Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File: JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier: HaJgkpGnN7G6UmGGlzJFMW46y+I/GOQRFLSTXdCvQD8=
Subject key identifier: 73:D1:F4:28:AD:EF:B6:CC:4B:6C:32:05:4B:E4:0E:77:E9:6C:1F:D0
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial: 01965500F1F60EBDE6D37A3B4D584ED82FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number: 0D9C
Signing time: Sun 20 Apr 2025 21:00:47 +0000
Manifest this update: Sun 20 Apr 2025 21:00:47 +0000
Manifest next update: Mon 21 Apr 2025 21:00:47 +0000
Files and hashes: 1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: ldfJKkI5XjCKy5jKaVheds5X+K9BRuF+B6qqYGoPf+g=)
2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:f1:f6:0e:bd:e6:d3:7a:3b:4d:58:4e:d8:2f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Validity
Not Before: Apr 20 21:00:47 2025 GMT
Not After : Apr 21 21:00:47 2025 GMT
Subject: CN=73d1f428adefb6cc4b6c32054be40e77e96c1fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:e3:53:29:cd:32:c2:f7:46:0a:58:25:a3:
5f:b1:ed:1b:3c:7b:de:d0:d1:96:a0:92:76:ae:ea:
a5:8f:0b:7c:09:d9:a9:76:ae:f3:29:bf:f1:ac:c4:
6c:b7:98:f7:5a:ad:2d:bd:88:8a:ae:cc:72:a0:e3:
62:dc:bb:31:56:71:6b:ed:c0:ca:40:6a:83:aa:26:
de:70:81:8c:c1:06:84:bd:4f:7a:70:22:a8:a7:92:
41:8a:fd:5a:76:16:18:fe:df:3c:73:a5:cf:07:27:
f6:b3:5b:90:0c:24:57:be:fb:bf:36:23:2a:e8:de:
76:39:f1:d8:bf:7b:c1:c2:73:35:17:7d:7d:b0:aa:
fd:d4:61:12:1a:be:8c:dc:b0:62:a0:ea:d9:28:86:
a8:02:53:5a:55:41:22:6f:fb:57:3d:4f:f9:c3:1c:
5c:e6:3d:58:0a:65:1c:77:ea:71:67:35:14:fe:b7:
c4:3b:89:73:57:0d:a6:19:56:ae:bb:6b:cf:ef:37:
ae:a6:dd:b4:46:e3:ec:85:3b:70:e0:31:4b:64:30:
a3:cf:9e:a5:66:40:17:bb:92:c7:45:3d:e7:4f:bd:
62:d3:bb:54:18:1d:31:69:1c:fc:a2:ad:ac:ef:9d:
c3:87:14:ef:fa:d5:a3:ac:7d:ce:34:6b:b2:54:63:
62:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D1:F4:28:AD:EF:B6:CC:4B:6C:32:05:4B:E4:0E:77:E9:6C:1F:D0
X509v3 Authority Key Identifier:
keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:07:5b:c2:7d:10:2b:9d:da:16:80:90:79:de:55:a4:cd:61:
12:d7:92:47:dd:9f:a5:1f:65:22:d9:f9:f6:87:ea:96:cf:6c:
56:89:2f:ec:aa:4b:a0:cf:4f:fe:59:32:d4:42:43:d8:73:41:
a6:07:fe:f7:94:7a:75:a1:bf:1e:e5:16:54:38:b0:50:48:76:
71:fc:9c:96:eb:f0:66:c7:7b:f5:f8:43:95:2a:44:4d:b4:7b:
fd:e1:87:f6:1b:75:e5:a7:ef:ea:a3:c2:bd:90:e7:36:04:2a:
38:91:66:65:87:f2:54:c7:3c:fe:04:09:01:82:e5:bd:28:a2:
a1:29:14:6e:e6:7d:4f:6f:b8:de:72:1c:53:70:07:b9:15:34:
ca:2b:63:ce:d8:7e:33:27:50:38:b1:b0:7c:53:02:ce:b1:98:
f6:04:0f:0c:a2:ff:a6:45:f0:20:70:47:fd:f0:c2:10:5b:68:
4f:15:64:02:23:c8:73:fa:33:a9:1f:95:d1:57:94:b8:c1:76:
c7:7e:24:98:6e:c7:a6:39:53:3a:d0:2d:a5:73:81:e6:8a:68:
a0:44:7d:70:03:d3:0b:23:d7:da:e4:96:51:32:d7:a3:ac:d1:
21:20:10:51:53:ac:4b:79:3a:69:c1:01:e7:8a:32:94:b9:d0:
0a:78:70:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVAPH2Dr3m03o7TVhO2C/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDgwZmU2Yjk3ZjUyMjg2N2MzN2E4YzUzZjBhNThlNzcw
OWZiYzMwHhcNMjUwNDIwMjEwMDQ3WhcNMjUwNDIxMjEwMDQ3WjAzMTEwLwYDVQQD
Eyg3M2QxZjQyOGFkZWZiNmNjNGI2YzMyMDU0YmU0MGU3N2U5NmMxZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VfjUynNMsL3RgpYJaNfse0bPHve
0NGWoJJ2ruqljwt8Cdmpdq7zKb/xrMRst5j3Wq0tvYiKrsxyoONi3LsxVnFr7cDK
QGqDqibecIGMwQaEvU96cCKop5JBiv1adhYY/t88c6XPByf2s1uQDCRXvvu/NiMq
6N52OfHYv3vBwnM1F319sKr91GESGr6M3LBioOrZKIaoAlNaVUEib/tXPU/5wxxc
5j1YCmUcd+pxZzUU/rfEO4lzVw2mGVauu2vP7zeupt20RuPshTtw4DFLZDCjz56l
ZkAXu5LHRT3nT71i07tUGB0xaRz8oq2s753DhxTv+tWjrH3ONGuyVGNi0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPR9Cit77bMS2wyBUvkDnfpbB/QMB8GA1UdIwQY
MBaAFCXYD+a5f1IoZ8N6jFPwpY53CfvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kMTI4NWItZjNlNi00YmNlLTliZmMt
ODNhZDMxYWE0NWJmLzEvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kMTI4NWItZjNlNi00YmNlLTliZmMtODNhZDMxYWE0NWJm
LzEvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgdbwn0Q
K53aFoCQed5VpM1hEteSR92fpR9lItn59ofqls9sVokv7KpLoM9P/lky1EJD2HNB
pgf+95R6daG/HuUWVDiwUEh2cfycluvwZsd79fhDlSpETbR7/eGH9ht15afv6qPC
vZDnNgQqOJFmZYfyVMc8/gQJAYLlvSiioSkUbuZ9T2+43nIcU3AHuRU0yitjzth+
MydQOLGwfFMCzrGY9gQPDKL/pkXwIHBH/fDCEFtoTxVkAiPIc/ozqR+V0VeUuMF2
x34kmG7HpjlTOtAtpXOB5opooER9cAPTCyPX2uSWUTLXo6zRISAQUVOsS3k6acEB
54oylLnQCnhwOQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:17 2025 by rpki-client