Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier: u7SdZqwxcnf9PTrGxV+8QSRRSxtRszEJmY9b4ePrs5Q=
Subject key identifier: 27:20:72:24:7F:13:DF:E2:49:37:42:EE:D9:97:48:41:26:20:78:24
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 0196974EECD6D66E0E0AE0081D390BC9D19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number: 05C1
Signing time: Sat 03 May 2025 18:00:54 +0000
Manifest this update: Sat 03 May 2025 18:00:54 +0000
Manifest next update: Sun 04 May 2025 18:00:54 +0000
Files and hashes: 1: 3bmAz9vtv2JfaPatPhAR81BLdD4.roa (hash: pscVtMzNszIXtiYFoQgUwJA4nkNZDSRzSpGrx8TMuU8=)
2: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: yyDhPvOULfnXmlcNLlHg3gXe4utEt4byWLngLzsOenQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 10:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:4e:ec:d6:d6:6e:0e:0a:e0:08:1d:39:0b:c9:d1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: May 3 18:00:54 2025 GMT
Not After : May 4 18:00:54 2025 GMT
Subject: CN=272072247f13dfe2493742eed997484126207824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:57:0e:2a:70:ad:e5:31:b6:ad:d7:8e:90:
65:a1:44:2d:8d:69:8c:a2:d4:50:2e:b3:e5:30:5d:
54:66:db:a8:08:d9:be:56:43:87:3c:3c:f3:f5:a5:
78:a8:91:e2:2b:c6:2d:5f:17:10:bc:56:3f:78:0e:
50:44:a3:1c:bd:b2:88:1e:4b:a7:bc:cc:51:a7:28:
1c:8d:ca:75:05:85:94:75:33:fc:7e:0c:da:83:f1:
6e:70:4b:cd:89:76:db:4b:3a:23:16:ab:1b:75:49:
cd:7b:f7:b5:27:04:b6:eb:09:6d:8a:63:de:9e:57:
59:24:92:d1:9a:bc:64:ea:d2:f4:cf:30:ed:8d:1f:
7e:42:d4:08:ab:47:44:d1:55:a4:ac:c3:50:8f:3d:
f6:46:9d:bc:b8:57:a0:8b:b4:43:10:e9:15:8e:b6:
1c:38:05:f2:d2:ce:e2:c9:e1:e7:59:e2:81:a0:98:
93:c9:60:68:1b:73:32:d8:e2:1e:68:a5:cd:2e:2d:
2d:52:79:14:10:68:38:ef:45:54:95:6b:60:e6:ee:
78:56:cb:27:2c:62:9a:fd:06:5b:93:66:28:7f:90:
83:2b:c5:4e:74:d6:1d:c5:d5:46:b2:3e:41:79:7d:
a4:56:4c:45:11:9f:3f:96:31:62:c2:1d:37:b2:a5:
a6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:20:72:24:7F:13:DF:E2:49:37:42:EE:D9:97:48:41:26:20:78:24
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:92:eb:e8:d6:25:9a:96:e3:b8:c9:9d:d1:4d:fd:9c:da:c6:
6d:b7:2c:94:fa:8c:39:6c:3b:e1:cd:2b:39:d1:cf:f7:5a:6d:
a6:b0:2f:91:88:45:03:4f:27:fd:9e:12:f0:e8:ab:6e:42:01:
ea:3f:ad:53:be:bb:0b:59:67:b0:4a:25:88:ac:a6:70:20:de:
e3:07:e6:89:90:b4:0e:79:a4:67:41:ad:0a:8d:7c:40:c6:95:
0a:f0:0f:96:d4:12:ff:29:b8:05:5a:8a:a1:3e:45:78:54:0f:
59:a1:cf:6f:d6:88:56:c3:f2:41:15:21:80:cd:a5:fb:3d:70:
93:30:d2:45:99:f8:7c:84:5f:5e:04:fd:e1:7b:1a:e3:c4:20:
51:11:74:c3:f1:95:41:a2:d9:8a:3a:ba:c0:64:a4:7c:93:55:
54:ba:4e:c9:91:e3:15:73:bb:52:78:9d:79:d0:67:64:6b:1a:
9c:a8:d5:5c:3d:b7:aa:a7:87:0c:64:84:73:f6:93:4f:15:8a:
92:9d:c7:4d:7c:22:3f:6d:8e:7f:4b:96:8c:51:7c:81:37:1c:
0c:a5:6b:3e:de:33:34:89:b7:bc:bf:de:ec:5e:3e:ab:99:10:
b0:61:5e:44:b2:27:bd:1a:e1:23:94:8b:2f:eb:2a:b1:60:b3:
11:62:f4:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaXTuzW1m4OCuAIHTkLydGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZjI3ZmFlMTUzMGVhNzE2NzA3MGNmMTJjNDg2ODExZDhl
MGJhYzUwHhcNMjUwNTAzMTgwMDU0WhcNMjUwNTA0MTgwMDU0WjAzMTEwLwYDVQQD
EygyNzIwNzIyNDdmMTNkZmUyNDkzNzQyZWVkOTk3NDg0MTI2MjA3ODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkRXDipwreUxtq3XjpBloUQtjWmM
otRQLrPlMF1UZtuoCNm+VkOHPDzz9aV4qJHiK8YtXxcQvFY/eA5QRKMcvbKIHkun
vMxRpygcjcp1BYWUdTP8fgzag/FucEvNiXbbSzojFqsbdUnNe/e1JwS26wltimPe
nldZJJLRmrxk6tL0zzDtjR9+QtQIq0dE0VWkrMNQjz32Rp28uFegi7RDEOkVjrYc
OAXy0s7iyeHnWeKBoJiTyWBoG3My2OIeaKXNLi0tUnkUEGg470VUlWtg5u54Vssn
LGKa/QZbk2Yof5CDK8VOdNYdxdVGsj5BeX2kVkxFEZ8/ljFiwh03sqWmMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcgciR/E9/iSTdC7tmXSEEmIHgkMB8GA1UdIwQY
MBaAFJ7yf64VMOpxZwcM8SxIaBHY4LrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81MjllODQtZmVhMS00NDI5LTgzYjIt
ZGY4MjNlNGRiMWVhLzEvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81MjllODQtZmVhMS00NDI5LTgzYjItZGY4MjNlNGRiMWVh
LzEvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZLr6NYl
mpbjuMmd0U39nNrGbbcslPqMOWw74c0rOdHP91ptprAvkYhFA08n/Z4S8OirbkIB
6j+tU767C1lnsEoliKymcCDe4wfmiZC0DnmkZ0GtCo18QMaVCvAPltQS/ym4BVqK
oT5FeFQPWaHPb9aIVsPyQRUhgM2l+z1wkzDSRZn4fIRfXgT94Xsa48QgURF0w/GV
QaLZijq6wGSkfJNVVLpOyZHjFXO7UnidedBnZGsanKjVXD23qqeHDGSEc/aTTxWK
kp3HTXwiP22Of0uWjFF8gTccDKVrPt4zNIm3vL/e7F4+q5kQsGFeRLInvRrhI5SL
L+sqsWCzEWL0tQ==
-----END CERTIFICATE-----
Generated at Sat May 3 19:47:49 2025 by rpki-client