Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier: u618sqgPT4n0eyHPfxzeEhb3mgz+aVWGJXh9iZgs7/8=
Subject key identifier: 58:B3:CC:8A:80:9D:67:F8:6A:87:87:CA:06:CD:11:29:9D:1C:38:A7
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 01958CCE66C3FF6FC5F06F53563C3C1F6C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number: 14D5
Signing time: Thu 13 Mar 2025 00:01:31 +0000
Manifest this update: Thu 13 Mar 2025 00:01:31 +0000
Manifest next update: Fri 14 Mar 2025 00:01:31 +0000
Files and hashes: 1: J5hR6qbnwqDQorjgQKA4nS-MMic.roa (hash: K6vNh4g2g+c8tlGqdXpR0r75yDquSeuJCke6e2iRcws=)
2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: d0th6nyMJYh7rd/czrcKlJyosJTpbHN4clBYNWOE9I4=)
3: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=)
4: pkWwFHWljplPEjpAQkLOwXgSCt4.roa (hash: +whOS2AadbTPHnOXnw+btN+MISq5HGl1GuCFl5cL8RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:66:c3:ff:6f:c5:f0:6f:53:56:3c:3c:1f:6c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Mar 13 00:01:31 2025 GMT
Not After : Mar 14 00:01:31 2025 GMT
Subject: CN=58b3cc8a809d67f86a8787ca06cd11299d1c38a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:16:c7:a8:2a:f3:0c:77:86:1e:00:7f:55:
00:db:40:f7:c7:70:6a:f8:4a:62:c5:bb:23:98:dc:
57:a5:88:ee:e8:34:42:cf:5b:44:b7:f7:26:d9:be:
e2:a6:c7:c1:e8:92:f0:42:04:3e:a4:89:46:31:7c:
0a:51:d3:f6:b4:38:52:f4:f8:8a:de:a3:94:5a:92:
ac:a3:ac:ac:36:c8:c3:3d:52:1d:ff:77:e1:5e:79:
1a:6c:7c:39:ed:e4:2d:cb:0e:98:0d:26:5f:39:5a:
72:69:60:2e:e1:ac:87:82:1f:96:24:d1:04:77:c5:
b3:ec:84:6f:21:fa:f4:47:a1:40:77:ba:ce:3a:27:
b2:fd:86:67:23:1c:44:e9:f1:7f:78:08:b9:90:11:
93:88:d7:81:3c:ea:79:2c:75:8b:29:af:d4:35:12:
f4:5e:f0:80:2a:38:e1:34:6a:85:4e:75:69:79:58:
3e:da:aa:94:2d:42:07:bc:1f:9d:56:bc:91:d0:7d:
0e:59:ec:0b:25:e3:b8:db:71:1b:43:55:21:6b:af:
c6:03:20:f6:44:3a:8e:71:f0:8a:ce:ae:2c:5b:82:
3d:59:ff:50:05:15:81:7f:1f:76:f8:39:1d:b0:0c:
56:5f:14:22:97:f3:82:df:2a:e9:18:80:28:f1:0d:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B3:CC:8A:80:9D:67:F8:6A:87:87:CA:06:CD:11:29:9D:1C:38:A7
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e9:84:14:c6:3e:0a:5c:11:56:cc:44:50:72:a0:01:b1:05:
78:e7:2e:a2:ff:8e:44:69:f2:27:fc:ba:99:a0:5e:27:4c:35:
3f:39:17:0d:ce:a5:20:b4:33:86:a1:79:f6:12:00:72:da:13:
94:39:7d:2d:1d:ae:f8:77:d0:1d:e4:6c:42:fb:25:0e:6b:fe:
c0:34:c7:df:37:57:94:aa:40:47:97:6a:f2:e7:82:c5:dd:50:
ea:53:ec:74:c7:41:da:9e:77:1f:48:34:12:3e:fa:30:24:97:
9a:50:0a:50:b8:88:2e:f9:8e:e2:e1:1d:69:6c:2a:9d:c3:41:
ad:c6:9b:81:5b:ea:00:e6:25:6d:e0:75:2e:ce:16:43:d7:43:
5b:28:1d:a9:ee:3e:72:7f:7f:bd:a8:58:31:52:92:33:ee:2e:
3c:02:f8:4d:1c:2f:6f:70:ce:10:18:9d:3a:4e:cf:b0:5d:fc:
62:36:ad:05:39:78:ea:4d:0a:80:92:ef:b3:2c:4f:02:f3:33:
2c:a6:26:10:81:d5:6c:77:80:14:91:21:31:89:6b:d9:82:08:
d2:8c:e0:0f:28:dc:a0:97:cc:33:e1:b8:3f:12:3f:c4:e2:06:
21:ed:af:a8:72:e7:e1:a8:96:80:e1:2b:0c:5e:61:85:b1:39:
3d:64:59:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMzmbD/2/F8G9TVjw8H2wYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTQ3YzhiM2YzNzg1MGU5ZjkwNzQ5OTM4NDVjNGUwNjlm
OGVmZTIwHhcNMjUwMzEzMDAwMTMxWhcNMjUwMzE0MDAwMTMxWjAzMTEwLwYDVQQD
Eyg1OGIzY2M4YTgwOWQ2N2Y4NmE4Nzg3Y2EwNmNkMTEyOTlkMWMzOGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pUWx6gq8wx3hh4Af1UA20D3x3Bq
+EpixbsjmNxXpYju6DRCz1tEt/cm2b7ipsfB6JLwQgQ+pIlGMXwKUdP2tDhS9PiK
3qOUWpKso6ysNsjDPVId/3fhXnkabHw57eQtyw6YDSZfOVpyaWAu4ayHgh+WJNEE
d8Wz7IRvIfr0R6FAd7rOOiey/YZnIxxE6fF/eAi5kBGTiNeBPOp5LHWLKa/UNRL0
XvCAKjjhNGqFTnVpeVg+2qqULUIHvB+dVryR0H0OWewLJeO423EbQ1Uha6/GAyD2
RDqOcfCKzq4sW4I9Wf9QBRWBfx92+DkdsAxWXxQil/OC3yrpGIAo8Q3sxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFizzIqAnWf4aoeHygbNESmdHDinMB8GA1UdIwQY
MBaAFCQUfIs/N4UOn5B0mThFxOBp+O/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEt
YjM1MzViNGNhNTBmLzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEtYjM1MzViNGNhNTBm
LzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWemEFMY+
ClwRVsxEUHKgAbEFeOcuov+ORGnyJ/y6maBeJ0w1PzkXDc6lILQzhqF59hIActoT
lDl9LR2u+HfQHeRsQvslDmv+wDTH3zdXlKpAR5dq8ueCxd1Q6lPsdMdB2p53H0g0
Ej76MCSXmlAKULiILvmO4uEdaWwqncNBrcabgVvqAOYlbeB1Ls4WQ9dDWygdqe4+
cn9/vahYMVKSM+4uPAL4TRwvb3DOEBidOk7PsF38YjatBTl46k0KgJLvsyxPAvMz
LKYmEIHVbHeAFJEhMYlr2YII0ozgDyjcoJfMM+G4PxI/xOIGIe2vqHLn4aiWgOEr
DF5hhbE5PWRZ8g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:38 2025 by rpki-client