Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: xgqSB78BSkm6ngGzPJytWtzfK8s+cBq8EVtq7Qcbh+s=
Subject key identifier: 8D:F5:0A:E8:70:15:31:74:68:E2:A1:60:C6:8B:16:AD:4D:1C:93:6F
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 0196925F447B6F0253734547036DE1A8BBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 152E
Signing time: Fri 02 May 2025 19:00:38 +0000
Manifest this update: Fri 02 May 2025 19:00:38 +0000
Manifest next update: Sat 03 May 2025 19:00:38 +0000
Files and hashes: 1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=)
2: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: cJsKJR9cEC3AV+jrA3KXPWX8ac49gIYUHsuqzaL6U7Q=)
3: tN6Y02H2IthdzXGYlMBx0_9eJb4.roa (hash: QzcILUbWO03GK+EwTtmgiEaoxKfOPkWsQwGCPvmQB1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:5f:44:7b:6f:02:53:73:45:47:03:6d:e1:a8:bb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: May 2 19:00:38 2025 GMT
Not After : May 3 19:00:38 2025 GMT
Subject: CN=8df50ae87015317468e2a160c68b16ad4d1c936f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:98:17:a1:1b:b9:88:ee:84:e5:b7:57:a3:
99:14:15:c9:6f:da:cf:5e:eb:d2:84:53:88:eb:cf:
75:ac:9f:11:ad:12:4c:09:fb:9d:55:99:40:f6:d9:
41:dd:8a:09:54:a4:df:c9:71:b2:02:74:83:7f:f9:
17:a9:42:7f:af:c2:b4:a4:82:ee:37:0f:61:34:9b:
85:f5:7e:1b:29:5b:a4:83:88:5e:0e:75:4b:ba:63:
19:a3:60:da:2b:4a:bb:d9:e5:3f:15:e4:65:5e:aa:
2d:85:1c:e9:e5:aa:b8:4a:0f:a2:a7:8c:2b:ff:a1:
3f:3b:59:38:c0:52:60:c4:4d:63:02:d9:67:1c:90:
3a:d9:6c:a9:2c:d7:fb:71:f8:c3:43:ac:61:a3:c3:
a6:dd:fa:8c:cd:31:96:e0:c4:7b:9a:50:69:82:34:
76:53:c3:a7:56:cd:b3:a2:b6:a2:51:1c:3c:0f:49:
bf:88:4c:65:4d:ba:8d:c8:98:cb:12:eb:6e:29:3a:
79:52:c9:61:c4:49:7c:47:ee:c1:e9:e4:fb:3d:71:
a3:db:02:1e:95:75:50:5d:76:08:65:07:e9:bc:c1:
2e:29:a9:4e:a9:10:cc:e5:d7:d1:77:b4:04:92:c3:
b3:6b:7f:f5:6f:3a:de:3a:5b:b7:7e:ff:83:16:ab:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F5:0A:E8:70:15:31:74:68:E2:A1:60:C6:8B:16:AD:4D:1C:93:6F
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:42:14:4f:d8:2a:51:4f:e6:9f:24:e0:54:b0:c3:04:8a:9f:
e2:1e:0c:00:fc:de:da:34:2e:33:c5:c1:22:3b:4b:62:48:c7:
95:45:bc:e0:cd:0b:ba:3b:4d:fa:f1:34:a8:b5:a7:20:51:6d:
97:75:ba:d9:79:97:41:c3:44:dd:08:b8:cf:ec:b2:d8:16:c4:
04:cf:25:e5:c4:d0:2e:0e:50:94:71:76:a0:25:e4:e5:99:00:
a7:8a:a5:12:87:9b:96:94:75:81:b6:a9:e9:da:5c:c4:62:d3:
ec:d6:ab:a0:91:ac:dd:35:21:04:cc:85:09:a4:ad:8e:4a:a5:
97:b5:b5:2e:27:98:26:1a:6a:19:49:80:e1:5d:20:d5:64:34:
ff:79:88:9e:7a:37:55:f3:c5:f8:ba:d2:d2:87:04:3a:ba:0f:
57:60:d1:37:36:22:00:09:85:d8:d5:d2:0c:3b:9d:7c:dd:64:
26:02:74:86:b9:ca:59:16:8b:ab:d1:ff:f6:58:7a:62:d5:20:
33:75:f1:33:3f:09:f8:42:61:10:a9:f5:58:c2:67:a2:f3:bd:
48:48:ad:85:e0:a3:43:c6:5c:a8:3d:7e:b9:84:3a:6e:3f:61:
d9:06:28:04:ba:52:64:14:2c:0a:9b:3f:9d:72:a9:0e:f0:be:
bc:b0:4f:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaSX0R7bwJTc0VHA23hqLutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDY2Y2I4NDg4ZGFlN2U0MjM0YWE3Yzg5MjQzMGRhZDEx
ZmU1YjEwHhcNMjUwNTAyMTkwMDM4WhcNMjUwNTAzMTkwMDM4WjAzMTEwLwYDVQQD
Eyg4ZGY1MGFlODcwMTUzMTc0NjhlMmExNjBjNjhiMTZhZDRkMWM5MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOmYF6EbuYjuhOW3V6OZFBXJb9rP
XuvShFOI6891rJ8RrRJMCfudVZlA9tlB3YoJVKTfyXGyAnSDf/kXqUJ/r8K0pILu
Nw9hNJuF9X4bKVukg4heDnVLumMZo2DaK0q72eU/FeRlXqothRzp5aq4Sg+ip4wr
/6E/O1k4wFJgxE1jAtlnHJA62WypLNf7cfjDQ6xho8Om3fqMzTGW4MR7mlBpgjR2
U8OnVs2zoraiURw8D0m/iExlTbqNyJjLEutuKTp5UslhxEl8R+7B6eT7PXGj2wIe
lXVQXXYIZQfpvMEuKalOqRDM5dfRd7QEksOza3/1bzreOlu3fv+DFquCnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI31CuhwFTF0aOKhYMaLFq1NHJNvMB8GA1UdIwQY
MBaAFJ0GbLhIja5+QjSqfIkkMNrRH+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQt
M2VmMDJkNTE0MGI3LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQtM2VmMDJkNTE0MGI3
LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkIUT9gq
UU/mnyTgVLDDBIqf4h4MAPze2jQuM8XBIjtLYkjHlUW84M0LujtN+vE0qLWnIFFt
l3W62XmXQcNE3Qi4z+yy2BbEBM8l5cTQLg5QlHF2oCXk5ZkAp4qlEoeblpR1gbap
6dpcxGLT7NaroJGs3TUhBMyFCaStjkqll7W1LieYJhpqGUmA4V0g1WQ0/3mInno3
VfPF+LrS0ocEOroPV2DRNzYiAAmF2NXSDDudfN1kJgJ0hrnKWRaLq9H/9lh6YtUg
M3XxMz8J+EJhEKn1WMJnovO9SEitheCjQ8ZcqD1+uYQ6bj9h2QYoBLpSZBQsCps/
nXKpDvC+vLBPWA==
-----END CERTIFICATE-----
Generated at Sat May 3 03:46:36 2025 by rpki-client