Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
File: nMIzEMkVpP4JXht0oGbRze5HhD8.mft (raw, json)
Hash identifier: YDNSZy3Eve6bznJOe2NFJ2ZCi0qPWADU0tueVsL+FJ0=
Subject key identifier: 8F:47:D6:91:00:22:83:E9:A6:07:9A:DD:40:EE:F8:E2:A1:22:E8:25
Authority key identifier: 9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
Certificate issuer: /CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Certificate serial: 01967EA1628C8A8F1C6B08BBD4B02717AEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
Manifest number: 0913
Signing time: Mon 28 Apr 2025 23:00:27 +0000
Manifest this update: Mon 28 Apr 2025 23:00:27 +0000
Manifest next update: Tue 29 Apr 2025 23:00:27 +0000
Files and hashes: 1: RmN9zhNzrcosUTM-5d1gTAjxE1E.roa (hash: uL4bwjKQw+5HAkk/uHdj99zle5Zhy8r9K/Xf1FOLrg0=)
2: nMIzEMkVpP4JXht0oGbRze5HhD8.crl (hash: N9TZVUHm65Zi/+B3QRZplAIpCqHohS0N+m6ZDTFoV3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:62:8c:8a:8f:1c:6b:08:bb:d4:b0:27:17:ae:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Validity
Not Before: Apr 28 23:00:27 2025 GMT
Not After : Apr 29 23:00:27 2025 GMT
Subject: CN=8f47d691002283e9a6079add40eef8e2a122e825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:82:08:1c:f1:f4:8f:1c:01:27:e7:3e:fe:
14:8f:ef:43:aa:3d:8c:ae:b0:12:ab:4c:35:eb:25:
65:a3:e6:b7:ce:a1:b0:1b:73:8e:f5:f0:2b:78:18:
48:ed:73:9d:33:29:27:b2:55:2e:00:11:2e:0d:b4:
03:78:d6:25:42:48:67:ff:1b:8c:51:5e:d4:23:be:
da:94:3b:2c:aa:1f:4d:8a:6b:c2:58:0b:48:62:24:
9c:1f:17:da:13:ee:f4:51:17:0a:46:f4:f0:d3:e5:
53:e2:50:64:db:3c:5a:23:67:7b:49:5f:9c:d1:62:
53:5a:73:23:b8:3e:f1:85:cc:3a:16:88:be:c5:e0:
f0:25:5f:3f:dd:1e:64:15:18:93:08:6c:c3:9c:7d:
86:88:3b:76:51:8f:d9:5b:36:b8:80:a7:f0:db:73:
9c:39:30:07:9a:5a:68:6d:3f:a4:8b:31:60:3a:b1:
5c:a2:1c:72:98:d6:d6:3d:19:62:39:73:ad:b2:25:
3b:0a:30:31:b1:fa:4e:88:ec:85:62:7b:27:09:d3:
92:91:04:aa:9c:75:96:22:31:d9:34:7a:7f:7c:76:
a6:20:84:9b:78:69:be:5c:75:a9:7c:7b:fe:14:76:
6e:25:55:02:a1:0f:82:d1:f9:54:fe:a6:d1:7c:d5:
20:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:D6:91:00:22:83:E9:A6:07:9A:DD:40:EE:F8:E2:A1:22:E8:25
X509v3 Authority Key Identifier:
keyid:9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:9d:90:1c:83:a1:5a:f3:1f:5f:d4:60:04:83:e0:84:67:9c:
6a:54:f0:be:7b:49:ea:9b:df:71:cc:2a:ce:bd:27:81:48:85:
