Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier: 4T4FLTD9/JKQ+6PTXMsFPgPd4UnmsRMO4RY3e2+6B6s=
Subject key identifier: 39:EF:F1:41:34:5A:F0:37:FD:64:27:1D:09:FE:A1:52:5B:E7:DB:4A
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 019677FA9B0D499A2565DB6C883E13FB3B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number: 0C87
Signing time: Sun 27 Apr 2025 16:00:34 +0000
Manifest this update: Sun 27 Apr 2025 16:00:34 +0000
Manifest next update: Mon 28 Apr 2025 16:00:34 +0000
Files and hashes: 1: DwD4MRqZCp-c4uFsMsWnYL0-SzA.roa (hash: 2tkEE6WjjJq4tK+YMGxG4bkpbYxQV0qlFZ5Ps3gC3Vo=)
2: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: NVgm7qYPHZqwhWipg3+Nadq3xG/Ke6mcnDJ0zFIukPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:9b:0d:49:9a:25:65:db:6c:88:3e:13:fb:3b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Apr 27 16:00:34 2025 GMT
Not After : Apr 28 16:00:34 2025 GMT
Subject: CN=39eff141345af037fd64271d09fea1525be7db4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:87:75:d2:27:29:db:3b:a0:e9:ed:1c:8b:
b5:c3:b2:22:a0:2c:a3:d7:30:b7:ff:54:26:aa:1d:
33:93:8d:bd:2f:1b:16:44:de:a0:de:e1:63:a1:52:
4f:11:dc:df:2c:a2:c2:1f:2c:02:8b:11:b7:93:d7:
d0:92:56:05:5d:5e:40:73:71:26:b6:0b:91:f2:3d:
83:6d:e4:c2:a7:f8:94:23:24:48:05:3d:48:7c:f1:
32:12:aa:45:be:13:aa:be:c5:1c:c2:ed:af:db:93:
3a:bb:8f:16:55:87:62:51:ab:68:af:79:93:1f:5f:
e6:12:f7:a6:0a:ec:4f:15:c9:1e:90:91:ca:73:3a:
82:a1:f2:26:3f:70:78:70:5e:21:c4:4d:26:7f:f1:
07:7c:ad:6f:07:75:99:df:71:b3:ca:a7:30:42:91:
d3:fb:98:15:d6:b7:61:e6:a6:8f:98:9e:00:10:c4:
fa:31:b7:3d:0b:fd:0c:56:89:a2:3a:22:0c:a2:a8:
a5:a2:14:11:be:6c:96:79:b7:4d:97:6b:70:80:58:
86:3f:04:bf:97:4f:0c:93:db:6e:79:d2:eb:26:0a:
2a:6f:2a:ce:64:34:22:2a:49:12:69:0b:5e:5f:fa:
7e:50:d9:db:52:95:da:f0:f1:40:2a:b3:26:c1:98:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EF:F1:41:34:5A:F0:37:FD:64:27:1D:09:FE:A1:52:5B:E7:DB:4A
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:37:6f:2d:54:87:4e:22:a2:27:62:40:d2:26:87:91:47:4d:
70:63:83:61:22:d2:40:5f:57:66:05:ad:d3:14:39:35:16:ce:
6d:50:09:24:8f:35:aa:a2:e6:62:49:26:cd:a3:d3:a6:e8:42:
96:db:81:82:ad:ba:28:53:48:4e:86:fe:57:a9:25:1d:55:b5:
36:01:cb:1b:72:66:54:52:f5:d4:9e:4b:5e:2b:b2:48:79:fc:
f9:38:50:53:16:df:43:c8:a2:22:02:23:f5:12:5c:7a:60:85:
64:17:4a:43:42:f0:df:fa:d4:75:37:d6:b3:c7:4b:2e:46:d7:
4f:6c:b4:53:71:d1:33:8d:a3:41:c8:ac:cc:ef:6e:3d:49:6f:
66:f4:18:69:33:e3:ac:f0:18:06:1d:88:5a:0f:ed:10:40:63:
c6:0c:8e:5e:38:67:f6:70:0c:8a:59:2b:a8:7c:16:89:ba:6a:
bf:d4:42:b8:59:17:b3:40:59:ae:75:a2:35:c0:3d:b6:72:0c:
40:c6:1d:a5:a6:6b:93:fc:c5:fb:f0:66:b1:86:55:d3:03:be:
8f:ae:13:53:6e:e6:cf:6a:f8:c1:88:3d:aa:a5:0a:0a:ea:f7:
6f:fe:78:23:12:f0:5c:25:9d:be:2d:76:9f:f6:75:74:3e:59:
9a:c7:fc:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+psNSZolZdtsiD4T+zsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMjA5MTU3YmY3ODllNmJiYTM0ZTBkYmQzZWZlY2Q5YjIw
ZGQwNmIwHhcNMjUwNDI3MTYwMDM0WhcNMjUwNDI4MTYwMDM0WjAzMTEwLwYDVQQD
EygzOWVmZjE0MTM0NWFmMDM3ZmQ2NDI3MWQwOWZlYTE1MjViZTdkYjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30qHddInKds7oOntHIu1w7IioCyj
1zC3/1Qmqh0zk429LxsWRN6g3uFjoVJPEdzfLKLCHywCixG3k9fQklYFXV5Ac3Em
tguR8j2DbeTCp/iUIyRIBT1IfPEyEqpFvhOqvsUcwu2v25M6u48WVYdiUator3mT
H1/mEvemCuxPFckekJHKczqCofImP3B4cF4hxE0mf/EHfK1vB3WZ33GzyqcwQpHT
+5gV1rdh5qaPmJ4AEMT6Mbc9C/0MVomiOiIMoqilohQRvmyWebdNl2twgFiGPwS/
l08Mk9tuedLrJgoqbyrOZDQiKkkSaQteX/p+UNnbUpXa8PFAKrMmwZhSzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnv8UE0WvA3/WQnHQn+oVJb59tKMB8GA1UdIwQY
MBaAFJwgkVe/eJ5rujTg29Pv7NmyDdBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgt
MTE2OTA5ZTQzODI0LzEvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgtMTE2OTA5ZTQzODI0
LzEvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjdvLVSH
TiKiJ2JA0iaHkUdNcGODYSLSQF9XZgWt0xQ5NRbObVAJJI81qqLmYkkmzaPTpuhC
ltuBgq26KFNITob+V6klHVW1NgHLG3JmVFL11J5LXiuySHn8+ThQUxbfQ8iiIgIj
9RJcemCFZBdKQ0Lw3/rUdTfWs8dLLkbXT2y0U3HRM42jQciszO9uPUlvZvQYaTPj
rPAYBh2IWg/tEEBjxgyOXjhn9nAMilkrqHwWibpqv9RCuFkXs0BZrnWiNcA9tnIM
QMYdpaZrk/zF+/BmsYZV0wO+j64TU27mz2r4wYg9qqUKCur3b/54IxLwXCWdvi12
n/Z1dD5Zmsf8Mg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:49:58 2025 by rpki-client