Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
File: jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft (raw, json)
Hash identifier: vORjta9cp7BF41ie769fK6xfkQ9Dl7+tV8JLG8F8Xws=
Subject key identifier: BA:5C:44:EB:17:96:CF:D9:90:8F:04:62:A1:AF:7C:36:FC:8E:59:E3
Authority key identifier: 8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
Certificate issuer: /CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Certificate serial: 01964FDA7F6D16ECFAF105EB37764106F0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
Manifest number: 0AE7
Signing time: Sat 19 Apr 2025 21:00:41 +0000
Manifest this update: Sat 19 Apr 2025 21:00:41 +0000
Manifest next update: Sun 20 Apr 2025 21:00:41 +0000
Files and hashes: 1: jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl (hash: CQuZaiU3mRh1xKJNx0UK/unv6lMUmAwgtCaK9c1vRBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:7f:6d:16:ec:fa:f1:05:eb:37:76:41:06:f0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Validity
Not Before: Apr 19 21:00:41 2025 GMT
Not After : Apr 20 21:00:41 2025 GMT
Subject: CN=ba5c44eb1796cfd9908f0462a1af7c36fc8e59e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:ec:59:8c:99:cf:a7:10:1e:60:ec:8c:a2:
a3:9a:18:c6:0c:a9:28:e1:a3:ef:ed:48:84:1d:6e:
94:74:b0:5d:ff:d2:2b:ce:c0:6a:ab:c6:96:e4:bf:
cc:46:1c:2b:c0:47:c8:a3:95:dc:81:e7:a5:8b:a2:
b2:65:e5:e3:85:83:ee:ae:c2:6c:3a:fe:02:75:6c:
be:6c:97:12:7f:1a:36:ce:09:03:7a:d3:39:30:86:
a3:c3:08:22:cb:93:2a:8d:2d:2c:a4:53:52:f5:89:
08:10:19:7e:6f:3c:5d:87:1a:d5:36:66:cf:ae:2a:
82:e4:5c:3c:5f:49:c3:aa:03:68:a0:06:0b:c3:db:
46:16:4e:91:30:9e:70:68:6a:06:c5:69:8e:09:e7:
7b:c1:8e:23:bb:3a:3f:26:48:75:46:22:8d:1b:1b:
69:a8:b8:85:b8:6b:a3:7b:48:76:57:aa:ef:8d:7f:
e4:7e:af:8a:7c:a7:3a:09:fe:d4:e4:f3:95:7f:1b:
79:1e:74:f3:6d:98:eb:7a:46:22:96:3b:9f:a1:72:
5a:ce:68:d8:ff:d8:0e:f5:72:24:e5:b1:44:7e:2e:
d4:09:13:52:e0:6b:b1:3f:6d:52:af:f8:b3:76:97:
38:cd:54:64:af:47:32:57:9f:90:18:f7:bb:6a:ac:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5C:44:EB:17:96:CF:D9:90:8F:04:62:A1:AF:7C:36:FC:8E:59:E3
X509v3 Authority Key Identifier:
keyid:8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ce:87:3f:6c:9a:58:c2:07:4a:81:a2:4c:ac:af:b5:79:8c:
18:11:7e:62:23:b7:74:7b:ad:ca:bd:44:57:db:66:4f:34:c4:
8d:d1:36:07:83:83:05:4a:a6:6c:75:42:50:e9:20:d4:b6:be:
00:7f:e2:e2:2c:68:e7:8d:b3:73:f8:cf:97:79:47:c0:8c:e6:
88:cb:f7:fc:ff:e5:4c:38:e7:b3:37:1f:23:5e:0e:7c:14:5d:
dc:94:96:b9:c1:3b:ff:f6:ce:a1:d2:29:70:4d:d7:8f:d7:7c:
1e:1e:43:88:1b:04:10:30:64:1b:f6:2b:c7:71:c4:2c:86:53:
7b:95:92:f5:9b:22:a7:16:7c:20:9d:56:e2:a3:f6:e3:88:27:
a9:08:33:46:75:0f:dc:d0:9b:7a:1b:21:4d:18:ea:c3:ac:eb:
c7:66:d5:77:21:f3:da:65:70:7f:01:a4:e6:e2:0c:3d:4d:2a:
85:a7:ce:e8:bc:c3:8e:f5:41:22:c9:75:a4:78:90:bf:52:d8:
af:cd:ae:56:78:8f:ee:91:56:1e:8e:5c:b3:51:5b:89:68:77:
a6:32:29:30:18:6a:f5:5e:8c:b7:46:9c:ba:90:e6:4c:be:61:
5e:ad:60:37:b7:a5:0d:96:53:b3:ac:0b:e3:26:45:dd:48:ee:
87:a5:95:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZP2n9tFuz68QXrN3ZBBvDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDRjNjE1ZTBkYjBjNWI5OGE4MGIyNWI1MmQ4OTMyZGJm
ZDA1ZGYwHhcNMjUwNDE5MjEwMDQxWhcNMjUwNDIwMjEwMDQxWjAzMTEwLwYDVQQD
EyhiYTVjNDRlYjE3OTZjZmQ5OTA4ZjA0NjJhMWFmN2MzNmZjOGU1OWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugvsWYyZz6cQHmDsjKKjmhjGDKko
4aPv7UiEHW6UdLBd/9IrzsBqq8aW5L/MRhwrwEfIo5Xcgeeli6KyZeXjhYPursJs
Ov4CdWy+bJcSfxo2zgkDetM5MIajwwgiy5MqjS0spFNS9YkIEBl+bzxdhxrVNmbP
riqC5Fw8X0nDqgNooAYLw9tGFk6RMJ5waGoGxWmOCed7wY4juzo/Jkh1RiKNGxtp
qLiFuGuje0h2V6rvjX/kfq+KfKc6Cf7U5POVfxt5HnTzbZjrekYiljufoXJazmjY
/9gO9XIk5bFEfi7UCRNS4GuxP21Sr/izdpc4zVRkr0cyV5+QGPe7aqw0mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpcROsXls/ZkI8EYqGvfDb8jlnjMB8GA1UdIwQY
MBaAFI8ExhXg2wxbmKgLJbUtiTLb/QXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80YjdmYTgtZWIxZC00NDQxLWFhMTgt
ZjJiMGIyN2ExY2I2LzEvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80YjdmYTgtZWIxZC00NDQxLWFhMTgtZjJiMGIyN2ExY2I2
LzEvandUR0ZlRGJERnVZcUFzbHRTMkpNdHY5QmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIs6HP2ya
WMIHSoGiTKyvtXmMGBF+YiO3dHutyr1EV9tmTzTEjdE2B4ODBUqmbHVCUOkg1La+
AH/i4ixo542zc/jPl3lHwIzmiMv3/P/lTDjnszcfI14OfBRd3JSWucE7//bOodIp
cE3Xj9d8Hh5DiBsEEDBkG/Yrx3HELIZTe5WS9ZsipxZ8IJ1W4qP244gnqQgzRnUP
3NCbehshTRjqw6zrx2bVdyHz2mVwfwGk5uIMPU0qhafO6LzDjvVBIsl1pHiQv1LY
r82uVniP7pFWHo5cs1FbiWh3pjIpMBhq9V6Mt0acupDmTL5hXq1gN7elDZZTs6wL
4yZF3Ujuh6WVew==
-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:08 2025 by rpki-client