Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
File: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json)
Hash identifier: ey32n6n3m4ie3WY/m9xcdgrfc59+zu4ORvfEjcJkejQ=
Subject key identifier: 6E:FA:E8:2B:02:DD:BA:30:CD:F7:37:FA:FF:50:76:40:20:6E:F3:51
Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
Certificate issuer: /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Certificate serial: 01962B60E37DB8185CE48B5034EB46481E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
Manifest number: 14E9
Signing time: Sat 12 Apr 2025 19:01:32 +0000
Manifest this update: Sat 12 Apr 2025 19:01:32 +0000
Manifest next update: Sun 13 Apr 2025 19:01:32 +0000
Files and hashes: 1: SsNmEumrZoLnkUxPH11EPrhNmyk.roa (hash: 0HSYGP/bwpx8ANNjYNZbYCnBbaPMMqoPY47xOsCKXpw=)
2: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: kN6NMF9QlC/M/fSwcyNNweCyTRdTp2uj4SfbReY0PIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:60:e3:7d:b8:18:5c:e4:8b:50:34:eb:46:48:1e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Validity
Not Before: Apr 12 19:01:32 2025 GMT
Not After : Apr 13 19:01:32 2025 GMT
Subject: CN=6efae82b02ddba30cdf737faff507640206ef351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:41:46:8b:b7:80:6e:0a:82:4e:f5:15:52:
a3:6b:98:3c:ac:e1:67:5d:a3:73:04:3d:34:f9:0a:
10:d3:26:94:62:6b:df:f3:8c:f6:a5:f7:df:2e:49:
68:0b:6f:99:2d:b7:a9:d0:c9:5f:96:05:88:8b:cd:
1f:89:95:6d:77:93:55:f2:37:a4:7e:db:58:68:d7:
c3:20:52:1f:b4:fe:1f:45:cd:7c:d0:ae:ca:a2:d6:
3d:d2:df:0b:e3:b1:91:94:64:42:0c:d0:c9:93:6d:
40:b9:a7:e6:57:22:4e:5d:f9:a7:be:f4:10:95:da:
f4:b1:e3:b2:35:01:39:7c:34:a7:f3:28:20:40:b8:
23:fe:16:cc:34:ee:13:fa:f7:2e:c9:f9:24:48:e3:
40:e4:86:90:e0:71:0f:dd:3b:7f:d8:4b:38:56:eb:
a6:e4:32:f5:89:6a:54:dc:4f:12:ff:d4:4b:eb:d0:
4c:97:7f:a8:bf:30:25:5e:5e:22:23:a4:2c:bc:4b:
3a:db:7f:12:72:61:59:fb:0c:90:70:1b:b2:5e:e3:
59:48:1d:eb:05:c5:9d:3d:71:0c:54:68:48:a2:6b:
39:cc:d7:55:d4:12:a1:84:65:0c:fa:0d:55:8b:d3:
78:d8:9a:58:0f:02:15:a6:f9:78:3b:97:37:dd:36:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FA:E8:2B:02:DD:BA:30:CD:F7:37:FA:FF:50:76:40:20:6E:F3:51
X509v3 Authority Key Identifier:
keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bb:95:f3:99:26:54:ab:3b:24:65:25:6e:a8:f0:b5:fd:b4:
d7:fd:6a:34:9e:d1:aa:0e:39:33:33:00:6b:3c:1d:4e:96:38:
79:ef:b0:1f:03:14:4a:a1:1b:03:0d:02:ca:06:df:76:2a:86:
9a:fa:65:59:b4:3e:73:ca:94:2f:33:45:6d:96:28:43:86:f3:
d9:50:5b:03:7c:51:d0:38:9c:9b:31:31:fc:68:f9:91:61:44:
98:45:93:bc:a8:3d:60:3a:da:ab:cc:03:de:a6:c6:73:30:10:
4c:c9:22:f5:3c:41:89:4a:94:c6:00:7c:68:2c:5d:31:f8:0a:
b1:67:53:be:00:24:4a:10:39:69:64:f0:5c:df:c7:9f:51:76:
45:1d:c2:ce:d1:1d:cd:26:f9:ac:4e:68:3f:26:e7:23:34:ff:
10:e9:1a:2a:9a:b6:33:03:cf:0c:f2:49:9b:ae:1f:c2:8f:b1:
85:0b:f2:c1:bf:b8:db:42:a5:47:9b:df:a0:30:a9:45:5f:73:
69:c8:e2:8d:07:b6:d8:83:fe:5c:86:d0:a2:a9:a8:6e:ef:a9:
72:5a:e8:4d:21:02:f6:15:66:cd:35:01:8f:91:a4:14:59:17:
8d:0f:e1:a1:6c:ab:d9:d9:1b:67:55:4b:9f:c7:7b:a1:28:a5:
73:c7:db:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYrYON9uBhc5ItQNOtGSB4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2I0OTZlYTdjZjc2M2QwNTgzMDgzNzFlMWJmNjdlNTNi
YzdiYTMwHhcNMjUwNDEyMTkwMTMyWhcNMjUwNDEzMTkwMTMyWjAzMTEwLwYDVQQD
Eyg2ZWZhZTgyYjAyZGRiYTMwY2RmNzM3ZmFmZjUwNzY0MDIwNmVmMzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi5BRou3gG4Kgk71FVKja5g8rOFn
XaNzBD00+QoQ0yaUYmvf84z2pfffLkloC2+ZLbep0MlflgWIi80fiZVtd5NV8jek
fttYaNfDIFIftP4fRc180K7KotY90t8L47GRlGRCDNDJk21AuafmVyJOXfmnvvQQ
ldr0seOyNQE5fDSn8yggQLgj/hbMNO4T+vcuyfkkSONA5IaQ4HEP3Tt/2Es4Vuum
5DL1iWpU3E8S/9RL69BMl3+ovzAlXl4iI6QsvEs6238ScmFZ+wyQcBuyXuNZSB3r
BcWdPXEMVGhIoms5zNdV1BKhhGUM+g1Vi9N42JpYDwIVpvl4O5c33TYnzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG766CsC3bowzfc3+v9QdkAgbvNRMB8GA1UdIwQY
MBaAFI97SW6nz3Y9BYMINx4b9n5TvHujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUt
MjUxYjAxOWQ1MWE4LzEvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUtMjUxYjAxOWQ1MWE4
LzEvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLuV85km
VKs7JGUlbqjwtf201/1qNJ7Rqg45MzMAazwdTpY4ee+wHwMUSqEbAw0CygbfdiqG
mvplWbQ+c8qULzNFbZYoQ4bz2VBbA3xR0DicmzEx/Gj5kWFEmEWTvKg9YDraq8wD
3qbGczAQTMki9TxBiUqUxgB8aCxdMfgKsWdTvgAkShA5aWTwXN/Hn1F2RR3CztEd
zSb5rE5oPybnIzT/EOkaKpq2MwPPDPJJm64fwo+xhQvywb+420KlR5vfoDCpRV9z
acjijQe22IP+XIbQoqmobu+pclroTSEC9hVmzTUBj5GkFFkXjQ/hoWyr2dkbZ1VL
n8d7oSilc8fbfg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:44:37 2025 by rpki-client