Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File: Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier: 6n2QEgTkH7kdUs9tSoW7WzOw9iXvFTMx9BXwTv5v0nk=
Subject key identifier: 30:AA:A0:9E:69:89:45:94:BA:97:C9:CA:18:C5:21:15:30:C3:39:89
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 019651C8DD2F4C798CB0259319E088DA0AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 06:00:40 +0000
Manifest this update: Sun 20 Apr 2025 06:00:40 +0000
Manifest next update: Mon 21 Apr 2025 06:00:40 +0000
Files and hashes: 1: 6s_6R9Qg6B0BWMzsSYadcyCPTNI.roa (hash: 0TX6RB/i/PYM+jHhKWcDxzPxSqvqvW8BUSQ5qekuotk=)
2: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: mCtLpneq/u/pZ1GOh1BjjbGAvMYowxxT7n/6hSSxEQg=)
3: On6P0oyCVsJaxIEE3GftNC4qztw.roa (hash: MHdX24gf5gM9PdREHRYQX0s+qP7Sh6jKR9PNtNbtiPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:dd:2f:4c:79:8c:b0:25:93:19:e0:88:da:0a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Apr 20 06:00:40 2025 GMT
Not After : Apr 21 06:00:40 2025 GMT
Subject: CN=30aaa09e69894594ba97c9ca18c5211530c33989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:59:41:3f:89:7b:68:b5:01:3a:a1:bd:11:
fa:e7:de:6c:5f:70:10:79:b3:11:6f:2d:7a:72:2c:
62:46:1b:b7:bb:28:71:ad:72:5e:ac:71:4d:10:f5:
ec:a9:16:75:71:c5:ca:71:48:6c:c2:7a:29:90:68:
e3:ad:ed:18:56:5f:5a:c0:3a:be:f5:ee:53:9a:18:
ad:1b:98:9f:35:6e:f1:9a:3b:92:c2:61:c4:9a:b8:
b3:75:ed:88:2c:20:d5:41:b4:b6:bc:f5:cb:91:90:
d4:6d:79:bd:23:26:66:f3:4d:23:cf:c1:27:5e:8d:
ec:08:df:e7:70:48:d8:1d:4d:db:b5:32:fa:a0:de:
49:1c:d9:3a:10:84:60:c0:91:21:ad:43:5c:ed:ec:
22:47:5b:7b:6d:6e:87:99:b4:76:5c:4a:03:ad:8b:
a0:4a:b0:62:18:53:4e:32:c9:9c:17:84:b5:c2:1d:
0a:e6:66:d3:d3:89:e0:d1:d7:c4:21:f4:bb:72:73:
a6:d9:a8:f3:30:fd:b1:7f:16:0a:c3:df:a3:3a:a2:
2b:1a:38:5c:b7:15:16:03:66:e1:10:a4:2d:dd:7d:
8f:53:a7:8a:7c:09:01:4c:53:80:3f:2d:dd:3b:a7:
b0:be:f2:d3:27:b4:b5:c8:1e:dd:fc:55:25:58:36:
a2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AA:A0:9E:69:89:45:94:BA:97:C9:CA:18:C5:21:15:30:C3:39:89
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ce:f5:2d:2b:49:fb:cd:aa:5b:39:60:aa:47:e1:69:1f:70:
2b:bd:37:82:c6:93:72:af:fe:16:c4:1b:83:6f:71:24:58:16:
81:c4:e8:ca:aa:1c:93:eb:65:11:d1:12:5d:59:28:d4:bf:f3:
8d:23:e7:75:6e:b1:b2:24:44:6d:c6:17:3c:d7:9d:4c:0e:ef:
e8:35:7c:d8:65:ed:88:1b:e4:2f:37:fb:98:d4:91:19:3c:c8:
14:2e:34:aa:69:b9:6c:1b:3f:14:15:a5:ce:c1:c4:cc:27:b8:
19:5f:d2:00:45:ed:9f:d4:98:d6:57:b7:71:71:5e:92:30:cd:
00:2c:ed:82:9b:f5:1b:bb:23:26:2a:40:cb:63:8b:32:36:41:
40:57:8b:9e:b4:c5:61:36:50:17:07:83:0c:a4:93:62:c0:4a:
67:63:45:62:79:62:3f:b4:b6:a4:a9:76:54:94:56:7b:34:5c:
ce:b5:6b:60:01:f6:fe:89:00:0f:e3:0c:55:73:6f:ef:9a:bc:
4d:54:97:8e:17:9e:bf:03:f9:00:75:f6:e7:ce:d0:74:3f:4a:
ed:95:90:1b:10:cf:fc:60:bf:7d:3c:bc:08:b0:81:83:fa:40:
3c:9e:95:2f:41:ae:6c:e3:bd:3c:da:a6:d2:60:0a:cd:30:93:
6d:88:08:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRyN0vTHmMsCWTGeCI2grjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmRkYWUwNGRiY2IxZjgyZjU1YjA3ODMwN2JhNGIwODRi
OTk0YmIwHhcNMjUwNDIwMDYwMDQwWhcNMjUwNDIxMDYwMDQwWjAzMTEwLwYDVQQD
EygzMGFhYTA5ZTY5ODk0NTk0YmE5N2M5Y2ExOGM1MjExNTMwYzMzOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXtZQT+Je2i1ATqhvRH6595sX3AQ
ebMRby16cixiRhu3uyhxrXJerHFNEPXsqRZ1ccXKcUhswnopkGjjre0YVl9awDq+
9e5TmhitG5ifNW7xmjuSwmHEmrizde2ILCDVQbS2vPXLkZDUbXm9IyZm800jz8En
Xo3sCN/ncEjYHU3btTL6oN5JHNk6EIRgwJEhrUNc7ewiR1t7bW6HmbR2XEoDrYug
SrBiGFNOMsmcF4S1wh0K5mbT04ng0dfEIfS7cnOm2ajzMP2xfxYKw9+jOqIrGjhc
txUWA2bhEKQt3X2PU6eKfAkBTFOAPy3dO6ewvvLTJ7S1yB7d/FUlWDaimQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCqoJ5piUWUupfJyhjFIRUwwzmJMB8GA1UdIwQY
MBaAFCa92uBNvLH4L1WweDB7pLCEuZS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mZWIzYmEtZWU5MC00ZjAzLTllMDAt
ZjYxNzlhOTEwYjE1LzEvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mZWIzYmEtZWU5MC00ZjAzLTllMDAtZjYxNzlhOTEwYjE1
LzEvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACc71LStJ
+82qWzlgqkfhaR9wK703gsaTcq/+FsQbg29xJFgWgcToyqock+tlEdESXVko1L/z
jSPndW6xsiREbcYXPNedTA7v6DV82GXtiBvkLzf7mNSRGTzIFC40qmm5bBs/FBWl
zsHEzCe4GV/SAEXtn9SY1le3cXFekjDNACztgpv1G7sjJipAy2OLMjZBQFeLnrTF
YTZQFweDDKSTYsBKZ2NFYnliP7S2pKl2VJRWezRczrVrYAH2/okAD+MMVXNv75q8
TVSXjheevwP5AHX2587QdD9K7ZWQGxDP/GC/fTy8CLCBg/pAPJ6VL0GubOO9PNqm
0mAKzTCTbYgIcQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:00 2025 by rpki-client