Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
File: JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft (raw, json)
Hash identifier: VTxXN30laddBP62MVM1mVXbtgM8YjOlJ5+SaTO0MZQo=
Subject key identifier: BA:80:3C:7B:98:99:A1:A1:4F:C4:DA:0B:9D:1B:9E:33:55:C6:A8:64
Authority key identifier: 25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
Certificate issuer: /CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Certificate serial: 01965C159CAB18B31FFDCF2068ABABF3237A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
Manifest number: 0512
Signing time: Tue 22 Apr 2025 06:00:42 +0000
Manifest this update: Tue 22 Apr 2025 06:00:42 +0000
Manifest next update: Wed 23 Apr 2025 06:00:42 +0000
Files and hashes: 1: JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl (hash: k+D/6Tb5aBjhrHtIzP5SjKjkc8Pmv+hP9Ir7Mc4byFA=)
2: sP-bFJ2GmNkHBQJTvI6gfR-P34M.roa (hash: YAE1riF3M5+gJzUwR1Sf1tDjF0W3/xjSiT+4/+dNn0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:9c:ab:18:b3:1f:fd:cf:20:68:ab:ab:f3:23:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Validity
Not Before: Apr 22 06:00:42 2025 GMT
Not After : Apr 23 06:00:42 2025 GMT
Subject: CN=ba803c7b9899a1a14fc4da0b9d1b9e3355c6a864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:f5:1a:15:1f:56:e4:b6:a7:d5:1f:b9:49:
b8:40:59:6e:b3:e2:43:c6:4f:b7:89:f5:fa:d0:b3:
e4:7b:b2:e1:f8:21:9c:3f:8d:78:48:5c:8e:0d:28:
8e:93:33:9f:b3:6f:94:4f:e3:a3:4a:59:61:24:03:
86:8c:ae:3e:68:4c:42:f8:ce:2a:1f:ac:dc:c2:ea:
9d:57:79:a9:fc:8c:e2:0a:a9:14:28:99:8d:2d:12:
68:09:c5:33:21:73:f8:8d:87:80:a4:44:bb:18:26:
bd:ac:1d:1b:d3:1e:77:eb:a8:4a:3f:4c:0a:17:f9:
82:da:26:d1:d6:b5:e2:c3:a2:62:c1:41:d2:37:5f:
c2:56:03:bc:69:38:30:ae:cf:10:0e:38:1f:1a:55:
f1:a0:41:15:a8:6d:3d:5e:d5:03:6a:07:48:7c:29:
a0:2f:91:13:56:00:28:17:66:fd:63:bb:36:93:b8:
43:2d:d7:28:9d:9f:38:87:f2:f5:1f:53:79:77:ad:
5b:37:e5:f8:39:db:8b:a8:9a:c8:cc:2a:e6:98:8e:
f1:88:c2:61:c6:dc:a5:8a:17:70:ee:01:ef:7d:13:
6b:12:4b:14:58:6a:3a:77:38:b3:8d:1c:06:11:bb:
37:fb:53:b2:6b:b4:a7:3a:4e:12:e7:99:6c:d6:52:
d0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:80:3C:7B:98:99:A1:A1:4F:C4:DA:0B:9D:1B:9E:33:55:C6:A8:64
X509v3 Authority Key Identifier:
keyid:25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c8:7d:81:62:c3:36:19:45:d8:50:9b:53:fd:38:62:32:89:
55:e6:d9:e1:0c:c1:e3:81:16:40:2a:66:88:f8:68:67:45:3e:
