Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: pKvxfPz8DPx3b7nOK5XC5Y+VaOXZKVkhCNSqQQFC99w=
Subject key identifier: 57:27:EC:A8:6B:94:D9:0C:11:F3:5D:0B:F0:71:C9:FF:D7:15:34:F0
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019610C4EB3B2F43AE27323EB35FD63D3970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0C7B
Signing time: Mon 07 Apr 2025 15:01:02 +0000
Manifest this update: Mon 07 Apr 2025 15:01:02 +0000
Manifest next update: Tue 08 Apr 2025 15:01:02 +0000
Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=)
2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: 2s9LTNMOOK+TnWM9tl4QIwWFxCadDUu5k92YxyMB70Y=)
3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:c4:eb:3b:2f:43:ae:27:32:3e:b3:5f:d6:3d:39:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Apr 7 15:01:02 2025 GMT
Not After : Apr 8 15:01:02 2025 GMT
Subject: CN=5727eca86b94d90c11f35d0bf071c9ffd71534f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:be:5a:9b:2a:a6:0e:40:08:1b:cd:a6:81:
25:d2:00:8e:05:10:f9:c1:5d:84:3f:a9:b2:dc:77:
41:93:72:03:75:39:8b:b0:a9:e4:e5:71:30:d6:34:
8a:ee:47:b8:2e:66:f6:57:5e:60:07:ca:32:18:34:
11:9b:26:d1:70:44:be:b8:aa:27:df:a2:37:92:35:
3f:90:9e:0f:60:6e:47:44:51:63:36:a5:5c:fe:55:
e0:ba:85:08:df:d5:df:3f:3e:da:42:e8:54:c7:fd:
59:4b:0f:c9:78:9d:a7:92:8c:0f:28:1c:bb:1a:b8:
57:f3:66:2d:5d:0d:12:3f:5f:84:d3:e8:fe:82:9c:
3b:e9:1c:fe:74:fd:eb:2b:67:b2:90:f2:16:bc:3c:
e2:08:17:89:49:54:64:03:69:9e:df:1c:d1:e4:ac:
ca:8f:7f:bc:38:e5:62:37:cc:d4:35:e6:56:9b:f6:
80:87:55:9e:e8:76:3c:4d:d4:45:b5:88:e1:31:6f:
68:15:b7:2d:3c:fe:92:75:b4:10:dc:33:22:64:2f:
4b:a0:61:b8:54:15:41:d9:31:01:53:17:82:f9:69:
2c:ee:2f:84:49:b4:91:a1:a2:3c:bf:b3:5d:45:32:
b8:2d:51:6f:eb:ac:e9:af:e1:6e:bf:31:b1:62:65:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:27:EC:A8:6B:94:D9:0C:11:F3:5D:0B:F0:71:C9:FF:D7:15:34:F0
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:d3:05:d9:78:3b:39:b1:3f:ce:82:4b:54:f5:63:48:ae:1d:
84:a8:3e:81:c6:60:fc:fd:9a:f3:45:6d:e2:24:98:4f:33:18:
83:0e:ae:e6:b0:24:9d:99:db:f9:02:5b:02:b8:85:0f:0c:3b:
f8:17:1f:5d:f6:b4:f4:29:a6:97:75:da:bb:de:2f:b9:51:e7:
66:bd:c4:09:a6:7e:10:35:af:63:fb:2f:78:c1:f9:58:c7:84:
1a:33:4f:08:17:5a:c5:21:3b:de:c0:af:06:d4:e5:e5:ac:49:
ca:2c:f3:fe:03:e8:4f:e6:85:26:51:70:9f:da:77:85:c6:48:
aa:20:44:88:fd:48:8a:37:ba:3a:8a:30:c5:d5:b3:44:7e:64:
6a:ba:22:76:36:a1:3c:f7:47:1f:03:a7:f4:dc:3e:e3:f0:e3:
bf:29:38:30:4c:54:74:63:97:fc:e5:86:e1:c3:6a:7b:11:15:
64:d6:60:1c:de:2b:b8:c1:4c:e8:97:1a:4b:4d:d0:f9:1b:64:
74:3f:7f:ad:c7:5f:17:16:77:82:d0:33:b2:d2:bf:6c:b7:75:
3e:ec:cc:5a:7b:d2:fe:e5:83:d4:42:26:9e:1d:30:b2:cf:77:
f9:55:62:77:a9:e7:9d:02:ed:04:4b:3c:ed:89:a2:2d:53:d4:
3e:85:ab:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYQxOs7L0OuJzI+s1/WPTlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0
YTlkMzIwHhcNMjUwNDA3MTUwMTAyWhcNMjUwNDA4MTUwMTAyWjAzMTEwLwYDVQQD
Eyg1NzI3ZWNhODZiOTRkOTBjMTFmMzVkMGJmMDcxYzlmZmQ3MTUzNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQK+Wpsqpg5ACBvNpoEl0gCOBRD5
wV2EP6my3HdBk3IDdTmLsKnk5XEw1jSK7ke4Lmb2V15gB8oyGDQRmybRcES+uKon
36I3kjU/kJ4PYG5HRFFjNqVc/lXguoUI39XfPz7aQuhUx/1ZSw/JeJ2nkowPKBy7
GrhX82YtXQ0SP1+E0+j+gpw76Rz+dP3rK2eykPIWvDziCBeJSVRkA2me3xzR5KzK
j3+8OOViN8zUNeZWm/aAh1We6HY8TdRFtYjhMW9oFbctPP6SdbQQ3DMiZC9LoGG4
VBVB2TEBUxeC+Wks7i+ESbSRoaI8v7NdRTK4LVFv66zpr+FuvzGxYmV79QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcn7KhrlNkMEfNdC/Bxyf/XFTTwMB8GA1UdIwQY
MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt
NzA1MTk3NTA3YTU5LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5
LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3dMF2Xg7
ObE/zoJLVPVjSK4dhKg+gcZg/P2a80Vt4iSYTzMYgw6u5rAknZnb+QJbAriFDww7
+BcfXfa09Cmml3Xau94vuVHnZr3ECaZ+EDWvY/sveMH5WMeEGjNPCBdaxSE73sCv
BtTl5axJyizz/gPoT+aFJlFwn9p3hcZIqiBEiP1Iije6OoowxdWzRH5karoidjah
PPdHHwOn9Nw+4/Djvyk4MExUdGOX/OWG4cNqexEVZNZgHN4ruMFM6JcaS03Q+Rtk
dD9/rcdfFxZ3gtAzstK/bLd1PuzMWnvS/uWD1EImnh0wss93+VVid6nnnQLtBEs8
7YmiLVPUPoWraw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:24:08 2025 by rpki-client