Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
File: nFVnZyAcUPayqVXbah5uAR36XUQ.mft (raw, json)
Hash identifier: 7HqI2rLy45eIfL74RXrFDNL727J7MRuA9fX8sRrKYRs=
Subject key identifier: 21:F1:DB:AB:B3:94:92:70:28:D2:77:2A:AD:F0:18:02:D1:C0:AA:69
Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
Certificate issuer: /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Certificate serial: 0196A23FF6A2580CD4CA6DAB559FD7F2DF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
Manifest number: 0A4E
Signing time: Mon 05 May 2025 21:00:22 +0000
Manifest this update: Mon 05 May 2025 21:00:22 +0000
Manifest next update: Tue 06 May 2025 21:00:22 +0000
Files and hashes: 1: cmsoMlIRCcbLziNipTUjZc3lrew.roa (hash: a1CFCcY0jADOuS6DTKGkRSmsv5gzH4GzUcir7HG6pUE=)
2: nFVnZyAcUPayqVXbah5uAR36XUQ.crl (hash: HjY2fqHx3SLiz+oQa8Qg2400YYA7TsDbLuSZMtDwlMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:3f:f6:a2:58:0c:d4:ca:6d:ab:55:9f:d7:f2:df:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Validity
Not Before: May 5 21:00:22 2025 GMT
Not After : May 6 21:00:22 2025 GMT
Subject: CN=21f1dbabb394927028d2772aadf01802d1c0aa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:7d:14:e6:dd:e6:ee:80:8c:b7:15:e4:2d:
f4:5e:f7:c4:d6:72:64:3f:d7:75:c1:23:67:57:9a:
cc:6e:6d:df:a1:80:12:0c:a0:7f:96:67:ba:48:28:
67:a9:f9:18:97:a9:3b:51:e3:b3:ae:28:f9:de:a6:
c2:b0:91:aa:4e:ce:d0:95:28:f4:5c:73:5d:ee:17:
0b:30:0a:74:7c:1b:d1:6a:13:8d:47:77:b4:9e:ed:
73:e7:9c:8d:b1:ab:2a:34:73:1d:43:c3:e8:c1:19:
96:f9:7e:3a:86:26:09:d5:5c:bd:28:65:51:07:77:
8e:ee:e1:bd:cb:e2:e5:07:45:fb:57:2d:4e:31:17:
14:34:e5:01:c6:0c:c7:d1:d4:e5:49:21:45:ed:0c:
3d:24:dc:7f:28:0c:b2:ac:5a:2b:e9:6b:c4:7f:ca:
a4:63:0e:43:b1:c9:45:46:ed:56:b7:2b:c1:10:73:
a5:9b:2f:ce:99:35:bd:60:2e:03:b0:10:e6:79:06:
c3:2e:1a:5c:33:a0:3e:53:f2:a7:a8:22:a4:9b:01:
ca:ae:fd:31:ca:b5:31:52:9a:c6:37:e1:23:fc:34:
b3:04:52:b7:2d:95:cc:8d:b5:f8:c3:b9:98:50:21:
0b:33:a9:31:78:1c:2e:e3:10:dd:73:e9:39:ca:4d:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F1:DB:AB:B3:94:92:70:28:D2:77:2A:AD:F0:18:02:D1:C0:AA:69
X509v3 Authority Key Identifier:
keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:08:a5:b4:4e:c6:8e:38:77:d3:25:e4:4e:10:46:e0:17:60:
8d:8b:12:2d:0b:7e:63:a6:d8:e3:5a:c2:0a:68:4b:fd:25:3c:
65:d0:e0:48:c1:95:2f:4b:00:ea:fd:f4:29:2e:dd:40:62:26:
