Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
File: jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json)
Hash identifier: ZBXc+SFCGZSX6hhd93VKZ//a9GqVLMopm6l3rcSv6Ic=
Subject key identifier: D5:9D:0F:80:41:63:37:C1:08:06:80:54:61:27:BE:0F:27:F0:84:2B
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial: 019510FDC50CDB3CA83B8206A29BB78E50EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
Manifest number: 1454
Signing time: Sun 16 Feb 2025 23:00:21 +0000
Manifest this update: Sun 16 Feb 2025 23:00:21 +0000
Manifest next update: Mon 17 Feb 2025 23:00:21 +0000
Files and hashes: 1: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: UJ3nfN9AL8l1y/wRGuQeoJ3+2Q60dbNqCGX0JPCLm48=)
2: nAc1q3nfY2rahmh9ClFRUbi5r8Q.roa (hash: QqGmTANPkdGPtd0qcxYu7kXnGVs9toB0HFWCS2h8KYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:c5:0c:db:3c:a8:3b:82:06:a2:9b:b7:8e:50:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Validity
Not Before: Feb 16 23:00:21 2025 GMT
Not After : Feb 17 23:00:21 2025 GMT
Subject: CN=d59d0f80416337c1080680546127be0f27f0842b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:95:a9:0b:b8:e4:1f:af:a3:f9:f0:6e:3b:
1f:54:47:a0:a1:ca:ab:6b:c3:c7:61:b2:40:70:6c:
67:76:96:5b:52:bd:d2:e6:cb:06:76:77:54:a4:f6:
df:af:ad:c3:51:54:46:68:96:29:e9:1a:ff:48:df:
f3:cf:7e:ee:17:26:ef:90:78:e2:44:52:ff:b2:77:
cc:71:af:45:a6:8b:9f:3d:e0:e3:93:66:0f:ce:f7:
9e:12:f4:93:b3:68:46:60:6b:50:f0:4f:64:fa:70:
f8:ef:91:a7:05:52:1f:f3:71:aa:90:0e:dc:40:45:
7a:0e:18:43:b5:1b:7a:81:ac:59:3c:d7:be:ca:4d:
e4:7d:67:15:95:1a:64:60:6a:a0:5d:20:db:8b:ad:
3d:eb:66:9b:1e:11:38:02:87:b5:b4:5c:81:28:1a:
5f:eb:f1:79:ed:bc:41:15:43:70:49:50:cc:a9:20:
1b:fc:ef:1b:47:f2:75:3b:14:a0:42:82:a7:18:62:
a4:08:4b:2d:cd:db:97:8c:b7:c4:d1:6f:7e:99:3b:
3e:d2:ce:e2:71:02:c5:d7:67:29:ea:a8:8d:7b:20:
7a:8c:3c:d6:92:5c:66:87:9e:6f:ee:d6:82:30:f3:
c5:1d:52:cc:e7:ad:cd:d8:bb:38:11:82:2b:74:80:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9D:0F:80:41:63:37:C1:08:06:80:54:61:27:BE:0F:27:F0:84:2B
X509v3 Authority Key Identifier:
keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b9:9e:1a:4f:84:7f:a1:5c:1a:58:8e:44:03:c2:39:ce:e9:
02:5b:91:62:b3:eb:52:89:54:53:4a:8f:df:f9:db:59:16:be:
81:66:34:d4:3e:57:e3:45:c4:12:d1:c4:82:a7:4a:f9:fa:6b:
cd:89:59:5c:1e:50:5c:21:b1:84:88:d6:4f:30:da:6d:ff:34:
a5:fd:0a:9d:6e:93:ea:aa:8b:2a:2b:e2:ed:15:7c:09:c7:be:
d7:45:eb:4f:2e:de:c4:92:66:8c:8d:e0:f6:6b:03:7e:81:af:
74:5e:b7:4c:c8:b1:36:8f:0f:36:00:89:92:cf:ed:c1:0c:2e:
62:95:39:cc:33:0a:a1:04:20:1e:a3:96:be:c6:f7:5f:ce:b3:
dd:cf:8d:27:7c:56:eb:b2:a1:73:7b:58:06:c6:81:b5:11:c1:
36:63:d8:1e:e6:3d:01:bf:5e:78:61:44:9f:34:21:3c:65:58:
c8:32:79:27:f6:5f:d1:6e:35:03:8f:53:72:11:3c:3e:2b:a0:
06:a3:60:86:98:09:d6:a2:65:2e:a3:16:38:60:08:8b:e6:ce:
dc:fe:35:3a:00:f2:42:4f:ab:41:e2:ae:d1:fa:a7:b8:d0:e0:
e7:40:05:7e:3a:17:3b:b2:46:d5:47:14:12:79:f0:ea:eb:bb:
98:31:71:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/cUM2zyoO4IGopu3jlDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZTcxN2MyYWE5NjFhYWM0NTAzZjFiNDg0NjRkZjAyMzNj
ZTNmYTkwHhcNMjUwMjE2MjMwMDIxWhcNMjUwMjE3MjMwMDIxWjAzMTEwLwYDVQQD
EyhkNTlkMGY4MDQxNjMzN2MxMDgwNjgwNTQ2MTI3YmUwZjI3ZjA4NDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdCVqQu45B+vo/nwbjsfVEegocqr
a8PHYbJAcGxndpZbUr3S5ssGdndUpPbfr63DUVRGaJYp6Rr/SN/zz37uFybvkHji
RFL/snfMca9FpoufPeDjk2YPzveeEvSTs2hGYGtQ8E9k+nD475GnBVIf83GqkA7c
QEV6DhhDtRt6gaxZPNe+yk3kfWcVlRpkYGqgXSDbi60962abHhE4Aoe1tFyBKBpf
6/F57bxBFUNwSVDMqSAb/O8bR/J1OxSgQoKnGGKkCEstzduXjLfE0W9+mTs+0s7i
cQLF12cp6qiNeyB6jDzWklxmh55v7taCMPPFHVLM563N2Ls4EYIrdID6MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWdD4BBYzfBCAaAVGEnvg8n8IQrMB8GA1UdIwQY
MBaAFI7nF8KqlhqsRQPxtIRk3wIzzj+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xMzBkNzctYzRkYi00ODVhLWJjYmYt
MzI5Y2I1MTZkOTM3LzEvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8xMzBkNzctYzRkYi00ODVhLWJjYmYtMzI5Y2I1MTZkOTM3
LzEvanVjWHdxcVdHcXhGQV9HMGhHVGZBalBPUDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLmeGk+E
f6FcGliORAPCOc7pAluRYrPrUolUU0qP3/nbWRa+gWY01D5X40XEEtHEgqdK+fpr
zYlZXB5QXCGxhIjWTzDabf80pf0KnW6T6qqLKivi7RV8Cce+10XrTy7exJJmjI3g
9msDfoGvdF63TMixNo8PNgCJks/twQwuYpU5zDMKoQQgHqOWvsb3X86z3c+NJ3xW
67Khc3tYBsaBtRHBNmPYHuY9Ab9eeGFEnzQhPGVYyDJ5J/Zf0W41A49TchE8Piug
BqNghpgJ1qJlLqMWOGAIi+bO3P41OgDyQk+rQeKu0fqnuNDg50AFfjoXO7JG1UcU
Ennw6uu7mDFxlA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:42 2025 by rpki-client