Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File: jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier: iZo1Z22UFMsivEqlC8wAemPtT9dD27pGFoXfMFybHds=
Subject key identifier: EF:D8:4C:DF:C3:D1:AE:B8:7E:DD:3F:64:6D:5E:A4:3B:2D:03:A6:BB
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer: /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial: 019610FC0F7F1D921322DAE596C7EDADB32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number: 111F
Signing time: Mon 07 Apr 2025 16:01:16 +0000
Manifest this update: Mon 07 Apr 2025 16:01:16 +0000
Manifest next update: Tue 08 Apr 2025 16:01:16 +0000
Files and hashes: 1: 4-WfO6vi57usPTB05BV5GJ31rGM.roa (hash: VA1gjhdShA/9i1dmr35uQ85UKyhc+8PsGP0Wp/sm8Mw=)
2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: T4pS9Fc0qlFs/3qaG3LBC/xFvueet7ZtHIwT9tViWmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fc:0f:7f:1d:92:13:22:da:e5:96:c7:ed:ad:b3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Validity
Not Before: Apr 7 16:01:16 2025 GMT
Not After : Apr 8 16:01:16 2025 GMT
Subject: CN=efd84cdfc3d1aeb87edd3f646d5ea43b2d03a6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9d:52:10:ce:0e:5c:a4:f9:42:85:28:0f:69:
65:0c:83:bf:60:e5:3a:61:60:ae:96:3a:56:fd:1f:
d9:c6:20:1f:33:e9:0f:58:84:cf:db:31:ee:3b:71:
f7:c6:0d:19:31:dd:95:fa:c1:00:56:a5:42:a7:26:
7a:9e:3b:e8:57:d0:fc:e9:33:81:08:64:26:43:23:
20:a2:d5:28:fe:10:68:0f:13:ea:e5:d5:41:80:02:
31:17:3a:a5:79:5f:07:7e:80:21:83:c3:74:c8:5b:
c0:4f:30:76:79:e8:a1:2a:3a:45:e3:49:5a:40:0f:
10:ef:83:42:f8:85:02:8c:97:57:29:22:7c:96:27:
9b:09:e7:37:bb:22:3e:75:21:3a:95:a5:d4:bf:6c:
bb:d5:c0:3d:7e:6f:40:cf:c2:9e:0e:01:3b:37:20:
d7:77:2c:84:e8:4e:ba:f0:60:68:a6:95:61:c7:d1:
2d:39:f6:ee:01:0d:6e:62:6f:c5:d6:61:6a:c4:56:
ac:eb:18:39:92:76:df:e5:be:5e:5d:ca:69:cc:49:
ed:1a:d0:9c:47:cf:ec:da:e3:d6:5b:4b:d9:f3:e2:
ab:17:fc:c2:94:48:12:ea:51:f9:d4:97:7c:b5:13:
c7:75:c1:42:ce:13:34:29:a3:c1:b9:8b:19:e6:a2:
e3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D8:4C:DF:C3:D1:AE:B8:7E:DD:3F:64:6D:5E:A4:3B:2D:03:A6:BB
X509v3 Authority Key Identifier:
keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5d:13:2e:e8:9a:ac:f6:8e:6f:c6:db:1c:f4:6e:50:a7:3c:
28:85:20:89:86:72:d6:76:bb:2f:a3:c4:be:fb:26:08:40:fe:
42:f0:62:51:3a:fd:e6:e3:fc:51:f7:d9:95:4f:ed:cc:78:ee:
cb:e0:8f:86:e3:0f:34:c6:14:4a:29:18:f7:97:fe:20:0a:1b:
b3:72:1d:d5:c2:42:a7:f6:b4:b6:36:20:a3:7c:19:ee:b6:6e:
2e:46:ee:9b:9d:d5:d5:9f:39:01:ca:d9:f4:6d:9f:8a:14:d6:
ff:50:32:70:4b:ff:48:b8:7b:8d:19:3d:7f:39:20:b5:42:0d:
e8:56:e6:6e:56:a3:fc:43:4f:d6:0d:eb:9c:58:83:17:f4:bb:
52:1b:66:21:f1:48:85:2f:c0:03:5c:f9:ad:f3:e5:78:54:1d:
dd:f4:02:84:90:3e:04:99:33:f4:f4:de:61:72:9c:45:4a:85:
3d:bd:93:de:06:71:77:7d:81:95:a5:cc:21:41:f0:4f:64:d2:
b8:97:51:21:19:dd:46:94:e5:7a:2a:60:d5:c3:ef:45:be:ba:
c1:01:2f:9a:83:0f:fc:cf:35:2d:38:c7:7e:a0:d3:1f:48:b0:
29:2c:a5:3d:fc:8f:43:3e:b8:00:4e:5c:f7:ef:89:99:33:e1:
87:c1:86:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYQ/A9/HZITItrllsftrbMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOTgzYTA3ZTZkYjhiYzQ5NGM4OGRmYmQxMzE3YmE4MTBk
MmQyN2EwHhcNMjUwNDA3MTYwMTE2WhcNMjUwNDA4MTYwMTE2WjAzMTEwLwYDVQQD
EyhlZmQ4NGNkZmMzZDFhZWI4N2VkZDNmNjQ2ZDVlYTQzYjJkMDNhNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p1SEM4OXKT5QoUoD2llDIO/YOU6
YWCuljpW/R/ZxiAfM+kPWITP2zHuO3H3xg0ZMd2V+sEAVqVCpyZ6njvoV9D86TOB
CGQmQyMgotUo/hBoDxPq5dVBgAIxFzqleV8HfoAhg8N0yFvATzB2eeihKjpF40la
QA8Q74NC+IUCjJdXKSJ8liebCec3uyI+dSE6laXUv2y71cA9fm9Az8KeDgE7NyDX
dyyE6E668GBoppVhx9EtOfbuAQ1uYm/F1mFqxFas6xg5knbf5b5eXcppzEntGtCc
R8/s2uPWW0vZ8+KrF/zClEgS6lH51Jd8tRPHdcFCzhM0KaPBuYsZ5qLj0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/YTN/D0a64ft0/ZG1epDstA6a7MB8GA1UdIwQY
MBaAFI2YOgfm24vElMiN+9Exe6gQ0tJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zZjVlOGMtZDM3Ny00ZjQzLThmMjQt
ZGU5N2U5MTQxZmVkLzEvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zZjVlOGMtZDM3Ny00ZjQzLThmMjQtZGU5N2U5MTQxZmVk
LzEvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACV0TLuia
rPaOb8bbHPRuUKc8KIUgiYZy1na7L6PEvvsmCED+QvBiUTr95uP8UffZlU/tzHju
y+CPhuMPNMYUSikY95f+IAobs3Id1cJCp/a0tjYgo3wZ7rZuLkbum53V1Z85AcrZ
9G2fihTW/1AycEv/SLh7jRk9fzkgtUIN6Fbmblaj/ENP1g3rnFiDF/S7UhtmIfFI
hS/AA1z5rfPleFQd3fQChJA+BJkz9PTeYXKcRUqFPb2T3gZxd32BlaXMIUHwT2TS
uJdRIRndRpTleipg1cPvRb66wQEvmoMP/M81LTjHfqDTH0iwKSylPfyPQz64AE5c
9++JmTPhh8GGww==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:16:28 2025 by rpki-client