Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: k+D3uGpdNSUrDIw9dFin9Q12g0DeoQdajN/EPwJg7x0=
Subject key identifier: 29:CA:DE:E8:A7:E9:8C:F6:40:E0:14:FF:E2:33:09:0C:69:A2:E2:81
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 01958B4E0966BE4CB233A87DABC4648EE340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 17:01:42 +0000
Manifest this update: Wed 12 Mar 2025 17:01:42 +0000
Manifest next update: Thu 13 Mar 2025 17:01:42 +0000
Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: MbQXZuAYFr5coKm5P7IYz/zZuj0QeuY5eyx7GHEe9+8=)
2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4e:09:66:be:4c:b2:33:a8:7d:ab:c4:64:8e:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Mar 12 17:01:42 2025 GMT
Not After : Mar 13 17:01:42 2025 GMT
Subject: CN=29cadee8a7e98cf640e014ffe233090c69a2e281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:c1:7b:e9:43:71:64:c3:28:d9:00:41:46:
4f:22:99:40:3e:7a:be:23:24:27:46:a1:f4:1b:0f:
bd:d4:8a:f9:f4:cc:5c:fa:8f:8b:ec:02:96:1e:1d:
56:62:e8:dc:58:46:ac:45:dc:71:9d:ad:0d:be:c5:
e5:40:90:a7:4f:bf:83:af:0b:8a:74:2b:46:f9:4d:
e5:46:63:d8:f4:9f:aa:96:2a:18:2f:24:b2:3c:eb:
0c:3a:01:b7:23:bb:8b:a9:2e:57:e1:d5:f9:87:07:
22:8a:5e:5a:ac:12:b0:f0:1f:07:d7:96:b0:4e:72:
4b:7c:bb:8d:16:77:3e:a8:cc:7d:78:c1:45:7e:fb:
40:96:4b:0b:88:9d:00:67:14:81:ad:db:56:d7:63:
e3:f7:a7:53:aa:73:27:a7:3b:c9:53:ac:02:aa:21:
68:a6:8c:c5:05:77:3c:ec:4f:72:35:9c:7d:c8:fb:
e7:c4:50:db:14:1f:5b:3b:c7:ed:b7:38:ef:e4:6e:
29:d1:60:e0:2e:85:23:ca:75:82:46:5f:a6:cc:3d:
97:77:83:c2:a4:78:74:c8:19:f4:9b:c0:e2:ed:e3:
10:52:ea:ff:84:80:ff:57:19:fa:21:f9:0a:8c:50:
c4:c6:b4:90:e6:ef:5e:d7:56:73:d3:3a:39:95:45:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CA:DE:E8:A7:E9:8C:F6:40:E0:14:FF:E2:33:09:0C:69:A2:E2:81
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d2:fe:5b:9b:7c:6d:56:80:b8:77:b1:fe:3c:48:2f:e3:78:
41:c2:04:46:7f:f1:56:f6:88:2d:f4:9f:e9:10:48:73:1c:68:
96:e8:cc:4c:93:32:54:cf:52:98:52:c2:10:b2:4d:29:34:39:
b4:ba:0a:b3:fe:14:8e:a7:c1:c1:c4:a2:0b:18:48:2a:1d:c6:
1c:ac:8b:ab:a1:ea:a5:33:db:a4:ab:ce:c4:24:95:06:1c:8a:
66:60:42:dc:13:c4:d3:e4:94:8b:91:62:20:b3:d3:f6:4c:d2:
10:ed:35:e8:81:6e:5b:d0:74:4d:f0:22:c0:ab:e0:29:10:e2:
94:9f:56:ec:54:5c:08:57:2e:01:17:10:9c:25:22:dc:6a:53:
d9:e2:0b:41:d5:50:2e:c7:1f:2c:93:65:90:be:e7:8f:ad:b7:
3e:26:83:1b:76:99:41:e3:8b:fb:5f:f4:fd:c3:48:17:72:dd:
c0:23:ac:13:41:61:15:e4:92:d9:24:f2:85:35:ea:48:7e:6b:
83:7d:9c:60:1e:9d:a2:d2:b9:d4:be:fa:a8:2a:18:98:15:d9:
e8:9a:00:39:59:0a:3e:b3:60:76:99:fa:52:d9:71:35:93:a7:
bc:9b:4b:bd:c8:b7:3f:02:8a:5d:c6:7c:20:b1:6a:af:28:02:
92:ea:3e:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTglmvkyyM6h9q8RkjuNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2YyNTFhYzExOTBjOWRlZGM4ZTViZTA4NWQ1NDM4N2Y0
MDFhMzcwHhcNMjUwMzEyMTcwMTQyWhcNMjUwMzEzMTcwMTQyWjAzMTEwLwYDVQQD
EygyOWNhZGVlOGE3ZTk4Y2Y2NDBlMDE0ZmZlMjMzMDkwYzY5YTJlMjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBTBe+lDcWTDKNkAQUZPIplAPnq+
IyQnRqH0Gw+91Ir59Mxc+o+L7AKWHh1WYujcWEasRdxxna0NvsXlQJCnT7+DrwuK
dCtG+U3lRmPY9J+qlioYLySyPOsMOgG3I7uLqS5X4dX5hwciil5arBKw8B8H15aw
TnJLfLuNFnc+qMx9eMFFfvtAlksLiJ0AZxSBrdtW12Pj96dTqnMnpzvJU6wCqiFo
pozFBXc87E9yNZx9yPvnxFDbFB9bO8fttzjv5G4p0WDgLoUjynWCRl+mzD2Xd4PC
pHh0yBn0m8Di7eMQUur/hID/Vxn6IfkKjFDExrSQ5u9e11Zz0zo5lUW+OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnK3uin6Yz2QOAU/+IzCQxpouKBMB8GA1UdIwQY
MBaAFIx/JRrBGQyd7cjlvghdVDh/QBo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYt
NTAwYzdjNDVmNDE5LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYtNTAwYzdjNDVmNDE5
LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtL+W5t8
bVaAuHex/jxIL+N4QcIERn/xVvaILfSf6RBIcxxolujMTJMyVM9SmFLCELJNKTQ5
tLoKs/4UjqfBwcSiCxhIKh3GHKyLq6HqpTPbpKvOxCSVBhyKZmBC3BPE0+SUi5Fi
ILPT9kzSEO016IFuW9B0TfAiwKvgKRDilJ9W7FRcCFcuARcQnCUi3GpT2eILQdVQ
LscfLJNlkL7nj623PiaDG3aZQeOL+1/0/cNIF3LdwCOsE0FhFeSS2STyhTXqSH5r
g32cYB6dotK51L76qCoYmBXZ6JoAOVkKPrNgdpn6UtlxNZOnvJtLvci3PwKKXcZ8
ILFqrygCkuo+gA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:28 2025 by rpki-client