
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: QCaFsaqnunEcEwDaO9N4zV0kPPUGqthUWG7vuTbWZME=
Subject key identifier: 63:1D:FE:17:A7:E8:42:ED:BB:56:FC:49:0E:44:9B:0D:85:B4:19:F6
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 01963540006A986ECE731E58F7FD39251FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 1481
Signing time: Mon 14 Apr 2025 17:01:48 +0000
Manifest this update: Mon 14 Apr 2025 17:01:48 +0000
Manifest next update: Tue 15 Apr 2025 17:01:48 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: yqPKqYt0dt1wxN0rclx0Z/UbSjWvh0FNF+Bmu4hYaMw=)
2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=)
3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 17:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:40:00:6a:98:6e:ce:73:1e:58:f7:fd:39:25:1f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Apr 14 17:01:48 2025 GMT
Not After : Apr 15 17:01:48 2025 GMT
Subject: CN=631dfe17a7e842edbb56fc490e449b0d85b419f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:a7:ec:bf:06:18:db:57:80:ba:11:5b:36:
aa:d4:34:23:5a:38:96:c5:a2:0f:bf:93:82:a8:b9:
d3:26:61:77:13:dd:9a:4c:17:b5:53:ee:96:e0:48:
3f:9d:36:0a:f7:8c:de:37:9c:6f:f5:f1:b4:10:d8:
17:8d:13:0b:c3:85:11:6c:d5:9a:52:dd:4a:bf:ba:
95:c7:32:1b:63:5c:75:b3:df:a6:a8:15:fe:3d:83:
9b:fe:a3:66:1e:e4:b8:fb:c4:db:e8:8a:9d:bf:98:
2f:0f:7c:51:7c:50:9e:6b:72:d5:10:af:53:95:ef:
ae:f1:a6:e4:3f:a8:2c:0b:7d:56:94:8d:db:a6:97:
59:b5:6d:a1:a6:42:0c:26:5b:67:fd:8e:57:a1:13:
5f:d0:e7:27:ff:5e:e6:3a:d8:09:5e:87:d7:bd:88:
ef:31:26:56:61:3e:19:b7:5b:fe:68:15:95:de:25:
d0:8e:19:bc:ee:34:74:c5:58:5e:af:f6:17:86:03:
39:86:4d:25:c0:83:22:5f:4c:a1:14:23:ca:10:04:
be:cb:63:f9:4c:c5:68:b6:56:e4:ac:1c:53:7c:53:
a6:9a:41:37:b1:01:68:53:2a:e3:94:87:1d:c1:5e:
b3:c1:23:49:5f:90:f1:87:93:ab:69:e9:24:38:c6:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1D:FE:17:A7:E8:42:ED:BB:56:FC:49:0E:44:9B:0D:85:B4:19:F6
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f8:ba:28:13:78:b2:9f:50:11:89:bf:e1:94:34:4c:7a:3a:54:
9f:d4:99:b6:9f:12:44:8b:28:f9:7c:20:a8:ff:df:16:e1:5b:
15:6a:d3:3e:6b:23:5e:f7:34:5c:51:f5:25:76:36:78:7a:27:
1d:62:6c:ec:42:29:83:61:a2:85:c5:40:d7:a9:7c:31:cb:51:
94:ea:98:39:6d:41:8d:48:a3:80:be:b6:0a:ef:d6:1e:c5:9a:
b8:62:cb:b2:8d:55:cd:99:0c:95:5a:ad:1e:71:33:cb:9c:25:
c1:db:aa:d3:18:d0:4c:d1:ea:44:d8:4e:96:a3:32:b9:7d:8a:
74:88:44:e9:e7:e3:ac:6c:b2:3e:86:26:63:b7:0f:5d:f0:38:
ec:11:28:f0:9b:e3:46:da:88:7c:ec:ef:92:e6:d1:26:e5:17:
ad:45:5e:96:39:e9:b8:90:e7:f6:e2:24:06:88:db:82:11:ec:
90:c5:c5:66:56:e7:0f:b7:69:3d:ae:5f:da:ff:e0:50:49:aa:
59:c1:d6:12:bf:56:3b:6f:e6:c2:75:db:fb:c2:d0:61:ff:22:
dc:7f:a7:21:1e:56:d1:bf:d4:a0:33:4d:7e:7c:2c:02:28:64:
99:43:2a:78:81:9e:d1:dd:82:00:d5:ac:86:63:98:88:d6:0b:
20:7c:6c:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY1QABqmG7Ocx5Y9/05JR/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzcwODA5OWY3YTIwNTU2NGI1ZjhlMDVkMjE3YmQyZmFl
NGRlODgwHhcNMjUwNDE0MTcwMTQ4WhcNMjUwNDE1MTcwMTQ4WjAzMTEwLwYDVQQD
Eyg2MzFkZmUxN2E3ZTg0MmVkYmI1NmZjNDkwZTQ0OWIwZDg1YjQxOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTmn7L8GGNtXgLoRWzaq1DQjWjiW
xaIPv5OCqLnTJmF3E92aTBe1U+6W4Eg/nTYK94zeN5xv9fG0ENgXjRMLw4URbNWa
Ut1Kv7qVxzIbY1x1s9+mqBX+PYOb/qNmHuS4+8Tb6Iqdv5gvD3xRfFCea3LVEK9T
le+u8abkP6gsC31WlI3bppdZtW2hpkIMJltn/Y5XoRNf0Ocn/17mOtgJXofXvYjv
MSZWYT4Zt1v+aBWV3iXQjhm87jR0xVher/YXhgM5hk0lwIMiX0yhFCPKEAS+y2P5
TMVotlbkrBxTfFOmmkE3sQFoUyrjlIcdwV6zwSNJX5Dxh5OraekkOMbPwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMd/hen6ELtu1b8SQ5Emw2FtBn2MB8GA1UdIwQY
MBaAFNI3CAmfeiBVZLX44F0he9L65N6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjIt
NWU5N2Y0YTUxMmU1LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8wMWI1YWYtYjc3Ny00YjU5LWE1YjItNWU5N2Y0YTUxMmU1
LzEvMGpjSUNaOTZJRlZrdGZqZ1hTRjcwdnJrM29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA+LooE3iy
n1ARib/hlDRMejpUn9SZtp8SRIso+XwgqP/fFuFbFWrTPmsjXvc0XFH1JXY2eHon
HWJs7EIpg2GihcVA16l8MctRlOqYOW1BjUijgL62Cu/WHsWauGLLso1VzZkMlVqt
HnEzy5wlwduq0xjQTNHqRNhOlqMyuX2KdIhE6efjrGyyPoYmY7cPXfA47BEo8Jvj
RtqIfOzvkubRJuUXrUVeljnpuJDn9uIkBojbghHskMXFZlbnD7dpPa5f2v/gUEmq
WcHWEr9WO2/mwnXb+8LQYf8i3H+nIR5W0b/UoDNNfnwsAihkmUMqeIGe0d2CANWs
hmOYiNYLIHxslw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 03:10:05 2025 by rpki-client