9d:ce:83:74:b8:9a:f1:09:21:2e:f7:f9:fc:7f:b0:e0:36:0a:
c7:5c:ee:09:c4:00:b7:ad:af:4e:64:3b:1c:58:91:a8:6d:c6:
24:96:54:d4:ef:22:a9:bb:55:ef:db:95:2f:f4:17:5d:fc:ed:
a9:bb:6c:11:ef:f5:8b:85:53:d7:71:0f:f8:9e:fc:52:b7:72:
bf:62:80:59:23:8f:96:47:89:56:26:0c:81:cb:c6:df:87:24:
a7:ac:92:a8:95:3e:3f:7e:b0:21:ec:05:05:85:fc:99:f1:51:
cb:01:6f:2a:55:4c:4a:43:f8:52:96:f9:46:55:9e:62:58:00:
c2:da:66:69:49:83:cd:e2:ed:5c:8c:77:17:f5:09:8a:34:20:
67:13:00:5d:a5:0c:45:75:92:74:24:38:af:b4:f5:37:d2:3c:
d4:1e:b4:48:b2:95:b2:89:6b:2d:a2:da:73:38:fa:b2:e2:1c:
18:2c:ec:ec:b0:c7:40:b8:57:ef:2a:53:f1:28:68:4d:85:fc:
28:b0:d2:5b:33:77:50:ed:6c:99:27:30:e1:a5:0b:6e:e8:e9:
0a:9e:81:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+oWKMio8cawi71LAnF67mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzIzMzEwYzkxNWE0ZmUwOTVlMWI3NGEwNjZkMWNkZWU0
Nzg0M2YwHhcNMjUwNDI4MjMwMDI3WhcNMjUwNDI5MjMwMDI3WjAzMTEwLwYDVQQD
Eyg4ZjQ3ZDY5MTAwMjI4M2U5YTYwNzlhZGQ0MGVlZjhlMmExMjJlODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9OCCBzx9I8cASfnPv4Uj+9Dqj2M
rrASq0w16yVlo+a3zqGwG3OO9fAreBhI7XOdMyknslUuABEuDbQDeNYlQkhn/xuM
UV7UI77alDssqh9NimvCWAtIYiScHxfaE+70URcKRvTw0+VT4lBk2zxaI2d7SV+c
0WJTWnMjuD7xhcw6Foi+xeDwJV8/3R5kFRiTCGzDnH2GiDt2UY/ZWza4gKfw23Oc
OTAHmlpobT+kizFgOrFcohxymNbWPRliOXOtsiU7CjAxsfpOiOyFYnsnCdOSkQSq
nHWWIjHZNHp/fHamIISbeGm+XHWpfHv+FHZuJVUCoQ+C0flU/qbRfNUgwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9H1pEAIoPppgea3UDu+OKhIuglMB8GA1UdIwQY
MBaAFJzCMxDJFaT+CV4bdKBm0c3uR4Q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1JekVNa1ZwUDRKWGh0MG9HYlJ6ZTVIaEQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMGNhZWUtZmQ2OC00ZGRjLWIyMmUt
NDQzMzYwOGFhNWQ1LzEvbk1JekVNa1ZwUDRKWGh0MG9HYlJ6ZTVIaEQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yMGNhZWUtZmQ2OC00ZGRjLWIyMmUtNDQzMzYwOGFhNWQ1
LzEvbk1JekVNa1ZwUDRKWGh0MG9HYlJ6ZTVIaEQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0p2QHIOh
WvMfX9RgBIPghGecalTwvntJ6pvfccwqzr0ngUiFnc6DdLia8QkhLvf5/H+w4DYK
x1zuCcQAt62vTmQ7HFiRqG3GJJZU1O8iqbtV79uVL/QXXfztqbtsEe/1i4VT13EP
+J78Urdyv2KAWSOPlkeJViYMgcvG34ckp6ySqJU+P36wIewFBYX8mfFRywFvKlVM
SkP4Upb5RlWeYlgAwtpmaUmDzeLtXIx3F/UJijQgZxMAXaUMRXWSdCQ4r7T1N9I8
1B60SLKVsolrLaLaczj6suIcGCzs7LDHQLhX7ypT8ShoTYX8KLDSWzN3UO1smScw
4aULbujpCp6Bxg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:46:04 2025 by rpki-client