Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File: J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier: HC4EMmH4ESUal8WYfH9Gd+4jP2uuk0ES5sIC3a2EpNY=
Subject key identifier: 14:11:6F:66:5B:40:F9:B0:8C:58:CB:ED:99:2E:32:D2:5B:97:75:D1
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 019655DC8BC428A0D53758B8CA67CF36996E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 01:00:39 +0000
Manifest this update: Mon 21 Apr 2025 01:00:39 +0000
Manifest next update: Tue 22 Apr 2025 01:00:39 +0000
Files and hashes: 1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: b8zom8wBaGGincoRRyVOfub0cQ+R7XSmJR+uPy2Z30o=)
2: cSxqzHQIFX03E67QT7FwyB0-2wc.roa (hash: ehpsqzEAcx4o5Hfss771kB3qGbR5m4ewO+AFeZ/9pUw=)
3: d1pbdA__eUq65yVNaUqfoJfF1gA.roa (hash: GBeDmf/sEIKh081o/6CjC+lT/hastrtkWuFWWekc6pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:8b:c4:28:a0:d5:37:58:b8:ca:67:cf:36:99:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Apr 21 01:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=14116f665b40f9b08c58cbed992e32d25b9775d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d2:10:4c:87:e0:c5:d8:60:53:56:84:08:37:
a7:2a:cd:12:ac:83:c4:70:2d:a0:4f:51:f4:be:37:
57:31:8b:0e:6a:b4:a8:82:d2:36:67:00:71:0b:74:
5b:2c:c0:ac:20:4c:9f:4c:80:3a:fa:93:09:ff:cd:
6d:58:46:77:45:12:ab:c4:c1:4a:3b:3c:04:0b:18:
bf:ba:4f:e0:38:c3:4d:b8:90:83:11:c1:7c:3f:58:
07:65:54:0a:87:d5:26:ec:0f:f1:2d:3a:d2:33:e2:
ca:53:0f:3a:c6:03:18:9f:55:be:68:9f:7e:9a:2c:
86:01:f6:dc:5e:fe:3d:2e:84:53:1a:a3:a5:dc:b9:
73:e3:93:3a:55:8d:0e:79:06:1e:bf:a6:77:a9:f5:
6d:39:a1:26:38:5f:76:00:a8:d0:ce:52:f4:9d:2b:
77:33:2f:b9:26:7c:c3:25:f6:3b:58:68:cb:f8:30:
85:3f:68:ce:69:54:49:dd:f2:2c:a3:c3:08:5d:66:
b2:fc:2e:03:d5:0a:79:c6:9e:57:40:7e:f6:9d:25:
81:69:61:49:9b:af:9d:9b:b3:65:87:08:de:9f:1f:
f2:a3:e2:b9:68:8d:71:03:dd:2a:20:c4:de:a8:16:
9f:49:30:7d:cc:24:14:49:be:63:0d:9d:ee:cf:e9:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:11:6F:66:5B:40:F9:B0:8C:58:CB:ED:99:2E:32:D2:5B:97:75:D1
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:55:7a:41:2f:8f:12:cf:85:72:d2:c5:db:32:29:ed:ee:f1:
35:63:e5:27:52:68:d4:ea:a0:f4:19:6f:9b:31:e5:d0:f9:38:
fb:f6:65:78:a7:02:ba:9b:69:5b:74:93:cc:68:17:c8:0a:d8:
2b:6c:7b:1d:c1:9f:d5:5f:5a:f8:c8:c8:66:94:f1:ca:2e:94:
8e:6e:31:b6:62:9d:c4:c1:6f:3b:ef:0e:61:f2:a7:51:ef:03:
07:45:c5:13:74:02:f6:24:67:47:34:51:78:5e:1b:bb:dd:5b:
0f:2a:11:f3:de:b6:31:e4:d7:44:ab:b7:5b:a4:14:3b:c5:84:
c5:9a:80:f2:f2:19:cd:7f:7d:bb:19:69:3a:80:4c:89:2f:c8:
f5:07:10:aa:e1:5d:8d:89:22:c1:38:6f:1c:41:e1:9b:8a:88:
9d:35:72:6f:99:43:46:20:6f:f1:e9:03:34:45:86:95:74:6b:
e0:d0:e6:13:1d:d4:e5:4f:da:62:a1:43:94:73:f7:8d:89:fa:
22:a0:d2:5b:6d:e9:86:59:e2:32:76:34:fa:07:e7:3e:ac:c9:
6a:06:df:2a:36:5a:b6:64:50:ed:76:32:20:84:a9:84:e8:82:
42:a6:29:f6:56:88:b2:a6:91:6f:f5:e3:2f:58:d9:14:b5:a1:
ae:6a:d2:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3IvEKKDVN1i4ymfPNpluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTcxMWNlMzQwMjZlNTdhZjMyOTBjN2RlMmNkMjFkYzY3
MWUwZmMwHhcNMjUwNDIxMDEwMDM5WhcNMjUwNDIyMDEwMDM5WjAzMTEwLwYDVQQD
EygxNDExNmY2NjViNDBmOWIwOGM1OGNiZWQ5OTJlMzJkMjViOTc3NWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dIQTIfgxdhgU1aECDenKs0SrIPE
cC2gT1H0vjdXMYsOarSogtI2ZwBxC3RbLMCsIEyfTIA6+pMJ/81tWEZ3RRKrxMFK
OzwECxi/uk/gOMNNuJCDEcF8P1gHZVQKh9Um7A/xLTrSM+LKUw86xgMYn1W+aJ9+
miyGAfbcXv49LoRTGqOl3Llz45M6VY0OeQYev6Z3qfVtOaEmOF92AKjQzlL0nSt3
My+5JnzDJfY7WGjL+DCFP2jOaVRJ3fIso8MIXWay/C4D1Qp5xp5XQH72nSWBaWFJ
m6+dm7Nlhwjenx/yo+K5aI1xA90qIMTeqBafSTB9zCQUSb5jDZ3uz+nZ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQRb2ZbQPmwjFjL7ZkuMtJbl3XRMB8GA1UdIwQY
MBaAFCfnEc40Am5XrzKQx94s0h3GceD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmMwZjktMjRhNC00NmZkLTgwNDIt
YjcyZTVmZWY4ODZhLzEvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yNmMwZjktMjRhNC00NmZkLTgwNDItYjcyZTVmZWY4ODZh
LzEvSi1jUnpqUUNibGV2TXBESDNpelNIY1p4NFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFV6QS+P
Es+FctLF2zIp7e7xNWPlJ1Jo1Oqg9BlvmzHl0Pk4+/ZleKcCuptpW3STzGgXyArY
K2x7HcGf1V9a+MjIZpTxyi6Ujm4xtmKdxMFvO+8OYfKnUe8DB0XFE3QC9iRnRzRR
eF4bu91bDyoR8962MeTXRKu3W6QUO8WExZqA8vIZzX99uxlpOoBMiS/I9QcQquFd
jYkiwThvHEHhm4qInTVyb5lDRiBv8ekDNEWGlXRr4NDmEx3U5U/aYqFDlHP3jYn6
IqDSW23phlniMnY0+gfnPqzJagbfKjZatmRQ7XYyIISphOiCQqYp9laIsqaRb/Xj
L1jZFLWhrmrSvA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:21 2025 by rpki-client