
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json)
Hash identifier: F2GREl7cXU8JYk1c5XScOu18oSsn0fv7JGRIl0Jyp/Y=
Subject key identifier: B7:C4:91:69:19:1D:05:DB:E2:C4:16:C2:C1:33:28:03:0D:0C:6E:1D
Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Certificate serial: 019630195511F189FF5C37BC8C0B09847C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
Manifest number: 0213
Signing time: Sun 13 Apr 2025 17:01:28 +0000
Manifest this update: Sun 13 Apr 2025 17:01:28 +0000
Manifest next update: Mon 14 Apr 2025 17:01:28 +0000
Files and hashes: 1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=)
2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: Cqi+wxD4lZdez4MiCObMsViFuZbqnRZy1PUmGPjn1UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:19:55:11:f1:89:ff:5c:37:bc:8c:0b:09:84:7c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Validity
Not Before: Apr 13 17:01:28 2025 GMT
Not After : Apr 14 17:01:28 2025 GMT
Subject: CN=b7c49169191d05dbe2c416c2c13328030d0c6e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:24:95:46:6f:b2:40:83:ce:ba:01:2f:59:
7a:d1:ba:c9:44:1b:6d:05:14:6b:80:14:dd:e1:82:
d0:16:3c:1b:5c:45:e0:bf:b8:80:54:52:79:a6:22:
e0:09:63:0d:5e:c6:4a:5f:2a:6a:2d:53:71:b5:d6:
6f:02:24:18:08:19:fe:67:30:e6:af:45:76:f6:3b:
fd:f3:4b:cd:ad:66:f1:71:47:3c:69:0d:cf:be:a1:
d5:c6:71:58:ee:44:e3:3a:4f:6f:5e:d2:90:ec:ec:
6d:c6:03:35:9b:22:73:e3:6b:1c:88:59:f1:e6:5e:
b4:6c:dc:5a:61:61:92:20:e8:db:b5:45:fd:b4:a9:
64:fc:55:ae:4a:5e:0c:8f:c6:8a:7b:46:72:40:b5:
a3:50:c9:77:ac:a1:53:59:cd:a0:65:9a:0d:3e:b7:
76:79:c0:67:d4:36:cf:80:32:4f:a0:e0:a5:15:33:
7a:ba:72:d5:08:d7:02:b3:80:95:a6:01:52:ce:2b:
b7:96:a5:00:7c:32:3a:4d:b1:ab:d7:8d:f6:14:bd:
c5:3e:6f:44:3f:b7:7f:38:f4:97:b5:27:47:0a:ed:
1c:b5:a9:77:a3:f4:54:bd:9e:58:9d:36:67:69:4d:
93:90:17:b7:49:92:c1:07:a7:24:ef:76:07:5c:d3:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C4:91:69:19:1D:05:DB:E2:C4:16:C2:C1:33:28:03:0D:0C:6E:1D
X509v3 Authority Key Identifier:
keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:55:a6:47:29:ee:c9:f0:72:d4:3b:52:8e:45:cc:ce:ce:a0:
b4:97:55:b0:3b:6f:2f:5f:38:8b:bd:a8:55:33:d6:e9:1d:b4:
e2:27:70:f2:0f:ba:47:59:06:36:42:60:09:43:cc:c5:80:59:
f4:d5:c7:cb:84:6d:46:98:4e:24:df:9f:95:01:e6:31:39:1e:
78:9d:df:3f:62:30:44:8f:51:53:16:81:34:ec:f0:19:0f:31:
76:12:d0:f9:bb:fa:f2:a5:ac:eb:d0:80:96:d4:87:e4:a9:f0:
15:ba:c7:f3:f2:34:f6:24:0e:a0:ca:5b:fb:b4:f5:1b:3b:e4:
7f:a4:40:5f:2a:73:04:d9:41:8a:26:f5:34:59:36:1b:7a:5f:
d9:d6:20:fb:95:75:16:1b:fe:3d:3e:7b:58:98:57:f8:0f:f9:
72:25:2b:ab:a0:25:6b:ee:4d:5b:4a:be:e7:42:ca:d4:ae:fd:
35:b0:af:c9:24:9c:8d:81:7d:93:24:b2:ea:6c:c3:f7:f9:1e:
74:25:d7:33:f5:69:b2:8e:23:8a:73:fb:06:0d:64:3c:a3:25:
53:e6:de:22:b5:58:c4:92:fe:f5:87:c3:19:fe:5e:0a:00:10:
81:b6:3f:c7:38:71:1c:e8:b5:e0:92:9e:00:66:a4:b9:91:63:
60:3a:e0:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYwGVUR8Yn/XDe8jAsJhHx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDI3YTI2MGQ2ZDk2Y2MxMTE1Y2NjZThhOTE0YWZmYjBl
MWQxNmIwHhcNMjUwNDEzMTcwMTI4WhcNMjUwNDE0MTcwMTI4WjAzMTEwLwYDVQQD
EyhiN2M0OTE2OTE5MWQwNWRiZTJjNDE2YzJjMTMzMjgwMzBkMGM2ZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RkklUZvskCDzroBL1l60brJRBtt
BRRrgBTd4YLQFjwbXEXgv7iAVFJ5piLgCWMNXsZKXypqLVNxtdZvAiQYCBn+ZzDm
r0V29jv980vNrWbxcUc8aQ3PvqHVxnFY7kTjOk9vXtKQ7OxtxgM1myJz42sciFnx
5l60bNxaYWGSIOjbtUX9tKlk/FWuSl4Mj8aKe0ZyQLWjUMl3rKFTWc2gZZoNPrd2
ecBn1DbPgDJPoOClFTN6unLVCNcCs4CVpgFSziu3lqUAfDI6TbGr1432FL3FPm9E
P7d/OPSXtSdHCu0ctal3o/RUvZ5YnTZnaU2TkBe3SZLBB6ck73YHXNPMlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfEkWkZHQXb4sQWwsEzKAMNDG4dMB8GA1UdIwQY
MBaAFCZCeiYNbZbMERXMzoqRSv+w4dFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTIt
ODUyOGU1NTMyYzBlLzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTItODUyOGU1NTMyYzBl
LzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlWmRynu
yfBy1DtSjkXMzs6gtJdVsDtvL184i72oVTPW6R204idw8g+6R1kGNkJgCUPMxYBZ
9NXHy4RtRphOJN+flQHmMTkeeJ3fP2IwRI9RUxaBNOzwGQ8xdhLQ+bv68qWs69CA
ltSH5KnwFbrH8/I09iQOoMpb+7T1Gzvkf6RAXypzBNlBiib1NFk2G3pf2dYg+5V1
Fhv+PT57WJhX+A/5ciUrq6Ala+5NW0q+50LK1K79NbCvySScjYF9kySy6mzD9/ke
dCXXM/Vpso4jinP7Bg1kPKMlU+beIrVYxJL+9YfDGf5eCgAQgbY/xzhxHOi14JKe
AGakuZFjYDrgfQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 01:11:49 2025 by rpki-client