Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: rMimZuZ8IF4mrz1gnqHmWCCAMkyRZl7wLl2FsWSdNvk=
Subject key identifier: 3F:24:71:37:72:A5:24:A1:91:74:FC:16:69:51:DD:82:73:B2:06:4E
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 0194C42C4797D0396A3F65E6EC6CC56406BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: A4
Signing time: Sun 02 Feb 2025 01:00:23 +0000
Manifest this update: Sun 02 Feb 2025 01:00:23 +0000
Manifest next update: Mon 03 Feb 2025 01:00:23 +0000
Files and hashes: 1: NFgVIk3I0OB4aAQE--Yl_E4ZfQE.roa (hash: tZx/juHJjFsZtx/TprO+Ju+VpXMKoq0o38hFCwQ+O44=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: pUQLi8Bmosk55OmTM0p772Vtt6Z1zXIiHirbTgcJwNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:47:97:d0:39:6a:3f:65:e6:ec:6c:c5:64:06:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Feb 2 01:00:23 2025 GMT
Not After : Feb 3 01:00:23 2025 GMT
Subject: CN=3f24713772a524a19174fc166951dd8273b2064e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:a2:c8:dd:b8:e3:54:75:39:78:47:30:b7:
32:3f:9e:74:44:8b:bb:f0:5b:a8:cc:d7:1f:7c:b8:
ca:aa:b0:ba:39:e8:96:4f:ff:ab:21:38:5e:e5:05:
e4:7c:76:fa:60:f9:34:c6:fd:fa:9e:e1:89:b4:0f:
b6:6c:39:c2:5c:5f:15:3d:82:05:60:f1:f0:f3:55:
d8:09:91:6e:b3:1a:a3:b9:3d:a5:16:40:7b:5a:bb:
e2:90:b0:a7:38:7b:a9:1c:24:2a:86:94:e8:39:59:
d2:24:1c:2a:93:64:d6:9c:6c:6e:79:1a:22:c9:82:
f9:12:f1:74:45:71:8c:89:b7:56:67:20:ad:dd:42:
cf:ad:e3:df:02:1a:02:21:40:b2:b4:db:49:17:8c:
50:3b:0f:84:35:af:08:2f:40:80:2c:c2:5b:2a:7f:
f5:50:0b:58:12:7f:09:c3:89:d4:67:cf:44:04:1d:
e1:88:50:61:9f:2f:58:03:11:37:11:4a:e9:8f:4c:
65:79:64:bf:ce:0e:6c:32:78:6a:a9:22:4d:07:28:
4b:95:4d:4c:38:fa:2c:20:07:57:bd:0b:c9:2c:6a:
b2:13:d4:37:f9:7d:41:39:4a:c8:f7:39:ca:e3:0f:
41:bb:27:a9:85:44:30:93:a8:9a:84:c4:7b:80:eb:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:24:71:37:72:A5:24:A1:91:74:FC:16:69:51:DD:82:73:B2:06:4E
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f2:41:2e:ec:bd:0c:91:64:2a:51:1d:66:52:18:d4:b1:0e:
3c:50:7c:52:4d:3c:62:d2:12:99:ce:b8:5e:be:c5:a4:fc:39:
2d:5c:97:f3:ff:df:8d:b4:89:16:98:06:e3:96:d9:9f:d5:1e:
74:ee:81:c4:ef:71:fb:8d:32:51:83:52:c9:cd:e1:45:66:f8:
f1:a9:29:83:46:5b:b6:94:e4:73:b4:13:e2:ea:c6:d7:e4:eb:
2f:b7:22:d7:c2:a1:78:49:1c:0b:39:3d:99:d1:3d:b3:10:3d:
e9:6d:ac:c4:02:a7:4e:bb:b5:e8:a7:e7:b0:ea:77:7e:86:5e:
eb:7e:2f:8d:5c:d8:5e:3b:90:96:16:59:b6:f4:ad:ec:c2:83:
8b:de:a2:06:fd:14:1f:49:b7:e5:f2:46:2c:d6:fa:cb:05:47:
aa:09:22:98:82:30:58:9c:2b:f9:aa:d8:ed:ce:ad:8c:f1:6f:
30:3a:4a:e4:e7:6b:e6:7d:f7:01:e8:a0:9d:7b:0a:9e:05:28:
ce:da:df:e3:13:31:1e:06:94:27:00:76:eb:e1:39:b1:94:cd:
f5:67:96:7e:87:1d:95:84:5b:bc:59:e5:d2:d1:d6:32:a0:58:
41:9a:a0:92:4c:2d:40:31:52:30:bc:ab:fb:3e:e8:a7:7c:e6:
76:3e:dc:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELEeX0DlqP2Xm7GzFZAa7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzNiYjEyZjVmNjJhMTA4OGIwN2E5ODE2YzQ2MzA2ZDEx
NjFlMWQwHhcNMjUwMjAyMDEwMDIzWhcNMjUwMjAzMDEwMDIzWjAzMTEwLwYDVQQD
EygzZjI0NzEzNzcyYTUyNGExOTE3NGZjMTY2OTUxZGQ4MjczYjIwNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYqiyN2441R1OXhHMLcyP550RIu7
8FuozNcffLjKqrC6OeiWT/+rIThe5QXkfHb6YPk0xv36nuGJtA+2bDnCXF8VPYIF
YPHw81XYCZFusxqjuT2lFkB7WrvikLCnOHupHCQqhpToOVnSJBwqk2TWnGxueRoi
yYL5EvF0RXGMibdWZyCt3ULPrePfAhoCIUCytNtJF4xQOw+ENa8IL0CALMJbKn/1
UAtYEn8Jw4nUZ89EBB3hiFBhny9YAxE3EUrpj0xleWS/zg5sMnhqqSJNByhLlU1M
OPosIAdXvQvJLGqyE9Q3+X1BOUrI9znK4w9BuyephUQwk6iahMR7gOtAxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8kcTdypSShkXT8FmlR3YJzsgZOMB8GA1UdIwQY
MBaAFI7DuxL19ioQiLB6mBbEYwbRFh4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNPN0V2WDJLaENJc0hxWUZzUmpCdEVXSGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jMGU0ZDYtZTdkYy00MWI0LWI1NjMt
YmJjNzYxMjljODliLzEvanNPN0V2WDJLaENJc0hxWUZzUmpCdEVXSGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9jMGU0ZDYtZTdkYy00MWI0LWI1NjMtYmJjNzYxMjljODli
LzEvanNPN0V2WDJLaENJc0hxWUZzUmpCdEVXSGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfJBLuy9
DJFkKlEdZlIY1LEOPFB8Uk08YtISmc64Xr7FpPw5LVyX8//fjbSJFpgG45bZn9Ue
dO6BxO9x+40yUYNSyc3hRWb48akpg0ZbtpTkc7QT4urG1+TrL7ci18KheEkcCzk9
mdE9sxA96W2sxAKnTru16KfnsOp3foZe634vjVzYXjuQlhZZtvSt7MKDi96iBv0U
H0m35fJGLNb6ywVHqgkimIIwWJwr+arY7c6tjPFvMDpK5Odr5n33AeignXsKngUo
ztrf4xMxHgaUJwB26+E5sZTN9WeWfocdlYRbvFnl0tHWMqBYQZqgkkwtQDFSMLyr
+z7op3zmdj7cXQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:06 2025 by rpki-client