Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
File: jdADrwR3TdPjlzBJeYmjoXFRYlI.mft (raw, json)
Hash identifier: RJ9+0Iu0lbGn3Vu5qsi7IcdYyTxarqVXGedlVNJNB5A=
Subject key identifier: 71:BD:EF:30:C9:75:24:C2:FD:18:72:F5:D8:69:CF:98:DE:D3:25:E5
Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Certificate issuer: /CN=8dd003af04774dd3e39730497989a3a171516252
Certificate serial: 01951134D4AC37748C5D7B94F409BBC652F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
Manifest number: 0EFC
Signing time: Mon 17 Feb 2025 00:00:29 +0000
Manifest this update: Mon 17 Feb 2025 00:00:29 +0000
Manifest next update: Tue 18 Feb 2025 00:00:29 +0000
Files and hashes: 1: jdADrwR3TdPjlzBJeYmjoXFRYlI.crl (hash: jTHWjB9AlYM6XQ0BTSk4XiQSI8fK4G9NL6zbFDL7sR8=)
2: qyViuV165L-xE7uYQ2sF7wlGYBU.roa (hash: 0KdoKDI8ZdUz1uym9xGUbcM+qAI/3kuRuqeRZbordfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:d4:ac:37:74:8c:5d:7b:94:f4:09:bb:c6:52:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd003af04774dd3e39730497989a3a171516252
Validity
Not Before: Feb 17 00:00:29 2025 GMT
Not After : Feb 18 00:00:29 2025 GMT
Subject: CN=71bdef30c97524c2fd1872f5d869cf98ded325e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:40:2b:a4:e8:6f:88:6e:a7:c4:f4:f8:55:
22:a7:9e:0d:c6:ff:49:91:d3:25:78:7d:6d:1f:93:
bd:84:21:75:e0:1d:9b:f0:a8:76:cc:5e:8b:87:5e:
6f:e0:18:95:ed:2f:7f:44:d9:d0:9d:73:6f:8d:49:
d3:2f:36:0a:3d:34:1d:ea:35:11:35:f4:92:70:19:
7d:98:c1:0d:24:8f:4b:36:9d:a2:b6:4e:66:27:2b:
99:c5:05:82:2e:63:32:cf:88:d2:c6:02:12:ce:c0:
b2:64:3b:90:23:d9:89:b0:ab:67:9b:74:0c:f9:ca:
c5:9f:7c:ac:fc:89:14:55:13:86:c7:e8:ff:1f:b6:
47:d5:55:35:59:f5:d8:c2:56:88:3e:05:cb:37:23:
39:c9:1f:a1:f7:dc:ab:27:d3:89:84:77:5b:23:11:
ed:74:6a:05:d7:6e:5c:ab:f8:77:ad:1a:46:2d:30:
2d:46:ef:ef:1e:07:a9:5f:32:3e:d3:bf:56:e6:94:
89:cb:87:4e:5e:8e:7e:ad:75:62:db:0a:10:f9:bd:
91:4f:f9:dd:e0:71:d1:6a:d5:e0:06:92:4e:8e:4e:
5e:43:58:7b:10:4e:1a:1b:23:11:9c:84:c7:ef:c3:
8f:6b:5a:92:f8:58:46:be:68:ee:de:97:ec:95:e5:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BD:EF:30:C9:75:24:C2:FD:18:72:F5:D8:69:CF:98:DE:D3:25:E5
X509v3 Authority Key Identifier:
keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:55:ed:38:ac:17:72:7b:9d:e6:02:11:61:0a:56:4a:99:9f:
