Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
File: jY9-tNJUj5zL88s45wKhkMEXQvU.mft (raw, json)
Hash identifier: 5i3oATxZ8hZxhJQ3PyN3izEY7GOz4F4NdXjd2qBW4cA=
Subject key identifier: 90:B7:72:C0:75:10:37:36:CF:0D:84:FD:A4:88:FB:F5:84:95:D6:2F
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial: 01964B8F75B6841D58F4CBC393AED062C5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 01:00:14 +0000
Manifest this update: Sat 19 Apr 2025 01:00:14 +0000
Manifest next update: Sun 20 Apr 2025 01:00:14 +0000
Files and hashes: 1: JoTSZ8E8fkiS501xBbOY7pc3jM8.roa (hash: JoNzI4ZspphrrJoARed2dcoamemKZ5kg0l+d/5sdlcM=)
2: SqfaLa-P64VMRzLu45OzZ7O-myU.roa (hash: 8RixXJbGYWZA//tOAjP6K4ex9vVhr1Y3178psfUi1TM=)
3: jY9-tNJUj5zL88s45wKhkMEXQvU.crl (hash: 9XssaJ+hae69OMvNB27bLJrbt3CnCuyacQk5jaZpfWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:75:b6:84:1d:58:f4:cb:c3:93:ae:d0:62:c5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Validity
Not Before: Apr 19 01:00:14 2025 GMT
Not After : Apr 20 01:00:14 2025 GMT
Subject: CN=90b772c075103736cf0d84fda488fbf58495d62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:e6:14:03:08:f6:09:b1:f9:65:88:b8:13:
f5:89:9e:0d:64:a3:48:30:cd:80:ad:dd:1b:45:cf:
a2:eb:b9:fb:51:17:bb:28:96:23:f8:83:54:10:a2:
49:56:8f:60:89:9b:55:27:59:11:97:fa:f4:b3:64:
a6:89:5d:9e:9a:14:20:08:e5:14:bb:fc:f1:57:a9:
f2:a1:ed:11:4e:23:d7:ec:87:83:2e:33:ea:a2:9b:
61:88:11:c6:b4:1d:7b:24:24:23:f9:d0:2e:67:84:
e2:be:ee:80:d5:14:f2:ba:f5:68:7d:bc:59:3a:15:
c5:12:6b:61:c4:8e:c2:b9:72:66:a0:b5:b6:28:38:
7a:bb:fb:02:db:5e:f5:a8:9b:e6:a5:b9:de:ea:98:
b7:a3:2a:70:18:d0:ce:b6:e4:34:03:30:bf:a0:0d:
dc:ec:4a:b1:e5:68:ed:87:db:b8:ce:04:8b:24:6b:
9c:fd:f3:bf:20:ab:0b:23:84:6d:aa:54:b9:0d:17:
fc:e0:68:e4:12:f4:ab:f6:29:88:d8:f4:27:58:6d:
48:7a:47:57:5e:2c:33:3b:09:d4:e5:5c:87:bf:e2:
77:fb:10:62:92:36:3b:9e:c2:93:47:99:79:2b:e6:
26:a7:b2:dc:6e:18:0c:9b:47:60:2c:60:27:5c:1a:
d4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B7:72:C0:75:10:37:36:CF:0D:84:FD:A4:88:FB:F5:84:95:D6:2F
X509v3 Authority Key Identifier:
keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cc:81:34:bb:99:47:62:66:50:60:88:dc:37:61:a3:77:55:
5f:a1:f3:ce:b6:5a:7c:0d:8f:34:1c:4b:64:ba:d7:88:3f:20:
49:71:18:6d:87:1b:f8:5e:fd:4f:79:68:6c:e2:de:16:d7:85:
79:fe:4c:05:23:8c:43:e8:6b:5f:1a:87:dd:5e:33:a5:e3:8c:
76:04:02:2a:d5:81:85:4b:85:0a:20:b2:43:5e:07:e6:d8:e3:
83:a0:bd:8a:13:65:9d:0e:df:c0:6c:9e:1d:01:69:66:a2:c4:
8d:67:b0:ad:17:fe:63:08:44:3e:bc:ef:01:59:92:01:36:d4:
e2:f0:db:d3:22:69:e3:3d:4a:01:dc:db:b0:11:0f:1d:fe:94:
cb:ce:c2:d1:52:81:99:1e:09:a1:0f:66:54:e8:d0:e7:32:53:
56:55:da:87:f7:6a:25:52:1f:38:4e:bd:96:9c:1b:33:70:56:
b5:f9:e7:f8:6f:20:b0:bf:d0:e2:f0:07:e0:62:40:e8:81:f3:
23:1a:f4:9d:d4:aa:24:e0:f8:84:2f:75:ec:24:5c:20:4e:c2:
34:ac:2b:b9:68:cc:d7:fd:dd:06:a0:15:a1:84:18:24:f6:5c:
df:0e:b6:19:22:04:5a:ff:30:e5:50:ba:59:50:43:c4:11:a7:
43:e3:e7:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLj3W2hB1Y9MvDk67QYsW0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOGY3ZWI0ZDI1NDhmOWNjYmYzY2IzOGU3MDJhMTkwYzEx
NzQyZjUwHhcNMjUwNDE5MDEwMDE0WhcNMjUwNDIwMDEwMDE0WjAzMTEwLwYDVQQD
Eyg5MGI3NzJjMDc1MTAzNzM2Y2YwZDg0ZmRhNDg4ZmJmNTg0OTVkNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzenmFAMI9gmx+WWIuBP1iZ4NZKNI
MM2Ard0bRc+i67n7URe7KJYj+INUEKJJVo9giZtVJ1kRl/r0s2SmiV2emhQgCOUU
u/zxV6nyoe0RTiPX7IeDLjPqopthiBHGtB17JCQj+dAuZ4Tivu6A1RTyuvVofbxZ
OhXFEmthxI7CuXJmoLW2KDh6u/sC2171qJvmpbne6pi3oypwGNDOtuQ0AzC/oA3c
7Eqx5Wjth9u4zgSLJGuc/fO/IKsLI4RtqlS5DRf84GjkEvSr9imI2PQnWG1IekdX
XiwzOwnU5VyHv+J3+xBikjY7nsKTR5l5K+Ymp7LcbhgMm0dgLGAnXBrUdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJC3csB1EDc2zw2E/aSI+/WEldYvMB8GA1UdIwQY
MBaAFI2PfrTSVI+cy/PLOOcCoZDBF0L1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYt
YWZkMjcyZGQwZmI1LzEvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYtYWZkMjcyZGQwZmI1
LzEvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMyBNLuZ
R2JmUGCI3Ddho3dVX6HzzrZafA2PNBxLZLrXiD8gSXEYbYcb+F79T3lobOLeFteF
ef5MBSOMQ+hrXxqH3V4zpeOMdgQCKtWBhUuFCiCyQ14H5tjjg6C9ihNlnQ7fwGye
HQFpZqLEjWewrRf+YwhEPrzvAVmSATbU4vDb0yJp4z1KAdzbsBEPHf6Uy87C0VKB
mR4JoQ9mVOjQ5zJTVlXah/dqJVIfOE69lpwbM3BWtfnn+G8gsL/Q4vAH4GJA6IHz
Ixr0ndSqJOD4hC917CRcIE7CNKwruWjM1/3dBqAVoYQYJPZc3w62GSIEWv8w5VC6
WVBDxBGnQ+PnUw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:34:48 2025 by rpki-client