Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
File: jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft (raw, json)
Hash identifier: EmTB6Sjh69lS56nqkj/hLC5q4DCyZ2NZsTA0JSRSORU=
Subject key identifier: 03:C1:43:DB:90:68:C2:0B:33:93:77:F3:15:DB:B3:BC:44:80:77:79
Authority key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
Certificate issuer: /CN=8c5002f639e81958d0f9b3585aed76707d2625de
Certificate serial: 0196414310C1723FEE007B03A35362E15E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
Manifest number: 14EF
Signing time: Thu 17 Apr 2025 01:00:36 +0000
Manifest this update: Thu 17 Apr 2025 01:00:36 +0000
Manifest next update: Fri 18 Apr 2025 01:00:36 +0000
Files and hashes: 1: jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl (hash: hLkA/99e1V65vD2b5/u9GABLx25gGaBeq0PXOOgEABQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:43:10:c1:72:3f:ee:00:7b:03:a3:53:62:e1:5e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c5002f639e81958d0f9b3585aed76707d2625de
Validity
Not Before: Apr 17 01:00:36 2025 GMT
Not After : Apr 18 01:00:36 2025 GMT
Subject: CN=03c143db9068c20b339377f315dbb3bc44807779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:b4:aa:8c:a4:eb:78:d8:f8:a2:cb:84:d8:
55:d6:f5:bb:b9:c8:c1:33:71:4c:1d:10:a1:97:db:
34:75:ed:7a:c8:9a:39:24:19:14:53:a1:20:08:f3:
24:68:c9:d4:e2:9e:d1:19:d3:0d:22:cc:87:5c:49:
8f:9b:4f:59:34:d8:38:ab:a1:05:a9:b5:5e:0f:ec:
c5:54:2b:ba:ef:3c:e1:72:c7:83:13:ec:f5:c9:9d:
a2:cb:71:3c:9c:04:f1:01:30:5d:f8:d8:df:17:7a:
62:cb:c1:b7:74:f1:30:15:0a:b8:26:fb:7d:93:ad:
8b:b6:ac:10:f8:a6:42:1c:ce:9d:e5:d4:ab:4f:ca:
e5:41:ac:7b:2c:ab:5d:8e:44:ef:06:e1:11:80:d7:
56:a7:74:d4:e4:8d:db:0e:7a:fb:c9:bb:7e:46:a1:
18:5a:ae:ba:8c:2d:81:5c:12:07:eb:09:62:86:99:
fb:a5:18:80:4b:ad:10:95:7a:48:02:c2:07:7b:a3:
d5:91:43:19:c2:87:d9:ea:a2:63:80:91:b4:fe:d5:
eb:4b:f0:ac:c9:5e:7b:86:28:c6:93:f2:06:c8:61:
f5:be:41:69:18:71:67:f1:25:af:b8:03:6a:0c:16:
4e:84:1e:85:c7:90:9e:6e:b9:94:0b:c0:f0:c9:fb:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C1:43:DB:90:68:C2:0B:33:93:77:F3:15:DB:B3:BC:44:80:77:79
X509v3 Authority Key Identifier:
keyid:8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:84:da:dc:91:52:dd:3c:56:bb:6d:7a:0a:ef:a2:15:b3:70:
16:e6:ab:fd:51:18:31:a2:b9:0d:7b:7f:58:bf:f9:ba:a9:4e:
1b:a1:b9:f0:f0:99:c6:78:ed:6f:a9:bb:9f:e6:f2:01:24:15:
d3:ba:53:19:b5:04:59:3d:7f:19:b9:0c:86:b6:79:38:90:22:
44:33:78:a8:bb:35:e6:ae:e8:c4:94:db:49:da:61:01:86:68:
9c:90:d1:a7:28:36:52:b8:fe:f9:81:b5:3b:cd:73:44:89:2d:
67:11:6c:7a:57:02:ec:04:7f:ca:b8:45:39:69:3b:5b:62:7a:
46:f9:d3:e1:f3:a2:db:b7:d3:bf:74:6b:96:65:08:67:15:83:
ac:8c:ad:50:6c:fd:c8:ad:63:40:38:69:4f:ba:83:da:52:6d:
a8:d1:37:44:59:5a:39:84:f7:d2:48:f0:42:4f:cf:2f:09:f7:
15:a0:14:ac:dd:65:34:d9:30:34:44:67:b8:0e:c6:60:e4:bd:
51:9e:c8:a0:2f:cd:c2:ee:e9:c6:14:22:28:bf:fa:83:e1:82:
c9:c6:da:6f:31:84:43:32:7e:33:21:86:39:1e:c6:1b:ec:50:
35:7d:ce:3f:08:6a:46:fd:f0:e0:d4:46:fb:e3:c5:68:e5:47:
3a:88:cc:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZBQxDBcj/uAHsDo1Ni4V4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNTAwMmY2MzllODE5NThkMGY5YjM1ODVhZWQ3NjcwN2Qy
NjI1ZGUwHhcNMjUwNDE3MDEwMDM2WhcNMjUwNDE4MDEwMDM2WjAzMTEwLwYDVQQD
EygwM2MxNDNkYjkwNjhjMjBiMzM5Mzc3ZjMxNWRiYjNiYzQ0ODA3Nzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNq0qoyk63jY+KLLhNhV1vW7ucjB
M3FMHRChl9s0de16yJo5JBkUU6EgCPMkaMnU4p7RGdMNIsyHXEmPm09ZNNg4q6EF
qbVeD+zFVCu67zzhcseDE+z1yZ2iy3E8nATxATBd+NjfF3piy8G3dPEwFQq4Jvt9
k62LtqwQ+KZCHM6d5dSrT8rlQax7LKtdjkTvBuERgNdWp3TU5I3bDnr7ybt+RqEY
Wq66jC2BXBIH6wlihpn7pRiAS60QlXpIAsIHe6PVkUMZwofZ6qJjgJG0/tXrS/Cs
yV57hijGk/IGyGH1vkFpGHFn8SWvuANqDBZOhB6Fx5CebrmUC8DwyfsEZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPBQ9uQaMILM5N38xXbs7xEgHd5MB8GA1UdIwQY
MBaAFIxQAvY56BlY0PmzWFrtdnB9JiXeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakZBQzlqbm9HVmpRLWJOWVd1MTJjSDBtSmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zYTYxMjgtYmYwMy00Y2E1LWE3NjYt
NmYwNjE5MTQ0NGFjLzEvakZBQzlqbm9HVmpRLWJOWVd1MTJjSDBtSmQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zYTYxMjgtYmYwMy00Y2E1LWE3NjYtNmYwNjE5MTQ0NGFj
LzEvakZBQzlqbm9HVmpRLWJOWVd1MTJjSDBtSmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4Ta3JFS
3TxWu216Cu+iFbNwFuar/VEYMaK5DXt/WL/5uqlOG6G58PCZxnjtb6m7n+byASQV
07pTGbUEWT1/GbkMhrZ5OJAiRDN4qLs15q7oxJTbSdphAYZonJDRpyg2Urj++YG1
O81zRIktZxFselcC7AR/yrhFOWk7W2J6RvnT4fOi27fTv3RrlmUIZxWDrIytUGz9
yK1jQDhpT7qD2lJtqNE3RFlaOYT30kjwQk/PLwn3FaAUrN1lNNkwNERnuA7GYOS9
UZ7IoC/Nwu7pxhQiKL/6g+GCycbabzGEQzJ+MyGGOR7GG+xQNX3OPwhqRv3w4NRG
++PFaOVHOojMyg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:31:12 2025 by rpki-client