Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
File: jWLdvflYu0uYPali7PA76u441Ek.mft (raw, json)
Hash identifier: Xy9IUpdHgGpGZNoiTpjwEsL71XI7BmY0dnSbELbJP7k=
Subject key identifier: 53:5C:52:AC:EA:00:43:CB:2B:7F:06:3D:76:46:74:86:A0:BF:F8:2E
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Certificate issuer: /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial: 019655DCA0514D69FF756C7FF0AC47DCEE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 01:00:44 +0000
Manifest this update: Mon 21 Apr 2025 01:00:44 +0000
Manifest next update: Tue 22 Apr 2025 01:00:44 +0000
Files and hashes: 1: jWLdvflYu0uYPali7PA76u441Ek.crl (hash: R0zDMcKVN2fu4PV+A7i6qiS4JpSGdEM4+uHnz9KrcAg=)
2: s34MRUBBXAv4etz_rjf1ivNvKl8.roa (hash: 0Raiu10MwJUtSZKphwMI3EWBFXIoAne26av2cOWMQx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:a0:51:4d:69:ff:75:6c:7f:f0:ac:47:dc:ee:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Validity
Not Before: Apr 21 01:00:44 2025 GMT
Not After : Apr 22 01:00:44 2025 GMT
Subject: CN=535c52acea0043cb2b7f063d76467486a0bff82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:77:22:79:1d:93:d5:a8:f0:32:2d:07:97:
09:85:34:a3:a2:c2:0c:8c:ee:93:31:c5:b8:be:70:
8a:f0:3f:34:2a:94:7f:88:e5:dd:8e:78:8c:d0:96:
5b:59:68:14:f4:95:7d:75:c2:6e:93:09:59:a6:29:
25:c3:4a:0a:08:fc:29:0b:17:a2:52:d3:ed:04:30:
81:a6:09:b9:5a:a1:be:58:ad:20:d3:0a:5f:f7:01:
c0:6c:5a:0d:83:b6:ad:70:26:53:2b:96:d4:54:90:
74:c8:96:71:0c:58:a0:34:90:67:d5:3c:cb:ca:1b:
26:34:ff:41:0a:35:bd:31:1d:6c:a2:e9:88:ca:b1:
d8:aa:24:1b:48:6b:37:05:31:81:07:d8:3b:34:7b:
83:1c:a4:83:d8:b2:0a:40:a0:10:fc:40:38:e6:60:
fc:af:b6:5d:f4:d8:bb:9f:88:72:7b:50:09:52:a2:
9a:28:3e:88:6d:8d:34:3b:09:4b:6c:2a:7f:d6:c3:
55:04:a8:bc:e0:86:39:e7:2f:6c:31:61:a1:65:9e:
bc:a5:68:bc:23:41:ff:09:18:c3:43:2d:f6:5d:1a:
ec:50:e2:aa:39:c2:7d:27:ed:45:0a:91:41:4b:81:
df:5e:1d:73:d9:07:f5:e2:5f:88:e8:9e:73:51:8d:
77:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5C:52:AC:EA:00:43:CB:2B:7F:06:3D:76:46:74:86:A0:BF:F8:2E
X509v3 Authority Key Identifier:
keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:8f:11:2b:46:9c:2b:b5:3d:cb:cd:bb:a9:e0:6d:55:47:6e:
8d:1e:a0:b7:80:54:94:15:82:62:57:ba:46:2a:3e:a5:23:c9:
36:d4:25:ce:29:ee:e3:24:e1:ea:30:b6:1b:48:f7:14:b5:99:
5c:ed:d8:3b:a4:bb:d0:a3:29:78:f4:04:30:ae:64:5f:3b:58:
67:8c:53:3b:6d:24:c5:6b:27:95:0f:61:60:af:df:d9:0d:24:
5e:1b:07:e2:f9:3c:e5:da:86:7a:7a:1a:69:24:ee:38:09:9f:
2d:60:ef:13:ad:9f:63:98:98:44:98:0e:5a:f6:fb:ff:74:7e:
5e:33:14:5e:cf:ed:d6:73:de:d9:83:01:d7:60:39:33:88:7b:
9e:31:d7:8f:43:58:86:98:a7:83:96:55:1c:84:b1:73:79:36:
ff:7b:93:b6:a5:20:d1:09:cb:b6:9e:79:af:55:20:12:e6:81:
74:27:0d:12:ea:87:69:3a:33:52:fe:bc:c0:87:62:e6:fc:ad:
29:4c:2f:27:56:b0:d6:32:fb:a9:ab:6f:ec:49:a8:38:cb:ad:
14:c2:0b:43:0d:e6:2f:93:32:82:af:44:d7:3f:ed:d3:6d:9d:
10:c5:90:10:c4:4d:f6:9f:ec:e5:48:a6:6a:06:97:fa:de:c2:
d4:b3:04:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3KBRTWn/dWx/8KxH3O6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjJkZGJkZjk1OGJiNGI5ODNkYTk2MmVjZjAzYmVhZWUz
OGQ0NDkwHhcNMjUwNDIxMDEwMDQ0WhcNMjUwNDIyMDEwMDQ0WjAzMTEwLwYDVQQD
Eyg1MzVjNTJhY2VhMDA0M2NiMmI3ZjA2M2Q3NjQ2NzQ4NmEwYmZmODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUh3Inkdk9Wo8DItB5cJhTSjosIM
jO6TMcW4vnCK8D80KpR/iOXdjniM0JZbWWgU9JV9dcJukwlZpiklw0oKCPwpCxei
UtPtBDCBpgm5WqG+WK0g0wpf9wHAbFoNg7atcCZTK5bUVJB0yJZxDFigNJBn1TzL
yhsmNP9BCjW9MR1soumIyrHYqiQbSGs3BTGBB9g7NHuDHKSD2LIKQKAQ/EA45mD8
r7Zd9Ni7n4hye1AJUqKaKD6IbY00OwlLbCp/1sNVBKi84IY55y9sMWGhZZ68pWi8
I0H/CRjDQy32XRrsUOKqOcJ9J+1FCpFBS4HfXh1z2Qf14l+I6J5zUY135wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNcUqzqAEPLK38GPXZGdIagv/guMB8GA1UdIwQY
MBaAFI1i3b35WLtLmD2pYuzwO+ruONRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldMZHZmbFl1MHVZUGFsaTdQQTc2dTQ0MUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iMjBiZWMtMzg0Ni00YmQxLTgxMmYt
MDZlMDBhM2VhMDYyLzEvaldMZHZmbFl1MHVZUGFsaTdQQTc2dTQ0MUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iMjBiZWMtMzg0Ni00YmQxLTgxMmYtMDZlMDBhM2VhMDYy
LzEvaldMZHZmbFl1MHVZUGFsaTdQQTc2dTQ0MUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4Y8RK0ac
K7U9y827qeBtVUdujR6gt4BUlBWCYle6Rio+pSPJNtQlzinu4yTh6jC2G0j3FLWZ
XO3YO6S70KMpePQEMK5kXztYZ4xTO20kxWsnlQ9hYK/f2Q0kXhsH4vk85dqGenoa
aSTuOAmfLWDvE62fY5iYRJgOWvb7/3R+XjMUXs/t1nPe2YMB12A5M4h7njHXj0NY
hping5ZVHISxc3k2/3uTtqUg0QnLtp55r1UgEuaBdCcNEuqHaTozUv68wIdi5vyt
KUwvJ1aw1jL7qatv7EmoOMutFMILQw3mL5Mygq9E1z/t022dEMWQEMRN9p/s5Uim
agaX+t7C1LME2g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:04:03 2025 by rpki-client