3a:1a:dc:48:0d:10:7e:51:49:e7:a5:09:87:50:6d:cb:48:e8:
fc:f3:32:f8:ba:a2:cc:3a:29:a5:d8:59:56:81:4c:1e:f5:82:
41:73:6e:32:0d:0c:f5:ef:d1:32:52:f0:12:5d:de:04:4e:7a:
24:2c:4b:87:a3:b6:55:a2:42:4b:69:7c:41:89:b4:a4:f7:41:
53:3f:d6:11:62:86:37:cc:1d:c4:97:53:a0:f8:a3:84:1d:33:
cf:16:d3:04:e3:b1:38:37:8e:0b:9b:62:a9:92:a5:15:30:f2:
bd:61:84:e8:c4:5b:13:03:1a:a9:44:39:36:06:24:8f:f1:3e:
ee:61:3a:dc:d9:15:26:8e:4b:85:c7:d0:b3:01:9b:1e:11:9c:
30:d1:99:04:1f:e3:03:86:0d:80:3e:72:3c:6c:fe:e1:90:57:
80:af:6d:32:62:36:97:ae:b3:86:6d:f0:04:7e:48:fe:9b:de:
bd:8c:b5:e8:94:d7:ce:a9:bc:87:2b:3d:6c:7d:9e:df:d1:a7:
1d:21:32:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaiP/aiWAzUym2rVZ/X8t8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNTU2NzY3MjAxYzUwZjZiMmE5NTVkYjZhMWU2ZTAxMWRm
YTVkNDQwHhcNMjUwNTA1MjEwMDIyWhcNMjUwNTA2MjEwMDIyWjAzMTEwLwYDVQQD
EygyMWYxZGJhYmIzOTQ5MjcwMjhkMjc3MmFhZGYwMTgwMmQxYzBhYTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyp9FObd5u6AjLcV5C30XvfE1nJk
P9d1wSNnV5rMbm3foYASDKB/lme6SChnqfkYl6k7UeOzrij53qbCsJGqTs7QlSj0
XHNd7hcLMAp0fBvRahONR3e0nu1z55yNsasqNHMdQ8PowRmW+X46hiYJ1Vy9KGVR
B3eO7uG9y+LlB0X7Vy1OMRcUNOUBxgzH0dTlSSFF7Qw9JNx/KAyyrFor6WvEf8qk
Yw5DsclFRu1WtyvBEHOlmy/OmTW9YC4DsBDmeQbDLhpcM6A+U/KnqCKkmwHKrv0x
yrUxUprGN+Ej/DSzBFK3LZXMjbX4w7mYUCELM6kxeBwu4xDdc+k5yk0UewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHx26uzlJJwKNJ3Kq3wGALRwKppMB8GA1UdIwQY
MBaAFJxVZ2cgHFD2sqlV22oebgEd+l1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkZWblp5QWNVUGF5cVZYYmFoNXVBUjM2WFVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82ZGFjODYtMjI0Yi00YWU1LWIyYTgt
NDk2YmE4MjQ5MmNlLzEvbkZWblp5QWNVUGF5cVZYYmFoNXVBUjM2WFVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82ZGFjODYtMjI0Yi00YWU1LWIyYTgtNDk2YmE4MjQ5MmNl
LzEvbkZWblp5QWNVUGF5cVZYYmFoNXVBUjM2WFVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAiltE7G
jjh30yXkThBG4BdgjYsSLQt+Y6bY41rCCmhL/SU8ZdDgSMGVL0sA6v30KS7dQGIm
OhrcSA0QflFJ56UJh1Bty0jo/PMy+LqizDoppdhZVoFMHvWCQXNuMg0M9e/RMlLw
El3eBE56JCxLh6O2VaJCS2l8QYm0pPdBUz/WEWKGN8wdxJdToPijhB0zzxbTBOOx
ODeOC5tiqZKlFTDyvWGE6MRbEwMaqUQ5NgYkj/E+7mE63NkVJo5LhcfQswGbHhGc
MNGZBB/jA4YNgD5yPGz+4ZBXgK9tMmI2l66zhm3wBH5I/pvevYy16JTXzqm8hys9
bH2e39GnHSEyEA==
-----END CERTIFICATE-----
Generated at Tue May 6 03:38:03 2025 by rpki-client