33:f1:1f:df:20:61:d8:c6:33:c2:83:ee:3f:e8:28:77:31:1e:
9f:b8:79:7a:51:70:ed:90:20:84:e1:8f:bc:e6:82:e1:50:e7:
f4:30:13:9e:5f:db:be:b1:24:69:e4:52:54:88:bc:da:bf:e4:
70:57:3f:34:a7:08:1d:f8:1a:06:c4:4d:48:76:15:51:0f:34:
82:dc:8c:7c:53:45:5e:b4:cf:d2:e3:99:0c:c6:99:07:b1:7e:
e5:b2:6e:7a:aa:69:a8:f3:93:1b:66:d8:ad:e7:0c:01:7c:ed:
a5:de:1a:19:9c:43:7a:34:43:7f:c0:4d:1f:48:17:b6:47:ca:
96:c2:d2:d5:23:07:82:b5:38:c8:da:2e:33:8c:0c:25:d3:1b:
f8:45:d0:bc:f8:0e:7a:21:1b:28:8a:99:85:cf:ec:61:1a:52:
c9:fd:0b:9e:30:37:ca:0a:fe:28:1f:62:10:ee:7d:b4:65:8a:
67:93:b6:a0:31:4f:a5:d7:6b:b1:ec:e5:06:98:6f:18:c5:ad:
c7:34:73:0e:e2:d1:d0:29:fb:ca:28:ab:b0:66:27:0f:93:18:
51:5a:65:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcFZyrGLMf/c8gaKur8yN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZjNmYjJiMWNiNTBhM2ZjYzY0MjYwODYzM2Y1MTIzNzUy
MjZkMWYwHhcNMjUwNDIyMDYwMDQyWhcNMjUwNDIzMDYwMDQyWjAzMTEwLwYDVQQD
EyhiYTgwM2M3Yjk4OTlhMWExNGZjNGRhMGI5ZDFiOWUzMzU1YzZhODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvub1GhUfVuS2p9UfuUm4QFlus+JD
xk+3ifX60LPke7Lh+CGcP414SFyODSiOkzOfs2+UT+OjSllhJAOGjK4+aExC+M4q
H6zcwuqdV3mp/IziCqkUKJmNLRJoCcUzIXP4jYeApES7GCa9rB0b0x5366hKP0wK
F/mC2ibR1rXiw6JiwUHSN1/CVgO8aTgwrs8QDjgfGlXxoEEVqG09XtUDagdIfCmg
L5ETVgAoF2b9Y7s2k7hDLdconZ84h/L1H1N5d61bN+X4OduLqJrIzCrmmI7xiMJh
xtylihdw7gHvfRNrEksUWGo6dzizjRwGEbs3+1Oya7SnOk4S55ls1lLQrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqAPHuYmaGhT8TaC50bnjNVxqhkMB8GA1UdIwQY
MBaAFCXz+ysctQo/zGQmCGM/USN1Im0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmZQN0t4eTFDal9NWkNZSVl6OVJJM1VpYlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hNGNjYTEtNjUxMi00NjYwLTg3MzUt
Nzg3YWFhNDQ0Y2RhLzEvSmZQN0t4eTFDal9NWkNZSVl6OVJJM1VpYlI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hNGNjYTEtNjUxMi00NjYwLTg3MzUtNzg3YWFhNDQ0Y2Rh
LzEvSmZQN0t4eTFDal9NWkNZSVl6OVJJM1VpYlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsh9gWLD
NhlF2FCbU/04YjKJVebZ4QzB44EWQCpmiPhoZ0U+M/Ef3yBh2MYzwoPuP+godzEe
n7h5elFw7ZAghOGPvOaC4VDn9DATnl/bvrEkaeRSVIi82r/kcFc/NKcIHfgaBsRN
SHYVUQ80gtyMfFNFXrTP0uOZDMaZB7F+5bJueqppqPOTG2bYrecMAXztpd4aGZxD
ejRDf8BNH0gXtkfKlsLS1SMHgrU4yNouM4wMJdMb+EXQvPgOeiEbKIqZhc/sYRpS
yf0LnjA3ygr+KB9iEO59tGWKZ5O2oDFPpddrsezlBphvGMWtxzRzDuLR0Cn7yiir
sGYnD5MYUVplFg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:49 2025 by rpki-client