Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File: j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier: IxYAcJl/rVWpWGRc4vIyj2T5BhSR6KY4U/BJID3J5T8=
Subject key identifier: 4B:F8:B4:54:BA:6C:0A:07:02:25:27:F3:62:A6:B2:E5:4B:3F:23:99
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer: /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial: 0194C387D12BA985277A58A41FFD3AB2A975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number: 0378
Signing time: Sat 01 Feb 2025 22:00:45 +0000
Manifest this update: Sat 01 Feb 2025 22:00:45 +0000
Manifest next update: Sun 02 Feb 2025 22:00:45 +0000
Files and hashes: 1: 13OA8Kowa9u-F_7ZWwXTDMJLU0A.roa (hash: TLY9MKIWsbVqHZrgOnopJQQ8yZUjxig3a2ZRbtkH/Xw=)
2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: gtHmUkBOG6amPwJMdwg9E9ujYR4KyvNRwlX+awAVys0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:d1:2b:a9:85:27:7a:58:a4:1f:fd:3a:b2:a9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
Validity
Not Before: Feb 1 22:00:45 2025 GMT
Not After : Feb 2 22:00:45 2025 GMT
Subject: CN=4bf8b454ba6c0a07022527f362a6b2e54b3f2399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:45:20:59:6a:4a:99:6c:7c:de:31:63:ee:
c8:e6:db:31:1e:1d:79:81:4a:01:85:7d:11:6c:cc:
35:ae:77:e6:2b:ee:6e:8e:e3:68:6b:51:b5:57:a1:
a7:cc:2e:48:97:70:64:b3:d2:51:5b:79:6d:c8:88:
78:41:76:2a:18:34:a2:97:33:96:51:40:e6:7c:c9:
6a:63:5c:d8:d4:6d:26:db:8f:01:53:3c:9e:3a:21:
87:18:a3:cc:84:93:b5:d1:6a:1c:49:4a:48:de:11:
0a:3a:23:63:64:38:d2:a6:54:cd:28:10:92:f5:73:
46:e8:e8:05:6a:d2:ea:49:e5:c2:1c:3a:a1:0f:2b:
52:0d:da:77:99:ec:14:93:26:4b:1a:a2:b3:02:43:
04:bb:30:a8:01:98:ba:2d:37:27:4a:14:a3:fb:37:
7f:80:46:6f:dd:f8:06:b3:c0:7b:10:bc:20:30:9d:
90:b9:2e:74:13:dd:0d:00:d7:2a:87:22:e4:07:5f:
aa:3b:56:de:1f:09:a2:c6:a8:65:6a:d0:c2:ab:69:
a3:11:85:bd:29:3b:0d:b0:b4:7d:94:ff:d9:3a:8f:
b7:2c:ce:5b:40:59:5b:cf:04:40:9f:2f:ab:29:b1:
19:43:aa:f3:2d:1a:45:8e:33:99:52:31:be:40:d7:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:B4:54:BA:6C:0A:07:02:25:27:F3:62:A6:B2:E5:4B:3F:23:99
X509v3 Authority Key Identifier:
keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:63:cf:96:fb:54:74:e4:5f:13:e6:a5:90:e7:b6:c0:a7:90:
fa:a5:5e:70:11:c4:3b:65:0d:ee:be:8d:c6:58:dc:c0:08:c8:
6d:3f:d8:10:35:cc:b9:61:4e:fd:1e:95:10:80:c1:75:83:10:
e5:60:24:af:ab:26:93:6e:f3:be:ef:6c:c9:66:a5:01:6a:0e:
87:12:2e:d7:43:48:da:8a:03:9e:84:8c:d9:91:5c:8d:e2:18:
38:e6:ae:89:d0:18:b2:d6:c9:f1:57:7f:8b:d8:51:2b:0e:36:
87:11:4d:d5:23:96:fc:ce:85:a1:70:7b:d9:36:f7:a8:f8:13:
5a:d5:e1:25:0b:1f:1b:24:a6:1d:29:25:b6:50:e8:f5:fd:96:
6a:4a:67:02:48:38:8f:33:3a:28:f7:ac:ab:8d:e7:4c:95:4c:
e1:6c:f4:bc:94:a0:fe:52:16:88:ce:11:09:1a:fb:cb:21:b0:
30:73:e1:9a:d9:8c:47:91:a0:cf:ae:67:dc:f4:a3:d3:c4:5d:
08:01:03:d2:45:f9:32:18:72:89:5e:94:ed:ae:cb:0d:39:ee:
98:66:19:63:24:15:e5:dc:13:7e:b2:92:39:39:34:2b:e3:5d:
62:f3:90:9b:e7:00:c5:6a:84:77:bf:f1:17:8f:8a:48:dd:5f:
ac:3f:56:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh9ErqYUnelikH/06sql1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZGY4N2NhNTMwNjU3OTg0NDc2NDUyNTVmODI5YjUzYmMx
ZGEyMTUwHhcNMjUwMjAxMjIwMDQ1WhcNMjUwMjAyMjIwMDQ1WjAzMTEwLwYDVQQD
Eyg0YmY4YjQ1NGJhNmMwYTA3MDIyNTI3ZjM2MmE2YjJlNTRiM2YyMzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksVFIFlqSplsfN4xY+7I5tsxHh15
gUoBhX0RbMw1rnfmK+5ujuNoa1G1V6GnzC5Il3Bks9JRW3ltyIh4QXYqGDSilzOW
UUDmfMlqY1zY1G0m248BUzyeOiGHGKPMhJO10WocSUpI3hEKOiNjZDjSplTNKBCS
9XNG6OgFatLqSeXCHDqhDytSDdp3mewUkyZLGqKzAkMEuzCoAZi6LTcnShSj+zd/
gEZv3fgGs8B7ELwgMJ2QuS50E90NANcqhyLkB1+qO1beHwmixqhlatDCq2mjEYW9
KTsNsLR9lP/ZOo+3LM5bQFlbzwRAny+rKbEZQ6rzLRpFjjOZUjG+QNd4kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEv4tFS6bAoHAiUn82KmsuVLPyOZMB8GA1UdIwQY
MBaAFI/fh8pTBleYRHZFJV+Cm1O8HaIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajktSHlsTUdWNWhFZGtVbFg0S2JVN3dkb2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82MzQ4OTAtOGI0OC00OWFlLWIwNDIt
OTk5Y2NlNGQ0YWQyLzEvajktSHlsTUdWNWhFZGtVbFg0S2JVN3dkb2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82MzQ4OTAtOGI0OC00OWFlLWIwNDItOTk5Y2NlNGQ0YWQy
LzEvajktSHlsTUdWNWhFZGtVbFg0S2JVN3dkb2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2PPlvtU
dORfE+alkOe2wKeQ+qVecBHEO2UN7r6NxljcwAjIbT/YEDXMuWFO/R6VEIDBdYMQ
5WAkr6smk27zvu9syWalAWoOhxIu10NI2ooDnoSM2ZFcjeIYOOauidAYstbJ8Vd/
i9hRKw42hxFN1SOW/M6FoXB72Tb3qPgTWtXhJQsfGySmHSkltlDo9f2WakpnAkg4
jzM6KPesq43nTJVM4Wz0vJSg/lIWiM4RCRr7yyGwMHPhmtmMR5Ggz65n3PSj08Rd
CAED0kX5MhhyiV6U7a7LDTnumGYZYyQV5dwTfrKSOTk0K+NdYvOQm+cAxWqEd7/x
F4+KSN1frD9WaQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:04 2025 by rpki-client