Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
File: J24TUlJErw0uZAq6KbD4I2vGHiA.mft (raw, json)
Hash identifier: nD/SKj4cen/314Tfne6MZgx9BWhFIF7bV9QpJiBZ1Ck=
Subject key identifier: 08:49:DC:83:AC:5E:A5:85:A4:BF:D1:67:A6:71:EC:2E:83:57:5D:90
Authority key identifier: 27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
Certificate issuer: /CN=276e13525244af0d2e640aba29b0f8236bc61e20
Certificate serial: 019649D86B13AFE1A6C5A14F442AE3C809FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
Manifest number: 0189
Signing time: Fri 18 Apr 2025 17:00:42 +0000
Manifest this update: Fri 18 Apr 2025 17:00:42 +0000
Manifest next update: Sat 19 Apr 2025 17:00:42 +0000
Files and hashes: 1: 8EWOooLiQ6us4fENFVrBmODvGtQ.roa (hash: FtJlQkbOynrL0gMJhRO31RjYSiNA8vkfsMUi3PW0gdU=)
2: J24TUlJErw0uZAq6KbD4I2vGHiA.crl (hash: WbT4ZIq0BChGhD0dPcNH7ukZQDjeDfPyf0AxAo3iyjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:6b:13:af:e1:a6:c5:a1:4f:44:2a:e3:c8:09:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276e13525244af0d2e640aba29b0f8236bc61e20
Validity
Not Before: Apr 18 17:00:42 2025 GMT
Not After : Apr 19 17:00:42 2025 GMT
Subject: CN=0849dc83ac5ea585a4bfd167a671ec2e83575d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:c9:9f:5f:3a:22:54:f1:ad:03:2e:16:4b:
33:9e:66:b9:14:0e:77:6e:61:19:de:b5:1f:71:2b:
c3:61:aa:fd:f1:58:bf:ed:e0:da:e8:d4:41:51:db:
91:26:80:c0:4f:46:9e:dd:f6:20:67:25:cf:cb:54:
a1:7e:4e:22:92:55:5f:af:2a:f8:9b:91:7d:92:97:
cc:2e:88:25:56:30:f8:d5:1a:18:ed:aa:12:65:d5:
a4:ae:74:d8:ce:f5:98:28:34:f5:0a:b6:02:8f:05:
51:a8:7c:a7:28:93:8f:f6:d4:20:7d:88:d7:ba:ab:
67:69:93:3c:ab:99:90:ea:ca:ba:18:12:a9:5c:00:
7c:11:0f:12:ef:e3:ba:ca:50:42:81:5d:7f:18:13:
ce:bd:3a:ad:d6:b3:1f:e0:59:94:ef:5f:81:70:27:
06:17:f4:35:e8:85:2b:12:35:27:39:42:cc:47:b3:
89:01:69:33:71:04:90:07:d9:84:d6:02:8d:ce:44:
cc:26:aa:eb:64:51:28:16:86:b1:49:40:df:18:2b:
32:a9:68:a8:3f:ba:95:75:86:18:57:60:fe:2b:1d:
0d:fa:17:ee:82:fe:43:d5:4a:0a:4a:51:e4:4d:46:
ff:35:d6:19:24:1b:4f:2e:f8:71:d9:36:13:35:fd:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:49:DC:83:AC:5E:A5:85:A4:BF:D1:67:A6:71:EC:2E:83:57:5D:90
X509v3 Authority Key Identifier:
keyid:27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f4:bc:63:60:d9:c1:fa:94:e1:cd:9f:1f:35:e5:f2:99:fb:11:
ba:58:56:29:0e:eb:09:06:69:aa:b6:27:a1:4c:95:69:fe:06:
