Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier: Im6IbWlxqq4Gmnec7BnhcWvUP85YgpMUJnBSkoDWIL0=
Subject key identifier: 89:B4:57:46:4B:DD:76:8D:ED:87:C2:0B:E2:D0:0B:29:9F:FC:24:2F
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial: 0196466986E7C9DC2688218F07C7F4425F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number: 0217
Signing time: Fri 18 Apr 2025 01:00:42 +0000
Manifest this update: Fri 18 Apr 2025 01:00:42 +0000
Manifest next update: Sat 19 Apr 2025 01:00:42 +0000
Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: Ro6C94rLGdFX/kM1TjXCnp7xpj5YquXXAYkWqd4Bhe4=)
2: W33wCNoqVtC8nnysLfc50xpdZy0.roa (hash: ojPlZl8ybzd2ray8ATJYzRb0Yn01gVHIP83ulWRE+8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:86:e7:c9:dc:26:88:21:8f:07:c7:f4:42:5f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Validity
Not Before: Apr 18 01:00:42 2025 GMT
Not After : Apr 19 01:00:42 2025 GMT
Subject: CN=89b457464bdd768ded87c20be2d00b299ffc242f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:c0:14:41:34:4a:7e:81:bf:ad:65:f9:b7:
dd:04:f3:7c:da:ca:93:3d:3a:42:67:b7:dc:7c:63:
a1:5f:dc:0a:c9:b9:2a:1b:6f:79:83:4d:e8:7d:8b:
45:9f:39:15:77:60:7f:79:77:20:c7:d1:3b:89:54:
dc:34:7d:cf:a2:93:22:5d:fd:92:66:d1:04:a2:9b:
31:d2:88:fe:5b:3f:15:d1:2a:43:29:c2:aa:61:74:
21:4e:65:da:e9:69:39:3d:20:74:2b:dd:6c:15:45:
26:85:a7:e5:9b:28:d4:65:e0:5f:79:12:c2:21:48:
f6:1d:e4:55:5c:0b:7e:d2:b0:b2:d1:c6:45:a7:c3:
5a:eb:9a:38:8f:84:2d:a1:f7:e1:3f:0f:15:f4:52:
c0:cb:b0:64:3a:c4:58:a7:22:64:d2:d0:8d:80:d7:
24:33:4f:c0:a0:29:1d:5d:3e:71:0b:36:4c:30:39:
9d:fd:e4:97:e5:17:80:45:a3:33:8a:94:64:70:43:
ea:fe:87:e7:e2:98:46:f0:8e:61:ae:c1:3a:ba:f6:
6a:3e:c3:23:4d:e4:bf:ed:54:a6:57:05:aa:66:3a:
df:59:3c:34:8f:b4:34:3c:e4:07:27:71:4a:d1:26:
84:61:e7:11:03:a5:e9:05:96:95:5d:66:5f:83:44:
ef:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B4:57:46:4B:DD:76:8D:ED:87:C2:0B:E2:D0:0B:29:9F:FC:24:2F
X509v3 Authority Key Identifier:
keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1c:ab:5c:43:8e:47:2e:ef:af:11:d7:a0:e7:7a:16:65:7f:
cc:42:33:6b:81:57:47:88:d5:e9:c8:9c:a3:a7:21:23:db:0a:
0b:5b:42:97:50:8c:d8:e3:b6:27:ec:ae:03:f0:fe:3a:eb:fe:
e9:8a:f1:e4:ab:35:97:37:17:44:c8:35:96:56:a3:7c:67:88:
01:73:bb:ac:79:bd:9d:ad:f3:4c:d9:37:6b:88:fe:00:4f:00:
3b:d7:c5:cb:73:c5:b7:db:11:ec:7f:e9:d5:bb:51:a6:95:6f:
21:cd:66:5e:a2:5d:e9:2f:33:7f:db:33:77:63:e0:2b:9a:cb:
9c:67:d8:93:1d:3d:ed:5f:ca:4e:c2:80:3f:47:2a:5f:ae:c6:
90:31:98:f8:d7:c4:b9:20:cf:99:65:60:66:d6:fa:eb:f6:a1:
d7:73:fe:25:7e:eb:37:12:8c:46:34:e9:7e:a2:39:6c:6a:46:
99:08:eb:ca:c7:55:91:f2:56:d4:d2:25:44:2b:ed:2f:f6:7e:
28:54:dd:ce:48:3e:a0:42:78:a3:5a:ef:ba:f3:36:4e:aa:fd:
95:29:3f:e9:1e:cc:56:de:f2:a8:b6:64:9c:9c:15:a5:5d:15:
ae:3c:b7:47:fa:14:03:73:38:19:8e:3a:75:7c:fc:03:33:a8:
1c:e6:45:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZGaYbnydwmiCGPB8f0Ql89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDYyNzdlOWQ1ZTVmMGE3M2RhMzcxZjMwYjVhYzc5OTky
NzkyM2EwHhcNMjUwNDE4MDEwMDQyWhcNMjUwNDE5MDEwMDQyWjAzMTEwLwYDVQQD
Eyg4OWI0NTc0NjRiZGQ3NjhkZWQ4N2MyMGJlMmQwMGIyOTlmZmMyNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZjAFEE0Sn6Bv61l+bfdBPN82sqT
PTpCZ7fcfGOhX9wKybkqG295g03ofYtFnzkVd2B/eXcgx9E7iVTcNH3PopMiXf2S
ZtEEopsx0oj+Wz8V0SpDKcKqYXQhTmXa6Wk5PSB0K91sFUUmhaflmyjUZeBfeRLC
IUj2HeRVXAt+0rCy0cZFp8Na65o4j4QtoffhPw8V9FLAy7BkOsRYpyJk0tCNgNck
M0/AoCkdXT5xCzZMMDmd/eSX5ReARaMzipRkcEPq/ofn4phG8I5hrsE6uvZqPsMj
TeS/7VSmVwWqZjrfWTw0j7Q0POQHJ3FK0SaEYecRA6XpBZaVXWZfg0Tv6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIm0V0ZL3XaN7YfCC+LQCymf/CQvMB8GA1UdIwQY
MBaAFCXWJ36dXl8Kc9o3HzC1rHmZJ5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUt
NDcxOTI3YTgzY2UzLzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUtNDcxOTI3YTgzY2Uz
LzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxyrXEOO
Ry7vrxHXoOd6FmV/zEIza4FXR4jV6cico6chI9sKC1tCl1CM2OO2J+yuA/D+Ouv+
6Yrx5Ks1lzcXRMg1llajfGeIAXO7rHm9na3zTNk3a4j+AE8AO9fFy3PFt9sR7H/p
1btRppVvIc1mXqJd6S8zf9szd2PgK5rLnGfYkx097V/KTsKAP0cqX67GkDGY+NfE
uSDPmWVgZtb66/ah13P+JX7rNxKMRjTpfqI5bGpGmQjrysdVkfJW1NIlRCvtL/Z+
KFTdzkg+oEJ4o1rvuvM2Tqr9lSk/6R7MVt7yqLZknJwVpV0Vrjy3R/oUA3M4GY46
dXz8AzOoHOZFug==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:51:22 2025 by rpki-client