Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
File: JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft (raw, json)
Hash identifier: yaC8rm57xaFGebA9MTqzZx3cmFYieCyemY+ct2aPssM=
Subject key identifier: 59:8A:52:49:E9:AF:1A:09:A5:8C:8B:A7:CD:9D:82:D7:1D:BE:F2:3F
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Certificate issuer: /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial: 0194C4D0D827ED498102827A250F3297FB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
Manifest number: 0F0F
Signing time: Sun 02 Feb 2025 04:00:08 +0000
Manifest this update: Sun 02 Feb 2025 04:00:08 +0000
Manifest next update: Mon 03 Feb 2025 04:00:08 +0000
Files and hashes: 1: 0UtAAwuWtglJuf67yxMctPzPq7I.roa (hash: noP3LEoxbmhVQLjGw4L6WYe7t8jyaSHbnOdoEAZKAiw=)
2: JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl (hash: Uf9tPWk/gMGoYeWrmolyDJFUHeWWfOLq7reVCvV5ufo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:d8:27:ed:49:81:02:82:7a:25:0f:32:97:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241ed58e426975e299875897caff9552640d9c09
Validity
Not Before: Feb 2 04:00:08 2025 GMT
Not After : Feb 3 04:00:08 2025 GMT
Subject: CN=598a5249e9af1a09a58c8ba7cd9d82d71dbef23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:b2:24:2b:54:d1:93:27:06:f7:a3:19:6b:
db:aa:e8:7f:03:63:85:e9:be:5f:02:7b:13:3f:8f:
d2:69:08:dc:85:88:76:1e:ea:3b:8a:ef:64:25:59:
04:b8:8e:c7:ed:a1:0d:c2:1a:bb:1f:f7:c8:cc:04:
64:18:5c:73:46:e4:64:48:b1:0a:ef:ee:52:bb:c7:
ab:d6:96:33:57:8d:f9:52:41:99:48:bf:1a:0d:8c:
55:3c:88:f6:3b:10:dc:de:b3:7d:52:18:b5:63:00:
73:b8:b8:a2:dc:17:27:06:41:30:77:a9:63:1a:ce:
6e:a9:b3:73:20:ee:5b:64:2b:2c:c8:29:87:a2:94:
9d:78:33:00:97:37:eb:3c:e3:01:4c:db:08:e1:16:
18:9d:aa:af:ab:b0:b8:70:c8:28:90:d8:15:79:6b:
ec:b4:55:c4:2c:25:bf:90:64:b2:fd:e9:39:a4:bd:
2c:21:6e:95:b5:ef:4a:dd:51:a5:a3:f1:98:b7:c5:
cf:ea:80:7d:22:d5:66:4d:9f:95:f1:cd:cc:43:24:
b1:a5:f4:36:e9:7c:1b:10:17:10:b1:e4:78:c0:9d:
aa:a5:dd:b2:d3:67:18:f0:18:c6:61:37:5b:65:b0:
a5:66:bc:25:37:4f:55:9c:82:c3:44:7b:28:3b:81:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8A:52:49:E9:AF:1A:09:A5:8C:8B:A7:CD:9D:82:D7:1D:BE:F2:3F
X509v3 Authority Key Identifier:
keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1d:50:8b:b6:23:01:4f:94:e9:95:b9:95:3a:f4:0b:55:92:
9f:51:38:f0:09:5d:01:4f:74:4f:54:e2:a0:1e:ff:f8:95:ab:
ea:f0:91:7d:61:1c:e7:07:bf:df:bf:65:b8:64:b5:d3:8f:10:
db:b7:d1:3c:b7:56:03:fe:a1:d7:7b:7d:a9:5b:cf:3d:f7:8b:
cf:66:de:ae:59:b6:81:ae:f6:64:41:c3:db:f7:c8:9d:da:0a:
df:34:80:78:f6:98:fe:b0:b0:fc:72:e7:b7:04:a6:59:60:72:
1f:5e:1e:db:bf:5a:78:e8:a3:fb:3c:b3:4b:a7:31:4f:65:c7:
f2:9e:20:f1:97:de:41:45:a0:9b:74:27:c0:37:37:9e:40:0a:
1e:68:69:f8:13:15:24:50:bd:9f:2b:9c:45:2e:8b:1c:32:4c:
4c:52:41:7c:cd:1d:fb:e7:a0:e5:ab:98:c0:55:75:a0:28:de:
61:08:7a:cc:f4:2e:e7:85:e4:61:a2:71:16:e5:1b:01:7a:a6:
fe:e9:9e:44:89:a0:e8:81:75:04:c8:0c:dd:f5:32:82:16:e8:
c5:7a:a8:19:3c:01:a3:86:a8:e5:d9:bd:d3:1c:4c:19:03:60:
cc:11:64:80:9f:3c:50:77:e6:1b:46:b8:17:90:f6:ef:ec:0d:
48:9a:2e:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0Ngn7UmBAoJ6JQ8yl/sLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MWVkNThlNDI2OTc1ZTI5OTg3NTg5N2NhZmY5NTUyNjQw
ZDljMDkwHhcNMjUwMjAyMDQwMDA4WhcNMjUwMjAzMDQwMDA4WjAzMTEwLwYDVQQD
Eyg1OThhNTI0OWU5YWYxYTA5YTU4YzhiYTdjZDlkODJkNzFkYmVmMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqGyJCtU0ZMnBvejGWvbquh/A2OF
6b5fAnsTP4/SaQjchYh2Huo7iu9kJVkEuI7H7aENwhq7H/fIzARkGFxzRuRkSLEK
7+5Su8er1pYzV435UkGZSL8aDYxVPIj2OxDc3rN9Uhi1YwBzuLii3BcnBkEwd6lj
Gs5uqbNzIO5bZCssyCmHopSdeDMAlzfrPOMBTNsI4RYYnaqvq7C4cMgokNgVeWvs
tFXELCW/kGSy/ek5pL0sIW6Vte9K3VGlo/GYt8XP6oB9ItVmTZ+V8c3MQySxpfQ2
6XwbEBcQseR4wJ2qpd2y02cY8BjGYTdbZbClZrwlN09VnILDRHsoO4EKzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmKUknprxoJpYyLp82dgtcdvvI/MB8GA1UdIwQY
MBaAFCQe1Y5CaXXimYdYl8r/lVJkDZwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkI3VmprSnBkZUtaaDFpWHl2LVZVbVFObkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mNWRjNjItYmU2OC00NjYzLTg0ZGUt
NTU0NWI4OTAxNDM4LzEvSkI3VmprSnBkZUtaaDFpWHl2LVZVbVFObkFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mNWRjNjItYmU2OC00NjYzLTg0ZGUtNTU0NWI4OTAxNDM4
LzEvSkI3VmprSnBkZUtaaDFpWHl2LVZVbVFObkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnB1Qi7Yj
AU+U6ZW5lTr0C1WSn1E48AldAU90T1TioB7/+JWr6vCRfWEc5we/379luGS1048Q
27fRPLdWA/6h13t9qVvPPfeLz2berlm2ga72ZEHD2/fIndoK3zSAePaY/rCw/HLn
twSmWWByH14e279aeOij+zyzS6cxT2XH8p4g8ZfeQUWgm3QnwDc3nkAKHmhp+BMV
JFC9nyucRS6LHDJMTFJBfM0d++eg5auYwFV1oCjeYQh6zPQu54XkYaJxFuUbAXqm
/umeRImg6IF1BMgM3fUyghboxXqoGTwBo4ao5dm90xxMGQNgzBFkgJ88UHfmG0a4
F5D27+wNSJou2A==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:32 2025 by rpki-client