Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: 85gJmuekoRQ0JHk8Q0yPECaUwZnqaloiHK9/YZ/G7TQ=
Subject key identifier: DE:14:D1:55:58:A8:C4:A0:E3:20:A3:44:4C:1F:E3:96:08:B1:DD:1C
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 019653B78EC42736549D85FBBD099AF4F0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 15:01:00 +0000
Manifest this update: Sun 20 Apr 2025 15:01:00 +0000
Manifest next update: Mon 21 Apr 2025 15:01:00 +0000
Files and hashes: 1: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: H6fxlDnDOMf+I0xH2ZTbdY5QpZ5rtOwYXNshNKi8Aw4=)
2: TPZkecYVgQWkeVAGvO4nYBYabeU.roa (hash: feVX1nzAeUU2PUv28J5bnSiD1IXG8sT2Z4xCADvwWfo=)
3: iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa (hash: OoqdlG2QCLim3GZ0mF7OJKrB+NTJ6UDVTxUydioBYjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:8e:c4:27:36:54:9d:85:fb:bd:09:9a:f4:f0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Apr 20 15:01:00 2025 GMT
Not After : Apr 21 15:01:00 2025 GMT
Subject: CN=de14d15558a8c4a0e320a3444c1fe39608b1dd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:34:ad:ec:ba:c0:df:16:6b:bd:03:d6:c5:77:
74:c8:8c:ff:a0:ef:ae:45:82:27:7d:94:8c:7e:ed:
10:ae:4a:33:c6:ac:4e:ad:07:ef:44:3b:d9:15:ec:
e7:c6:cc:dc:e1:60:ad:55:25:02:00:a8:39:20:24:
c9:1b:09:31:d4:df:0e:af:0d:c0:d5:cd:aa:ea:cb:
17:73:ba:9a:21:54:b8:99:8c:49:fb:e1:81:bd:ea:
37:92:93:6e:29:ee:81:b0:d3:0a:07:42:71:a9:5a:
f5:d3:47:01:27:c1:ce:9f:8b:16:ff:97:f4:3d:70:
b9:8d:1b:ea:e4:8f:ee:f4:f9:5d:53:12:ad:13:c4:
7f:1b:e6:c2:e0:60:3d:74:d6:be:68:38:a0:f7:21:
d7:1c:df:3b:8d:c3:32:aa:49:64:e0:fc:7e:57:aa:
f4:8e:20:f1:9b:26:f7:d0:71:fe:c9:39:6d:21:6f:
37:56:0c:9b:eb:2c:05:d3:03:ff:15:c7:44:64:af:
91:75:00:58:30:6d:df:3b:4f:a2:af:76:4d:92:18:
43:71:22:5f:a3:03:a7:8b:af:99:ac:0e:1f:14:40:
f3:41:d9:ca:a6:e4:f9:50:3a:67:10:cf:14:ba:b6:
ae:6d:6c:62:91:fe:04:e8:30:72:66:90:f4:67:a7:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:14:D1:55:58:A8:C4:A0:E3:20:A3:44:4C:1F:E3:96:08:B1:DD:1C
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cb:8e:7f:e6:d9:c7:53:cb:9d:29:b6:8e:f9:8d:b1:84:8f:
4d:b8:54:b6:da:f1:db:a8:60:84:49:41:12:14:a8:3a:30:f8:
e7:0b:00:07:57:28:f1:03:30:58:80:58:33:67:f1:f2:57:5e:
ca:30:e7:6e:d4:f8:0d:13:7f:47:f9:b1:ae:43:b0:dc:fc:96:
93:f4:be:f0:65:41:22:a7:04:1c:24:51:91:0b:c4:63:36:f8:
64:f9:da:7b:a9:8d:b8:a8:ab:51:f5:e1:06:f6:59:1e:46:a6:
19:5d:13:0b:b9:a5:a0:8a:9c:cd:95:c4:6a:22:23:c8:aa:93:
3d:a5:97:cc:0c:ea:25:96:27:61:6d:9a:34:d1:66:35:e2:fd:
05:ff:8c:7e:6c:2b:3f:cc:a2:e5:7a:8c:f9:b3:18:bb:ee:d1:
48:7f:76:9f:26:d3:1d:4c:ea:96:50:55:1e:80:b1:c9:9b:33:
47:5b:2c:20:db:3d:4e:64:f2:25:3d:19:a3:8b:2b:04:d9:88:
2c:e0:f5:c9:e6:9c:f7:f7:03:e9:57:2d:3d:34:59:ea:72:36:
77:a0:ab:86:e0:3e:c6:f3:06:8c:18:d5:f2:29:b2:71:c0:f6:
fa:b2:8e:43:53:dd:c3:f4:e8:b9:55:e1:e1:a1:f4:93:65:01:
98:f5:21:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTt47EJzZUnYX7vQma9PCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTkxOGYxYjEwZWMxZDY2MGIxY2ZjYjFiZmUxOTZjMmZl
YjA2YmYwHhcNMjUwNDIwMTUwMTAwWhcNMjUwNDIxMTUwMTAwWjAzMTEwLwYDVQQD
EyhkZTE0ZDE1NTU4YThjNGEwZTMyMGEzNDQ0YzFmZTM5NjA4YjFkZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzSt7LrA3xZrvQPWxXd0yIz/oO+u
RYInfZSMfu0QrkozxqxOrQfvRDvZFeznxszc4WCtVSUCAKg5ICTJGwkx1N8Orw3A
1c2q6ssXc7qaIVS4mYxJ++GBveo3kpNuKe6BsNMKB0JxqVr100cBJ8HOn4sW/5f0
PXC5jRvq5I/u9PldUxKtE8R/G+bC4GA9dNa+aDig9yHXHN87jcMyqklk4Px+V6r0
jiDxmyb30HH+yTltIW83Vgyb6ywF0wP/FcdEZK+RdQBYMG3fO0+ir3ZNkhhDcSJf
owOni6+ZrA4fFEDzQdnKpuT5UDpnEM8UuraubWxikf4E6DByZpD0Z6eMRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4U0VVYqMSg4yCjREwf45YIsd0cMB8GA1UdIwQY
MBaAFCSpGPGxDsHWYLHPyxv+GWwv6wa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYt
MWYyNjJkOWM5YjA3LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYtMWYyNjJkOWM5YjA3
LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMuOf+bZ
x1PLnSm2jvmNsYSPTbhUttrx26hghElBEhSoOjD45wsAB1co8QMwWIBYM2fx8lde
yjDnbtT4DRN/R/mxrkOw3PyWk/S+8GVBIqcEHCRRkQvEYzb4ZPnae6mNuKirUfXh
BvZZHkamGV0TC7mloIqczZXEaiIjyKqTPaWXzAzqJZYnYW2aNNFmNeL9Bf+Mfmwr
P8yi5XqM+bMYu+7RSH92nybTHUzqllBVHoCxyZszR1ssINs9TmTyJT0Zo4srBNmI
LOD1yeac9/cD6VctPTRZ6nI2d6CrhuA+xvMGjBjV8imyccD2+rKOQ1Pdw/TouVXh
4aH0k2UBmPUh7Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:17 2025 by rpki-client