Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier: 4zbkAewJ6qH09tQpiYdP31C3j9geb/BOD3PRMv279DM=
Subject key identifier: 27:C2:AA:6B:42:F8:3C:4E:C0:F7:28:19:5C:6D:C6:F3:25:98:B3:85
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 0196515AEE6F27DBCE6CC8CC005CC027DCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number: 04A6
Signing time: Sun 20 Apr 2025 04:00:35 +0000
Manifest this update: Sun 20 Apr 2025 04:00:35 +0000
Manifest next update: Mon 21 Apr 2025 04:00:35 +0000
Files and hashes: 1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: BK0qXXsUzCXACkEnGwiJL5gkqpPXStV3VasrL5W9EFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:ee:6f:27:db:ce:6c:c8:cc:00:5c:c0:27:dc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: Apr 20 04:00:35 2025 GMT
Not After : Apr 21 04:00:35 2025 GMT
Subject: CN=27c2aa6b42f83c4ec0f728195c6dc6f32598b385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:53:57:e5:d5:df:cf:af:ab:4a:f0:11:c5:
ef:0b:8c:fe:17:95:63:1b:84:3e:98:23:36:a2:d0:
7d:d8:da:6e:38:e5:07:0e:e3:7b:0b:a1:0e:58:a9:
28:27:61:8b:52:8b:6a:38:fb:36:a0:ef:a6:91:ff:
6c:e4:ee:b9:6f:e2:10:17:56:19:9b:9b:ab:d4:18:
33:62:5f:88:6c:a0:dd:ec:93:d2:29:48:f2:58:af:
0c:d4:d0:e7:a2:9e:d7:bb:9d:95:96:c8:af:cb:18:
7d:6e:e9:8d:a0:c1:93:ed:3f:92:82:72:47:24:f6:
94:60:a0:44:85:4b:25:ab:2b:ad:52:f4:74:23:4c:
28:c3:53:b4:a0:90:cc:44:d4:81:b4:cf:71:b4:f7:
c5:64:20:0a:d8:54:40:2e:67:ec:fb:1f:aa:ef:18:
08:95:3d:75:fd:d8:d9:46:2f:65:c8:ab:d0:e6:3b:
74:e0:7c:c6:dd:1e:78:b4:26:7c:f5:54:c0:16:a6:
d8:a9:b5:03:45:81:8d:b8:ac:7f:de:61:7b:4a:5b:
3f:5a:9d:f5:49:b8:ef:67:b5:7f:c8:17:ea:b7:95:
6c:f3:b2:46:65:0c:84:05:97:02:74:39:6b:7e:41:
22:1c:16:d8:29:14:1d:67:59:b5:ff:d4:90:ef:88:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C2:AA:6B:42:F8:3C:4E:C0:F7:28:19:5C:6D:C6:F3:25:98:B3:85
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b2:1b:09:a8:8d:0e:4f:36:af:2e:1c:e8:2f:44:9b:e3:f9:
29:ac:b3:6e:a0:03:d0:0b:09:c1:bf:73:70:5c:36:2d:8d:c6:
fb:bb:1c:01:52:06:d1:9b:b8:ea:8e:fd:e1:e5:0c:b6:94:c5:
29:54:fd:c6:0b:7d:a3:ec:87:0f:51:5a:e2:59:23:a8:78:07:
ee:0a:10:5b:02:e6:53:0f:c0:fa:3d:de:66:1f:c0:63:1a:a2:
82:7a:bb:21:5c:c7:39:7c:55:e5:e6:90:a7:18:9b:4f:eb:d2:
d2:ad:78:49:96:24:32:89:42:fc:14:98:f7:e2:66:4d:b9:99:
ad:a0:ed:b8:06:1e:b6:8e:f9:7e:71:e4:23:13:79:fd:1d:5c:
de:f3:52:09:b1:f7:de:3c:dd:71:65:cc:f4:1f:95:c0:79:fe:
69:4f:48:33:09:a0:62:95:c1:c4:aa:29:68:8c:e2:af:31:49:
31:23:f1:a9:c5:22:34:07:fc:39:d5:92:c9:34:2f:44:b3:30:
17:1d:39:96:0f:94:d3:a1:39:d7:17:ef:b5:68:f7:8d:a8:5f:
1c:0c:04:0c:44:3e:c7:6a:b6:7c:f7:f5:a6:bc:a3:9e:38:fc:
b8:d6:2f:4e:72:9c:60:d2:b9:69:fc:b9:32:86:ba:f6:66:90:
52:a3:ef:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRWu5vJ9vObMjMAFzAJ9zzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzIwYzVmZjBjZGJlMmQ1MWIwOGI4ZjYwMWU0ZjBhNDQ1
NTBmMzIwHhcNMjUwNDIwMDQwMDM1WhcNMjUwNDIxMDQwMDM1WjAzMTEwLwYDVQQD
EygyN2MyYWE2YjQyZjgzYzRlYzBmNzI4MTk1YzZkYzZmMzI1OThiMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXNTV+XV38+vq0rwEcXvC4z+F5Vj
G4Q+mCM2otB92NpuOOUHDuN7C6EOWKkoJ2GLUotqOPs2oO+mkf9s5O65b+IQF1YZ
m5ur1BgzYl+IbKDd7JPSKUjyWK8M1NDnop7Xu52Vlsivyxh9bumNoMGT7T+SgnJH
JPaUYKBEhUslqyutUvR0I0wow1O0oJDMRNSBtM9xtPfFZCAK2FRALmfs+x+q7xgI
lT11/djZRi9lyKvQ5jt04HzG3R54tCZ89VTAFqbYqbUDRYGNuKx/3mF7Sls/Wp31
SbjvZ7V/yBfqt5Vs87JGZQyEBZcCdDlrfkEiHBbYKRQdZ1m1/9SQ74gLOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfCqmtC+DxOwPcoGVxtxvMlmLOFMB8GA1UdIwQY
MBaAFI0yDF/wzb4tUbCLj2AeTwpEVQ8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80OWMyZTktNDlkZi00MWM3LWJkZDQt
MWI1MTNlYmQ0MzMwLzEvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80OWMyZTktNDlkZi00MWM3LWJkZDQtMWI1MTNlYmQ0MzMw
LzEvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrIbCaiN
Dk82ry4c6C9Em+P5KayzbqAD0AsJwb9zcFw2LY3G+7scAVIG0Zu46o794eUMtpTF
KVT9xgt9o+yHD1Fa4lkjqHgH7goQWwLmUw/A+j3eZh/AYxqignq7IVzHOXxV5eaQ
pxibT+vS0q14SZYkMolC/BSY9+JmTbmZraDtuAYeto75fnHkIxN5/R1c3vNSCbH3
3jzdcWXM9B+VwHn+aU9IMwmgYpXBxKopaIzirzFJMSPxqcUiNAf8OdWSyTQvRLMw
Fx05lg+U06E51xfvtWj3jahfHAwEDEQ+x2q2fPf1pryjnjj8uNYvTnKcYNK5afy5
Moa69maQUqPvOA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:45 2025 by rpki-client