:1c:d6:24:15:
bc:d0:c4:6c:32:61:60:d7:91:ec:08:d1:63:ba:47:
3f:6c:3f:03:f0:b0:14:65:85:05:71:bd:63:b7:15:
75:8a:0b:97:40:df:2b:a1:f5:ed:e4:01:9d:6d:d9:
82:6b:d8:c0:c4:4b:7a:7d:8d:9b:3c:3e:89:2b:11:
4b:46:6c:68:07:a7:e3:85:1d:92:ce:ff:2c:c3:bb:
7b:45:79:39:b2:65:2e:32:e8:41:b6:cd:93:aa:08:
f9:88:b3:52:68:98:07:92:a9:ad:49:44:e4:cb:df:
36:fb:b5:4c:6e:82:c2:be:87:ce:85:67:97:db:e2:
40:d2:88:2e:13:06:18:b5:ed:73:ff:18:f0:d0:18:
19:6f:04:68:2c:58:a8:cf:55:e4:5f:9e:c9:9f:21:
49:2a:82:5a:d9:55:46:c8:8c:c6:54:ae:e3:0c:d5:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0D:32:63:A3:59:1A:5C:2C:5A:AC:2A:84:42:3A:4F:83:BF:1B:22
X509v3 Authority Key Identifier:
keyid:26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:44:af:c1:e8:d5:16:65:59:af:5a:7a:f1:4f:2a:10:1d:1f:
68:fc:18:15:62:c3:f4:29:02:b4:4d:cf:26:ae:f7:3b:fb:21:
a4:0e:29:1b:7d:c8:02:59:b9:6d:3e:fc:13:45:a6:b5:85:54:
1d:f0:48:c6:91:a3:5a:28:a2:4e:0f:91:14:d8:aa:3c:7d:63:
5b:95:a1:b2:21:32:9c:e5:36:bb:ef:14:25:23:8a:b3:68:69:
8b:a7:07:56:da:e9:c8:8b:c6:7c:82:20:c9:3a:c7:cd:64:e5:
cf:1c:d4:92:15:18:f8:99:9a:dc:21:d0:2a:aa:fd:ca:7a:b6:
59:52:e0:58:d0:3c:bd:ef:b7:34:94:8c:f1:62:33:23:fa:c1:
3a:44:d5:7b:53:2d:23:cf:2e:1c:53:ba:f7:58:fb:91:67:cb:
ff:18:8d:98:82:e0:0d:3a:4c:a4:7d:12:8d:39:f9:18:00:56:
1b:d5:4f:ac:f8:16:6b:94:59:4c:b3:fc:3a:d2:ae:0a:11:95:
71:c8:72:5c:58:aa:75:2f:07:59:fb:55:21:b3:6b:6f:e2:91:
26:f5:df:3f:d5:32:95:09:6f:b0:5d:c6:9e:ee:f9:d9:93:1e:
5c:ed:38:4b:82:41:c5:92:64:39:82:ee:cb:aa:0f:cb:a0:f8:
d9:17:d0:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYLZ9f8oDiJFKlIEPekY3akMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmFiOGM2OTE1ODUxZjRlZmQ0MDI3NGY3NDI1MDliN2Fj
N2UyMmUwHhcNMjUwNDA2MTQwMTE2WhcNMjUwNDA3MTQwMTE2WjAzMTEwLwYDVQQD
EygwMTBkMzI2M2EzNTkxYTVjMmM1YWFjMmE4NDQyM2E0ZjgzYmYxYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDbYwsOTs9uG0SOxRVz0IrDPd1PN
tIU66OF06ebaYxrdqwUvZar1Pm7vz1xEGNT9N90gEZxamBO05nIogF+E8ciWSvAO
hP/Hx1TvulRVCm16KDUzeBzWJBW80MRsMmFg15HsCNFjukc/bD8D8LAUZYUFcb1j
txV1iguXQN8rofXt5AGdbdmCa9jAxEt6fY2bPD6JKxFLRmxoB6fjhR2Szv8sw7t7
RXk5smUuMuhBts2Tqgj5iLNSaJgHkqmtSUTky982+7VMboLCvofOhWeX2+JA0ogu
EwYYte1z/xjw0BgZbwRoLFioz1XkX57JnyFJKoJa2VVGyIzGVK7jDNWGzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAENMmOjWRpcLFqsKoRCOk+DvxsiMB8GA1UdIwQY
MBaAFCa6uMaRWFH079QCdPdCUJt6x+IuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnJxNHhwRllVZlR2MUFKMDkwSlFtM3JINGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hMTY2YTctN2QwNy00MDlhLWFlZDAt
NjM5MzE1ZGNhNTgwLzEvSnJxNHhwRllVZlR2MUFKMDkwSlFtM3JINGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hMTY2YTctN2QwNy00MDlhLWFlZDAtNjM5MzE1ZGNhNTgw
LzEvSnJxNHhwRllVZlR2MUFKMDkwSlFtM3JINGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXESvwejV
FmVZr1p68U8qEB0faPwYFWLD9CkCtE3PJq73O/shpA4pG33IAlm5bT78E0WmtYVU
HfBIxpGjWiiiTg+RFNiqPH1jW5WhsiEynOU2u+8UJSOKs2hpi6cHVtrpyIvGfIIg
yTrHzWTlzxzUkhUY+Jma3CHQKqr9ynq2WVLgWNA8ve+3NJSM8WIzI/rBOkTVe1Mt
I88uHFO691j7kWfL/xiNmILgDTpMpH0SjTn5GABWG9VPrPgWa5RZTLP8OtKuChGV
cchyXFiqdS8HWftVIbNrb+KRJvXfP9UylQlvsF3Gnu752ZMeXO04S4JBxZJkOYLu
y6oPy6D42RfQog==
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:45:04 2025 by rpki-client