60:ee:16:c3:f4:15:bf:31:e4:99:98:fa:cc:85:a9:dc:bb:2c:
ad:a2:18:46:5b:e0:4b:8e:f0:ca:a2:57:4b:0b:a0:6a:41:04:
ea:84:6b:01:5a:da:25:9c:83:cd:1f:2e:48:66:7b:8d:c0:51:
52:7e:a1:f1:a7:2a:37:f9:51:13:93:ad:86:e5:08:22:37:04:
ee:d7:2b:c3:4e:11:3f:e2:d3:65:29:f8:5c:06:23:e3:ad:76:
f5:07:2e:d6:45:f9:7a:81:af:b6:35:e3:0e:ec:84:20:9b:1b:
19:cb:5c:91:95:da:a0:19:82:f9:ca:4a:51:35:5f:78:90:65:
f1:88:df:da:94:c9:05:05:02:ee:be:85:27:12:b4:7b:00:e9:
b4:d1:38:86:c5:00:67:44:74:79:0c:e0:76:95:0d:66:a6:f2:
73:d6:e9:be:8d:9c:cf:0a:37:3e:3b:43:1e:e5:ed:d3:8f:d4:
cf:a4:f8:c2:60:28:15:22:79:de:06:dd:ec:33:a1:71:3a:cf:
94:eb:b4:1e:6a:58:7b:86:e8:07:86:5f:d7:42:f8:99:6a:e5:
35:cb:18:3a:5d:e5:76:aa:32:fa:8d:ad:37:be:fa:b0:fe:df:
2f:b0:95:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNNSsN3SMXXuU9Am7xlLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZDAwM2FmMDQ3NzRkZDNlMzk3MzA0OTc5ODlhM2ExNzE1
MTYyNTIwHhcNMjUwMjE3MDAwMDI5WhcNMjUwMjE4MDAwMDI5WjAzMTEwLwYDVQQD
Eyg3MWJkZWYzMGM5NzUyNGMyZmQxODcyZjVkODY5Y2Y5OGRlZDMyNWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvZAK6Tob4hup8T0+FUip54Nxv9J
kdMleH1tH5O9hCF14B2b8Kh2zF6Lh15v4BiV7S9/RNnQnXNvjUnTLzYKPTQd6jUR
NfSScBl9mMENJI9LNp2itk5mJyuZxQWCLmMyz4jSxgISzsCyZDuQI9mJsKtnm3QM
+crFn3ys/IkUVROGx+j/H7ZH1VU1WfXYwlaIPgXLNyM5yR+h99yrJ9OJhHdbIxHt
dGoF125cq/h3rRpGLTAtRu/vHgepXzI+079W5pSJy4dOXo5+rXVi2woQ+b2RT/nd
4HHRatXgBpJOjk5eQ1h7EE4aGyMRnITH78OPa1qS+FhGvmju3pfsleU/VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHG97zDJdSTC/Rhy9dhpz5je0yXlMB8GA1UdIwQY
MBaAFI3QA68Ed03T45cwSXmJo6FxUWJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xYWY2ZWEtYzczNi00YzIwLWE4M2Mt
NjdjZDJiNDU5YWFlLzEvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8xYWY2ZWEtYzczNi00YzIwLWE4M2MtNjdjZDJiNDU5YWFl
LzEvamRBRHJ3UjNUZFBqbHpCSmVZbWpvWEZSWWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFXtOKwX
cnud5gIRYQpWSpmfYO4Ww/QVvzHkmZj6zIWp3LssraIYRlvgS47wyqJXSwugakEE
6oRrAVraJZyDzR8uSGZ7jcBRUn6h8acqN/lRE5OthuUIIjcE7tcrw04RP+LTZSn4
XAYj46129Qcu1kX5eoGvtjXjDuyEIJsbGctckZXaoBmC+cpKUTVfeJBl8Yjf2pTJ
BQUC7r6FJxK0ewDptNE4hsUAZ0R0eQzgdpUNZqbyc9bpvo2czwo3PjtDHuXt04/U
z6T4wmAoFSJ53gbd7DOhcTrPlOu0HmpYe4boB4Zf10L4mWrlNcsYOl3ldqoy+o2t
N776sP7fL7CVLg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:32 2025 by rpki-client