Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
File: npWhGdnBpdbj8-Ifb6hj2HouSw0.mft (raw, json)
Hash identifier: joQlN+p1hLShPPH956MuJNiiblAYhrNnifooumHY8xQ=
Subject key identifier: 6D:53:BF:4F:FC:77:69:DE:F5:94:4A:F5:FE:E0:9C:40:45:41:5A:C9
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 0194BC3C9A4DF4BED1A8D5D30AE6A96A9724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
Manifest number: 102B
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: NZjfqu9x3wDiLJo6GWe02XnKyKc.roa (hash: qGIOcPlEtKKS51xxkiaAUzuK860Uixd+cejLEfWAaRA=)
2: npWhGdnBpdbj8-Ifb6hj2HouSw0.crl (hash: OOf7WfAfL1y+aEj0I34BY9xl+2Mq3msuf8HkDGCjja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9a:4d:f4:be:d1:a8:d5:d3:0a:e6:a9:6a:97:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=6d53bf4ffc7769def5944af5fee09c4045415ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:2b:14:d5:17:e5:37:ce:e7:28:d4:d4:5d:
7b:1d:bd:4f:d4:ee:76:18:52:95:09:c3:05:cc:de:
48:0a:2e:72:33:c5:19:ba:c5:14:41:63:53:14:93:
d9:f4:7e:51:b4:54:2d:28:88:53:d3:84:95:dd:7e:
84:8b:bc:a0:17:22:1b:85:b2:f6:f6:20:29:8d:dc:
2f:43:59:ed:28:f5:c5:2a:bd:c7:84:e2:35:5b:c5:
1b:23:7d:9f:4e:80:44:91:69:c1:b7:59:21:f4:5c:
5d:89:59:f6:f7:bc:2e:54:2e:66:70:51:a6:84:ae:
98:fc:7b:e0:64:9d:20:d3:3f:5b:a7:98:2e:e2:e6:
d0:24:54:71:e3:5f:92:94:30:cc:a8:10:e9:92:58:
03:ae:44:da:a3:99:df:a8:f5:be:87:05:68:e5:2a:
45:68:90:bb:68:10:63:b5:03:f0:2d:a7:77:6e:39:
50:18:d3:7b:f7:4a:1a:09:f4:99:8b:0c:2b:b0:19:
1a:b8:56:60:2e:f9:57:94:59:11:e3:b7:64:20:ea:
5a:81:dd:e2:39:d4:4e:5e:4a:40:66:2f:90:54:ac:
28:c7:55:fb:a2:39:24:4d:65:a6:b5:75:b2:bd:c8:
a4:2f:ae:a0:4e:7b:ff:7e:52:ee:c7:d5:06:37:44:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:53:BF:4F:FC:77:69:DE:F5:94:4A:F5:FE:E0:9C:40:45:41:5A:C9
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1f:6a:f1:33:b3:0b:05:59:84:f6:dc:30:b0:e6:0f:07:c6:
76:1c:58:87:65:51:32:90:9c:06:3c:16:e1:2d:8e:05:68:5a:
21:57:04:48:a3:5d:1d:b4:18:e9:b8:20:e3:0f:80:90:2a:21:
de:50:53:1d:48:d5:4b:32:52:cf:5f:41:21:e8:f4:e5:cf:55:
07:fe:ea:6d:f1:74:f9:2d:87:b3:76:e0:5e:f4:79:05:4e:e9:
d0:1d:59:06:41:9c:8a:02:83:0f:6c:6d:58:8a:30:c1:1f:94:
d6:42:48:6f:5f:2a:67:70:fc:8e:48:a7:5b:80:d6:92:09:8b:
b2:12:47:3d:b6:70:1a:56:aa:e4:a2:97:45:fd:c9:1c:e3:be:
37:6b:bf:a5:56:a8:30:7a:e0:39:68:47:c0:b4:59:6e:24:0c:
1b:fc:a8:d4:53:12:54:8f:c1:67:95:90:2d:d7:1a:2f:78:0f:
a2:cd:60:1f:1c:e7:cd:85:a6:36:23:87:0a:fc:d0:8d:63:a3:
33:ed:15:d7:ff:70:03:03:b6:c5:c3:17:e7:c3:6c:7e:65:1f:
42:6c:43:f7:9d:67:92:17:02:07:7d:4a:bf:a1:c9:19:fa:9f:
f1:e2:25:38:13:dc:73:10:d8:e8:87:f7:5c:41:71:ce:29:96:
3e:a2:ac:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJpN9L7RqNXTCuapapckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMTE5ZDljMWE1ZDZlM2YzZTIxZjZmYTg2M2Q4N2Ey
ZTRiMGQwHhcNMjUwMTMxMTIwMTE1WhcNMjUwMjAxMTIwMTE1WjAzMTEwLwYDVQQD
Eyg2ZDUzYmY0ZmZjNzc2OWRlZjU5NDRhZjVmZWUwOWM0MDQ1NDE1YWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny0rFNUX5TfO5yjU1F17Hb1P1O52
GFKVCcMFzN5ICi5yM8UZusUUQWNTFJPZ9H5RtFQtKIhT04SV3X6Ei7ygFyIbhbL2
9iApjdwvQ1ntKPXFKr3HhOI1W8UbI32fToBEkWnBt1kh9FxdiVn297wuVC5mcFGm
hK6Y/HvgZJ0g0z9bp5gu4ubQJFRx41+SlDDMqBDpklgDrkTao5nfqPW+hwVo5SpF
aJC7aBBjtQPwLad3bjlQGNN790oaCfSZiwwrsBkauFZgLvlXlFkR47dkIOpagd3i
OdROXkpAZi+QVKwox1X7ojkkTWWmtXWyvcikL66gTnv/flLux9UGN0R1EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1Tv0/8d2ne9ZRK9f7gnEBFQVrJMB8GA1UdIwQY
MBaAFJ6VoRnZwaXW4/PiH2+oY9h6LksNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXaEdkbkJwZGJqOC1JZmI2aGoySG91U3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hOTM1MmUtOWEzYS00OWFhLWFkNzct
N2JlNmViNmJjZTg3LzEvbnBXaEdkbkJwZGJqOC1JZmI2aGoySG91U3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9hOTM1MmUtOWEzYS00OWFhLWFkNzctN2JlNmViNmJjZTg3
LzEvbnBXaEdkbkJwZGJqOC1JZmI2aGoySG91U3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATh9q8TOz
CwVZhPbcMLDmDwfGdhxYh2VRMpCcBjwW4S2OBWhaIVcESKNdHbQY6bgg4w+AkCoh
3lBTHUjVSzJSz19BIej05c9VB/7qbfF0+S2Hs3bgXvR5BU7p0B1ZBkGcigKDD2xt
WIowwR+U1kJIb18qZ3D8jkinW4DWkgmLshJHPbZwGlaq5KKXRf3JHOO+N2u/pVao
MHrgOWhHwLRZbiQMG/yo1FMSVI/BZ5WQLdcaL3gPos1gHxznzYWmNiOHCvzQjWOj
M+0V1/9wAwO2xcMX58NsfmUfQmxD951nkhcCB31Kv6HJGfqf8eIlOBPccxDY6If3
XEFxzimWPqKs2w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:09 2025 by rpki-client on console-fra.rpki-client.org