Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
File: jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json)
Hash identifier: HtrEllvr5ahHhJAXf9Kner4YqFyS/D7VY9cl9j716ew=
Subject key identifier: 3B:73:0B:7F:BD:0D:B9:FA:E4:4B:E0:B3:E2:F4:51:43:B4:C9:8E:41
Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
Certificate issuer: /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Certificate serial: 01964A461E8A558846E5D30654695472F571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
Manifest number: 1488
Signing time: Fri 18 Apr 2025 19:00:31 +0000
Manifest this update: Fri 18 Apr 2025 19:00:31 +0000
Manifest next update: Sat 19 Apr 2025 19:00:31 +0000
Files and hashes: 1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: 14smFhjfSvTp/76HqblPrIJE7oudC0UlzVQqFctqaqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:1e:8a:55:88:46:e5:d3:06:54:69:54:72:f5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Validity
Not Before: Apr 18 19:00:31 2025 GMT
Not After : Apr 19 19:00:31 2025 GMT
Subject: CN=3b730b7fbd0db9fae44be0b3e2f45143b4c98e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:29:5c:25:73:8f:ca:9d:65:22:bb:15:44:
4c:5c:2e:0b:4a:05:d4:98:eb:d7:e5:8b:10:0e:c5:
a1:6a:b5:77:dc:99:99:5a:da:39:25:12:a4:73:85:
b6:70:25:55:2e:ea:74:a3:2c:e7:fb:21:4e:11:a5:
76:cb:f8:c7:4a:83:dd:d6:46:2f:be:a5:3a:17:34:
56:1e:92:79:e5:f8:02:69:cf:bf:37:35:7a:52:78:
e4:ed:33:b9:9b:58:04:35:3b:27:da:21:e9:7f:6f:
1a:4f:bb:1c:67:9d:9e:1d:19:48:25:09:14:6b:20:
25:aa:e9:1b:40:53:33:e5:5d:bc:40:e7:fb:44:0a:
a7:6c:0c:16:54:01:13:ac:bf:86:60:70:a7:d6:72:
9a:b9:bf:95:ce:09:6b:d1:ca:e9:0e:36:6b:02:6d:
45:20:dd:c7:f6:04:9c:b4:19:be:1d:96:7d:97:24:
61:54:45:da:0e:84:53:67:99:16:dd:ab:83:e7:26:
e8:2a:7f:08:fe:5d:98:11:c8:7e:17:4e:e4:22:37:
51:c4:e9:5a:42:36:67:91:56:c3:30:b1:4c:0d:0e:
ba:9a:8d:03:c7:2c:9b:c2:bf:66:03:c1:0f:d4:94:
cc:92:3b:ff:ad:60:59:47:d8:ca:74:ef:18:11:11:
a7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:73:0B:7F:BD:0D:B9:FA:E4:4B:E0:B3:E2:F4:51:43:B4:C9:8E:41
X509v3 Authority Key Identifier:
keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:dc:0d:69:6b:e0:d7:bf:12:80:94:97:10:c7:96:93:f2:5b:
bd:2b:fd:ba:9c:79:64:c7:01:01:be:fc:6e:12:57:e0:4c:0b:
86:44:76:40:9d:56:b7:3d:c1:cb:3f:e9:f0:e0:b7:d7:5f:a9:
c4:80:7d:95:42:f2:6d:28:38:d7:7c:77:6a:41:f0:72:75:93:
70:ad:36:c7:5a:f9:0e:71:ea:98:ae:ae:7f:62:50:71:8f:7a:
1b:a7:71:9e:3c:56:84:78:c9:7a:66:54:6c:7c:34:62:a3:30:
86:f5:10:39:d4:03:a0:ca:20:db:7d:46:5d:cf:d3:8c:90:76:
9a:cf:0a:62:eb:ff:78:9b:30:f1:68:a4:d0:e3:a8:5a:8b:67:
0b:a5:f4:a1:70:63:bc:2a:82:d3:75:53:07:1c:c0:fd:f1:18:
de:e4:20:15:56:4c:8c:d7:35:a6:bc:d8:13:0b:0a:33:47:32:
fa:92:1d:01:20:1f:0b:5d:85:78:00:a0:41:32:85:5c:13:1a:
fd:77:2a:30:be:90:66:c1:17:23:f2:69:8c:63:7e:a0:cd:0d:
3d:54:79:4a:0c:98:a6:42:0d:a0:12:ad:d9:db:b3:0a:cb:68:
e2:87:98:b6:aa:07:0f:39:d0:a3:47:a9:2e:89:ee:8d:ff:bd:
2a:5e:c4:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKRh6KVYhG5dMGVGlUcvVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGU5NzdjMWNkMmE0ZDdlYzI5MGEwMWY5YmVjMzdkZThk
YzljZTIwHhcNMjUwNDE4MTkwMDMxWhcNMjUwNDE5MTkwMDMxWjAzMTEwLwYDVQQD
EygzYjczMGI3ZmJkMGRiOWZhZTQ0YmUwYjNlMmY0NTE0M2I0Yzk4ZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHspXCVzj8qdZSK7FURMXC4LSgXU
mOvX5YsQDsWharV33JmZWto5JRKkc4W2cCVVLup0oyzn+yFOEaV2y/jHSoPd1kYv
vqU6FzRWHpJ55fgCac+/NzV6Unjk7TO5m1gENTsn2iHpf28aT7scZ52eHRlIJQkU
ayAlqukbQFMz5V28QOf7RAqnbAwWVAETrL+GYHCn1nKaub+Vzglr0crpDjZrAm1F
IN3H9gSctBm+HZZ9lyRhVEXaDoRTZ5kW3auD5yboKn8I/l2YEch+F07kIjdRxOla
QjZnkVbDMLFMDQ66mo0Dxyybwr9mA8EP1JTMkjv/rWBZR9jKdO8YERGniwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtzC3+9Dbn65Evgs+L0UUO0yY5BMB8GA1UdIwQY
MBaAFI1Ol3wc0qTX7CkKAfm+w33o3JziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzQxZDQtOTk0OS00OTNhLWFkMDIt
M2UwNjMzMDJjYjA5LzEvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lMzQxZDQtOTk0OS00OTNhLWFkMDItM2UwNjMzMDJjYjA5
LzEvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9wNaWvg
178SgJSXEMeWk/JbvSv9upx5ZMcBAb78bhJX4EwLhkR2QJ1Wtz3Byz/p8OC311+p
xIB9lULybSg413x3akHwcnWTcK02x1r5DnHqmK6uf2JQcY96G6dxnjxWhHjJemZU
bHw0YqMwhvUQOdQDoMog231GXc/TjJB2ms8KYuv/eJsw8Wik0OOoWotnC6X0oXBj
vCqC03VTBxzA/fEY3uQgFVZMjNc1przYEwsKM0cy+pIdASAfC12FeACgQTKFXBMa
/XcqML6QZsEXI/JpjGN+oM0NPVR5SgyYpkINoBKt2duzCsto4oeYtqoHDznQo0ep
Lonujf+9Kl7Ebw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:25 2025 by rpki-client