Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File: jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier: Hyd1q4rE6OYZsyN8L2S/G9nYSPrvojCUzlbwyQtfkRc=
Subject key identifier: 4F:6C:64:E0:5C:51:44:8F:6B:82:CD:D5:0C:36:0B:C7:C1:B3:57:9E
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 019611A0D45211A790541761442346B0C571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number: 14DF
Signing time: Mon 07 Apr 2025 19:01:14 +0000
Manifest this update: Mon 07 Apr 2025 19:01:14 +0000
Manifest next update: Tue 08 Apr 2025 19:01:14 +0000
Files and hashes: 1: 8ZbyflawwFLPqDg3BZZLbHwGOLc.roa (hash: VykbJevpFsrAKqlNdZuPgmxNQNlKZ+4+VF7D/J1CQCs=)
2: H_TLsPIgEGDD_RE_XHqJUvlqj8E.roa (hash: jVZCYNBVF7woByDpZwClsmu07rKLPUQko61SrEyrK1s=)
3: WyA56EA2oxi30uAjF6x_QQYyE00.roa (hash: 4ql8mO5EaYeFUKdK/VU8GBpEW0nvJwvaHkKL+MQY0zE=)
4: eJe54pJQD4j2JDWbWUTuFe4Zw4k.roa (hash: RfLVPz0RIAcdPGVp8RcU7sTd+HqCq3IoZWz5cYzagaI=)
5: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: 24Fp9VM2ilOZn8KWnqjKT+rIq0kXkf9r0NEz2ddm5l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a0:d4:52:11:a7:90:54:17:61:44:23:46:b0:c5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Apr 7 19:01:14 2025 GMT
Not After : Apr 8 19:01:14 2025 GMT
Subject: CN=4f6c64e05c51448f6b82cdd50c360bc7c1b3579e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:87:24:8c:76:55:c7:7e:2c:48:20:4d:99:
b5:b4:d7:40:18:9f:e2:53:12:3a:e7:70:bf:f7:d9:
92:c5:59:71:00:e4:7d:ab:dd:04:86:8c:37:b7:81:
93:41:bc:fe:3a:3a:d1:10:da:6c:de:20:16:7d:b5:
98:f6:62:87:9a:0c:ad:a3:be:71:00:4c:ee:6e:3d:
28:de:0b:41:bb:43:b7:0f:a3:0e:90:13:b6:ba:c5:
1b:e2:4b:2f:7b:04:cc:50:56:11:10:c0:5e:18:a1:
5b:db:4d:04:09:2c:4b:e2:37:79:72:37:35:30:8e:
05:31:4f:70:4e:1c:24:8f:1d:02:47:11:c4:12:92:
12:da:5e:7f:e5:3b:4a:72:28:a5:c0:6d:92:c5:94:
7d:85:96:a1:47:1d:6e:22:26:e0:18:70:e5:8b:5d:
3f:5a:9e:55:23:3b:18:76:a5:5a:0d:9a:5a:38:d4:
61:d7:0b:73:fc:a4:04:da:f8:4d:2e:36:5a:0d:80:
28:85:ce:17:f3:d8:51:41:8f:3b:00:c2:7e:8d:46:
4e:b1:29:99:14:42:af:5c:0d:9e:1c:70:fc:aa:7c:
29:30:1e:d7:2f:8a:ff:99:49:9b:9e:ed:c9:18:e1:
12:88:4f:f2:45:b8:81:29:57:a7:31:77:c7:36:a3:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6C:64:E0:5C:51:44:8F:6B:82:CD:D5:0C:36:0B:C7:C1:B3:57:9E
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:43:8b:4e:a8:7c:d5:56:db:ad:ab:67:6d:49:a4:70:84:84:
d5:fc:b6:13:d8:a1:e2:0d:54:00:d9:0e:00:12:e2:d1:0b:63:
20:54:be:ac:59:16:00:e1:b3:a4:17:f3:27:21:ae:b1:bd:74:
76:00:97:52:5d:5d:52:12:aa:71:2b:52:2c:c3:82:6b:8a:a8:
5e:92:00:b5:21:dc:49:71:b4:84:28:3b:9b:f2:3b:7d:99:0d:
dd:5f:41:4c:4f:48:62:eb:60:2f:e9:9d:6a:b4:45:e5:ba:55:
b3:ff:96:6e:55:cf:c4:1d:3f:1f:93:0c:d0:10:7f:e1:dd:ac:
5f:81:79:37:96:1c:09:41:a6:0a:38:d7:39:47:65:20:99:25:
40:a6:69:ad:02:a5:04:f9:0d:fe:bf:1e:19:2e:7c:df:f7:1a:
49:75:e9:9e:ea:68:96:f0:05:a6:8f:6b:c4:f0:1a:91:18:bc:
5a:be:97:14:ae:f5:77:41:86:d1:f2:ba:a8:e9:55:91:8c:c9:
73:0a:68:ec:02:7f:b2:75:38:b4:e1:31:ea:ef:84:34:90:13:
3f:8d:8d:97:a8:ca:63:fe:f5:04:b3:ba:05:93:c5:c2:88:54:
e6:dd:8f:6c:bf:10:bb:1f:ac:37:13:ba:fb:30:d8:50:00:40:
b8:3c:47:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRoNRSEaeQVBdhRCNGsMVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDYwMDQwZWYzYTA4MjNhYTk3M2YwZDA1OTJiMWRkYTgw
OGY3ODIwHhcNMjUwNDA3MTkwMTE0WhcNMjUwNDA4MTkwMTE0WjAzMTEwLwYDVQQD
Eyg0ZjZjNjRlMDVjNTE0NDhmNmI4MmNkZDUwYzM2MGJjN2MxYjM1NzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHCHJIx2Vcd+LEggTZm1tNdAGJ/i
UxI653C/99mSxVlxAOR9q90Ehow3t4GTQbz+OjrRENps3iAWfbWY9mKHmgyto75x
AEzubj0o3gtBu0O3D6MOkBO2usUb4ksvewTMUFYREMBeGKFb200ECSxL4jd5cjc1
MI4FMU9wThwkjx0CRxHEEpIS2l5/5TtKciilwG2SxZR9hZahRx1uIibgGHDli10/
Wp5VIzsYdqVaDZpaONRh1wtz/KQE2vhNLjZaDYAohc4X89hRQY87AMJ+jUZOsSmZ
FEKvXA2eHHD8qnwpMB7XL4r/mUmbnu3JGOESiE/yRbiBKVenMXfHNqMoiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9sZOBcUUSPa4LN1Qw2C8fBs1eeMB8GA1UdIwQY
MBaAFIwGAEDvOggjqpc/DQWSsd2oCPeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4Yjkt
NGU0YTM1ZGQzNjc3LzEvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4YjktNGU0YTM1ZGQzNjc3
LzEvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkOLTqh8
1VbbratnbUmkcISE1fy2E9ih4g1UANkOABLi0QtjIFS+rFkWAOGzpBfzJyGusb10
dgCXUl1dUhKqcStSLMOCa4qoXpIAtSHcSXG0hCg7m/I7fZkN3V9BTE9IYutgL+md
arRF5bpVs/+WblXPxB0/H5MM0BB/4d2sX4F5N5YcCUGmCjjXOUdlIJklQKZprQKl
BPkN/r8eGS583/caSXXpnupolvAFpo9rxPAakRi8Wr6XFK71d0GG0fK6qOlVkYzJ
cwpo7AJ/snU4tOEx6u+ENJATP42Nl6jKY/71BLO6BZPFwohU5t2PbL8Qux+sNxO6
+zDYUABAuDxHgg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:29 2025 by rpki-client