Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: rFUogLXhUua1ycx1KdsLPnp0W85Rfwd7qH34SbnOVSw=
Subject key identifier: 47:70:64:8E:94:53:4F:D1:96:FD:94:C0:F3:FA:BE:FE:2E:80:F7:BD
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 0196579411C20BCDD86E374122D38A8EB0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 0DD9
Signing time: Mon 21 Apr 2025 09:00:43 +0000
Manifest this update: Mon 21 Apr 2025 09:00:43 +0000
Manifest next update: Tue 22 Apr 2025 09:00:43 +0000
Files and hashes: 1: 7z6VwEslCL2FPJkLcnWBqsZx-Yc.roa (hash: 4HX05uMrwNGyncqNvEyr0SjiIMdyEc2AyvawA9NsEGo=)
2: H1ODV9W4buqhl3EqdtbJBcTx8bE.roa (hash: ACjxboSyCSfEn+fJ3xsL41v0ySwcobd1/VO5RHv6Sbs=)
3: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: zkkEcrST9qgCN+C2zIH1XgXh2e9yD0zq1oS4dE1ggJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:11:c2:0b:cd:d8:6e:37:41:22:d3:8a:8e:b0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Apr 21 09:00:43 2025 GMT
Not After : Apr 22 09:00:43 2025 GMT
Subject: CN=4770648e94534fd196fd94c0f3fabefe2e80f7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6f:d3:f5:df:70:91:4f:99:d6:11:03:de:97:
c9:0d:c1:42:7b:82:a9:dc:86:21:30:72:54:e8:ee:
ca:ba:3c:ad:d7:b5:7f:63:56:54:a7:52:dc:fe:86:
38:ce:53:d5:3b:ca:86:db:8d:14:f5:3f:bf:36:38:
50:5b:b4:b2:9b:0f:55:bf:54:e5:e5:e1:fe:22:2d:
be:03:9d:9f:9c:a7:e8:25:3d:20:97:39:86:ec:9e:
d4:cf:c6:65:66:45:25:43:87:9a:69:c7:be:2d:ec:
5f:cd:3f:56:eb:96:32:88:3d:53:5e:64:f2:87:53:
4f:1e:68:91:54:49:ab:30:51:d7:86:83:b3:c8:28:
d0:6d:9a:1d:1e:56:98:46:10:9f:80:bd:2e:d9:1b:
af:48:cf:7d:02:90:8d:77:39:3e:11:f8:e3:18:1b:
fe:3f:0a:9b:dc:a8:66:41:e1:51:3b:b6:c3:e7:9e:
23:36:7d:3d:dd:e4:02:a2:b5:f4:60:18:3d:5c:3c:
14:40:80:1b:21:17:5b:d9:61:31:9f:1a:c7:b7:8e:
c9:28:cd:7a:94:92:3e:da:51:5f:c5:56:de:c3:36:
e1:4b:5c:6b:c8:a5:e1:5e:4a:51:73:b9:6f:6b:ec:
8d:9f:6e:a0:91:64:54:28:a6:17:71:69:62:24:d0:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:70:64:8E:94:53:4F:D1:96:FD:94:C0:F3:FA:BE:FE:2E:80:F7:BD
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:88:36:73:79:15:7b:4b:69:36:24:d6:4e:6b:fe:6f:97:28:
54:78:b4:f8:0e:13:8c:89:87:21:d0:c7:f6:57:8f:d2:19:10:
ae:cf:96:3d:5c:f3:60:c0:a8:27:5a:2f:1b:17:e9:85:d6:9e:
fa:c7:bb:87:2c:54:57:1d:49:d6:6c:24:37:ef:31:59:f4:13:
4f:4c:ad:c2:46:ce:6c:48:f3:3b:5f:f0:82:3c:e3:2e:b4:b6:
11:d1:ce:6c:39:88:5b:92:6a:91:df:5e:0b:8d:9c:37:00:b8:
19:f5:36:74:a5:1a:d6:ed:f7:d2:35:ed:73:4f:b8:cb:d4:2e:
68:96:50:6e:34:e0:38:fe:9e:12:9c:6f:72:63:18:d9:19:43:
4e:d9:60:c8:c5:1d:fe:40:3c:2a:d5:28:20:6f:35:84:27:47:
d9:e0:9f:36:07:c1:94:56:a6:e0:46:ba:8d:32:8b:ce:91:80:
54:9a:9e:a2:9b:f0:a1:80:46:70:42:dc:b6:2a:21:92:be:af:
45:d7:96:7c:df:df:24:94:3b:af:8a:0e:c3:ff:e7:8a:cc:14:
a9:8e:c6:23:a5:06:aa:65:ec:97:de:58:bb:15:49:db:da:93:
25:75:e8:65:5a:02:85:c3:0d:1b:f9:b0:e7:b9:ae:cb:32:e6:
3c:76:02:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXlBHCC83YbjdBItOKjrC6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YjhkYmQ5N2RlNGNkNDA1OWI1MmU1MTNkY2YzNWNkMzgx
YTMyYjMwHhcNMjUwNDIxMDkwMDQzWhcNMjUwNDIyMDkwMDQzWjAzMTEwLwYDVQQD
Eyg0NzcwNjQ4ZTk0NTM0ZmQxOTZmZDk0YzBmM2ZhYmVmZTJlODBmN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG/T9d9wkU+Z1hED3pfJDcFCe4Kp
3IYhMHJU6O7Kujyt17V/Y1ZUp1Lc/oY4zlPVO8qG240U9T+/NjhQW7Symw9Vv1Tl
5eH+Ii2+A52fnKfoJT0glzmG7J7Uz8ZlZkUlQ4eaace+LexfzT9W65YyiD1TXmTy
h1NPHmiRVEmrMFHXhoOzyCjQbZodHlaYRhCfgL0u2RuvSM99ApCNdzk+EfjjGBv+
Pwqb3KhmQeFRO7bD554jNn093eQCorX0YBg9XDwUQIAbIRdb2WExnxrHt47JKM16
lJI+2lFfxVbewzbhS1xryKXhXkpRc7lva+yNn26gkWRUKKYXcWliJNDZCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdwZI6UU0/Rlv2UwPP6vv4ugPe9MB8GA1UdIwQY
MBaAFCe429l95M1AWbUuUT3PNc04GjKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgt
NWM1NGNkYWQxOWYxLzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgtNWM1NGNkYWQxOWYx
LzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYg2c3kV
e0tpNiTWTmv+b5coVHi0+A4TjImHIdDH9leP0hkQrs+WPVzzYMCoJ1ovGxfphdae
+se7hyxUVx1J1mwkN+8xWfQTT0ytwkbObEjzO1/wgjzjLrS2EdHObDmIW5Jqkd9e
C42cNwC4GfU2dKUa1u330jXtc0+4y9QuaJZQbjTgOP6eEpxvcmMY2RlDTtlgyMUd
/kA8KtUoIG81hCdH2eCfNgfBlFam4Ea6jTKLzpGAVJqeopvwoYBGcELctiohkr6v
RdeWfN/fJJQ7r4oOw//niswUqY7GI6UGqmXsl95YuxVJ29qTJXXoZVoChcMNG/mw
57muyzLmPHYCXQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:31 2025 by rpki-client