e1:19:cc:ba:a1:7f:70:d6:25:11:21:4c:49:e3:16:2c:de:3f:
8a:92:f1:1f:5d:d6:1f:34:3e:98:9c:a2:80:fe:f0:06:db:23:
78:ab:5e:74:54:71:67:a1:cf:c3:eb:51:a4:fa:53:1f:ad:c7:
c7:75:cb:29:3b:35:6d:d4:a5:07:88:b5:e9:20:ac:d5:2c:c6:
b3:58:c6:aa:bb:b4:b5:4c:f1:a2:78:27:02:42:d4:4a:17:26:
d7:8a:a2:1f:ee:c3:9c:e5:74:df:a0:40:67:79:ad:bc:43:d3:
c9:3e:1c:6e:62:2d:20:37:cc:52:2a:75:b9:17:ee:8b:44:9e:
98:c3:72:e6:d4:98:a5:3b:26:94:6a:11:5d:4e:91:94:68:de:
85:af:c2:f8:d6:d6:45:2c:94:eb:a9:f8:18:60:95:58:4a:16:
a4:05:df:0d:d9:54:48:f3:a3:bb:47:6f:0d:ed:c0:52:8a:bc:
e2:26:6e:5b:68:d8:2f:fb:25:09:4e:9e:94:68:71:44:9f:a8:
cf:c8:dd:16:e9:19:44:38:64:3f:de:94:f1:a9:b3:24:94:c5:
6a:ba:98:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJ2GsTr+GmxaFPRCrjyAn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NmUxMzUyNTI0NGFmMGQyZTY0MGFiYTI5YjBmODIzNmJj
NjFlMjAwHhcNMjUwNDE4MTcwMDQyWhcNMjUwNDE5MTcwMDQyWjAzMTEwLwYDVQQD
EygwODQ5ZGM4M2FjNWVhNTg1YTRiZmQxNjdhNjcxZWMyZTgzNTc1ZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeLJn186IlTxrQMuFksznma5FA53
bmEZ3rUfcSvDYar98Vi/7eDa6NRBUduRJoDAT0ae3fYgZyXPy1Shfk4iklVfryr4
m5F9kpfMLoglVjD41RoY7aoSZdWkrnTYzvWYKDT1CrYCjwVRqHynKJOP9tQgfYjX
uqtnaZM8q5mQ6sq6GBKpXAB8EQ8S7+O6ylBCgV1/GBPOvTqt1rMf4FmU71+BcCcG
F/Q16IUrEjUnOULMR7OJAWkzcQSQB9mE1gKNzkTMJqrrZFEoFoaxSUDfGCsyqWio
P7qVdYYYV2D+Kx0N+hfugv5D1UoKSlHkTUb/NdYZJBtPLvhx2TYTNf2/xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhJ3IOsXqWFpL/RZ6Zx7C6DV12QMB8GA1UdIwQY
MBaAFCduE1JSRK8NLmQKuimw+CNrxh4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjI0VFVsSkVydzB1WkFxNktiRDRJMnZHSGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zZGQxYWUtN2I5MC00YjU3LThhM2Mt
NDA5OWY0YWE5MzY5LzEvSjI0VFVsSkVydzB1WkFxNktiRDRJMnZHSGlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8zZGQxYWUtN2I5MC00YjU3LThhM2MtNDA5OWY0YWE5MzY5
LzEvSjI0VFVsSkVydzB1WkFxNktiRDRJMnZHSGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA9LxjYNnB
+pThzZ8fNeXymfsRulhWKQ7rCQZpqrYnoUyVaf4G4RnMuqF/cNYlESFMSeMWLN4/
ipLxH13WHzQ+mJyigP7wBtsjeKtedFRxZ6HPw+tRpPpTH63Hx3XLKTs1bdSlB4i1
6SCs1SzGs1jGqru0tUzxongnAkLUShcm14qiH+7DnOV036BAZ3mtvEPTyT4cbmIt
IDfMUip1uRfui0SemMNy5tSYpTsmlGoRXU6RlGjeha/C+NbWRSyU66n4GGCVWEoW
pAXfDdlUSPOju0dvDe3AUoq84iZuW2jYL/slCU6elGhxRJ+oz8jdFukZRDhkP96U
8amzJJTFarqYCA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:05:25 2025 by rpki-client