Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier: 7tvqLNqguGLZrVCDVQOBrrAjhTyFR0oPnHC1/qs3wAE=
Subject key identifier: 85:50:46:1A:26:1C:16:B8:F7:6D:19:9C:DC:7D:64:CE:4F:7F:C7:2B
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial: 019629A93DD8E650B02FB070A37408642FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number: 14E8
Signing time: Sat 12 Apr 2025 11:01:19 +0000
Manifest this update: Sat 12 Apr 2025 11:01:19 +0000
Manifest next update: Sun 13 Apr 2025 11:01:19 +0000
Files and hashes: 1: P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa (hash: chczXDm1de+BLC6EnaRddxxMZYpPZHccFuKW2GUWjQY=)
2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: DzTiPLhh3BohdBh9BHTtgHVQqjLE7RBMYAnOp4Tt360=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:a9:3d:d8:e6:50:b0:2f:b0:70:a3:74:08:64:2f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Validity
Not Before: Apr 12 11:01:19 2025 GMT
Not After : Apr 13 11:01:19 2025 GMT
Subject: CN=8550461a261c16b8f76d199cdc7d64ce4f7fc72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:82:e1:7f:9b:88:c2:78:22:d4:5a:67:e0:
16:a4:54:30:35:8d:f7:41:d4:bc:ba:43:c8:cf:0b:
0e:f9:6b:25:ab:14:33:65:49:e2:79:12:d3:2f:e3:
76:78:68:db:e7:cd:ae:58:79:fc:88:84:6c:8d:fb:
79:30:0a:85:ab:55:d2:b3:89:1a:19:04:19:9c:45:
78:42:23:17:97:a7:07:8b:de:a2:78:0a:ab:f2:83:
a5:b8:b5:55:da:0a:0a:69:ef:33:8d:e6:77:42:55:
c9:83:4a:d5:be:e2:d5:fb:58:e6:9d:cb:d1:28:60:
99:1d:cc:0b:9b:fc:d9:e1:22:7d:5f:cd:0e:80:81:
9e:ec:6f:a5:3e:ca:8c:84:76:64:f7:59:25:2a:eb:
1e:39:17:da:8d:a7:d3:c9:37:ad:b8:e8:52:28:6b:
77:ac:55:90:06:31:b9:3b:26:d9:11:c9:48:51:55:
e0:a2:3d:6b:70:e6:ae:41:d3:92:59:c5:a3:2e:4b:
a1:e5:8c:4f:96:4b:dd:37:5c:4c:b4:ca:3c:fc:26:
f6:b5:d9:0e:f3:77:f7:90:e5:5e:e3:ef:4d:46:45:
67:bd:38:9d:71:a4:b0:e0:bb:15:a8:a7:fc:f7:9c:
99:0b:59:a9:04:63:32:e0:f9:2e:bf:37:4a:9b:af:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:50:46:1A:26:1C:16:B8:F7:6D:19:9C:DC:7D:64:CE:4F:7F:C7:2B
X509v3 Authority Key Identifier:
keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:39:26:16:a4:ea:bc:a4:f8:f9:8a:6f:01:a2:ae:93:c7:d6:
33:e0:d5:26:fc:76:3f:06:83:a9:89:fe:ce:ef:1a:b4:d6:c7:
67:81:b0:fa:2e:db:fd:7a:ae:d7:6e:62:6d:4f:6e:59:3d:08:
2d:a5:1d:3e:a2:a6:94:17:d7:07:e3:92:71:2d:81:f7:21:40:
05:d5:f7:9f:9c:86:e7:f1:cf:60:18:f4:c3:ce:9f:e0:b5:34:
1d:cf:f4:34:9c:80:d6:c6:cb:d2:fa:50:b7:e6:1c:1d:d4:86:
cb:bf:aa:d4:02:e7:bc:ac:d5:3c:25:f4:64:ed:06:a0:16:0f:
30:3f:d8:15:74:c2:62:16:88:9d:a6:fd:21:a3:cd:1a:06:c4:
6a:b7:aa:43:9f:0a:02:76:4a:be:ee:12:16:43:c9:dd:3d:b1:
70:a4:aa:41:be:7d:ac:dd:1c:6c:b0:56:ef:48:a4:7c:68:e8:
9a:51:d1:4d:90:09:92:0e:a0:30:08:47:8f:3c:7b:2a:03:c4:
38:cb:2b:29:10:d3:e5:18:e3:1a:98:6b:64:a5:ea:87:47:1f:
b9:ff:57:32:75:92:da:eb:87:73:1d:db:8d:7a:aa:c6:2d:ac:
6c:cb:5b:55:48:6d:8c:dc:fb:a6:21:c0:75:6f:be:c0:c6:77:
ba:4b:8f:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYpqT3Y5lCwL7Bwo3QIZC/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWZjZTBiOGI2MzdjMTVmMjMxYWVjZmZiNWM4MGE3NGZm
Y2NiMWQwHhcNMjUwNDEyMTEwMTE5WhcNMjUwNDEzMTEwMTE5WjAzMTEwLwYDVQQD
Eyg4NTUwNDYxYTI2MWMxNmI4Zjc2ZDE5OWNkYzdkNjRjZTRmN2ZjNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJiC4X+biMJ4ItRaZ+AWpFQwNY33
QdS8ukPIzwsO+WslqxQzZUnieRLTL+N2eGjb582uWHn8iIRsjft5MAqFq1XSs4ka
GQQZnEV4QiMXl6cHi96ieAqr8oOluLVV2goKae8zjeZ3QlXJg0rVvuLV+1jmncvR
KGCZHcwLm/zZ4SJ9X80OgIGe7G+lPsqMhHZk91klKuseORfajafTyTetuOhSKGt3
rFWQBjG5OybZEclIUVXgoj1rcOauQdOSWcWjLkuh5YxPlkvdN1xMtMo8/Cb2tdkO
83f3kOVe4+9NRkVnvTidcaSw4LsVqKf895yZC1mpBGMy4PkuvzdKm68dHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVQRhomHBa4920ZnNx9ZM5Pf8crMB8GA1UdIwQY
MBaAFKyfzguLY3wV8jGuz/tcgKdP/MsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQt
MDhiMDdlODliNDJhLzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQtMDhiMDdlODliNDJh
LzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljkmFqTq
vKT4+YpvAaKuk8fWM+DVJvx2PwaDqYn+zu8atNbHZ4Gw+i7b/Xqu125ibU9uWT0I
LaUdPqKmlBfXB+OScS2B9yFABdX3n5yG5/HPYBj0w86f4LU0Hc/0NJyA1sbL0vpQ
t+YcHdSGy7+q1ALnvKzVPCX0ZO0GoBYPMD/YFXTCYhaInab9IaPNGgbEareqQ58K
AnZKvu4SFkPJ3T2xcKSqQb59rN0cbLBW70ikfGjomlHRTZAJkg6gMAhHjzx7KgPE
OMsrKRDT5RjjGphrZKXqh0cfuf9XMnWS2uuHcx3bjXqqxi2sbMtbVUhtjNz7piHA
dW++wMZ3ukuPtQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:17:07 2025 by rpki-client