Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File: nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier: Rs1HsJl5KivU+m9sEDc0c6rFnKufWMNMW4EYNENZDEI=
Subject key identifier: D8:BB:A3:18:A5:38:BD:3B:AC:A4:B3:83:92:88:5B:BD:5F:49:2A:D0
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 01967A1FCF565A0767571837DD34CE9DCF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number: 1040
Signing time: Mon 28 Apr 2025 02:00:26 +0000
Manifest this update: Mon 28 Apr 2025 02:00:26 +0000
Manifest next update: Tue 29 Apr 2025 02:00:26 +0000
Files and hashes: 1: HXLS-XKu3_p7nhpZ2K8scEyS_rc.roa (hash: 8XJ8ceqUC/FtGHEdtNIo+tnT3APlE19braxx2C56keI=)
2: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (hash: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=)
3: _fuT4R68BHlPpUP6HiVZDSmxINI.roa (hash: bvu+tWo4UXme3jTLsLEJ6SMX9XI3uAoVhAKkTxW9r90=)
4: boOUh_OegScUQI0rJ0GXkth8K70.roa (hash: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=)
5: dencvyi0TxmMkZDQCX9rZJN2RzU.roa (hash: B52p98p3HEzzhef7/oXAaRqNFYHk2h3tC+DtHUn18nc=)
6: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: 9W8Va6y2JqNjeFIzHfcMmqqWTv1v3kHHwRBaKauT9k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:cf:56:5a:07:67:57:18:37:dd:34:ce:9d:cf:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Apr 28 02:00:26 2025 GMT
Not After : Apr 29 02:00:26 2025 GMT
Subject: CN=d8bba318a538bd3baca4b38392885bbd5f492ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:32:27:31:b3:bc:67:e4:43:c9:f6:d7:08:
ad:de:f0:30:89:38:65:26:00:31:53:c1:f2:6c:ad:
56:3a:fd:7f:c2:9c:8c:39:2d:70:ab:af:cb:41:d4:
ad:d0:93:39:72:7f:97:dc:cf:96:fe:28:d3:c4:cc:
e8:fa:77:a9:99:6e:f0:ca:1c:9f:5f:94:60:04:b0:
7e:e9:86:47:fc:42:6c:55:c6:2a:5a:83:e5:30:a8:
ee:ec:70:16:97:d1:75:e8:25:13:a1:78:a3:77:37:
61:fb:e6:32:90:2d:1c:65:fb:ef:f1:c0:15:ee:1d:
fa:36:f9:6a:0a:68:65:f7:7e:b8:19:22:61:12:37:
72:32:df:fd:47:0b:b9:ff:58:6f:9c:4f:b0:e6:c0:
ec:20:04:e3:05:4e:03:dd:2a:21:58:07:fb:a2:78:
0c:60:48:4c:ea:68:cf:cf:32:ae:7c:fb:e0:1f:c1:
a4:7d:99:e0:2a:3f:65:b4:fb:d0:63:b1:d6:b6:06:
a5:23:1e:ac:28:2f:de:61:92:d5:df:04:0e:51:c2:
fc:e8:66:8d:33:d6:2d:b8:49:60:72:f6:b3:4f:99:
57:78:ca:52:11:96:cd:26:90:06:8d:40:cb:d5:98:
90:c2:82:c9:e6:f5:11:86:55:d9:9f:fa:c7:fd:61:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BB:A3:18:A5:38:BD:3B:AC:A4:B3:83:92:88:5B:BD:5F:49:2A:D0
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a9:ad:95:1c:61:89:09:ee:02:90:7b:3a:da:4e:73:4b:d2:
38:62:e7:0f:ff:dc:9b:10:63:12:1a:fd:29:c4:a8:1b:1c:57:
80:05:31:74:b7:a4:c6:a3:6e:60:9b:88:21:b7:1b:73:05:9d:
64:72:77:4c:03:3c:ce:c0:15:06:c3:f5:5f:0e:02:ad:6d:df:
eb:34:dc:ee:5f:5e:89:92:9f:0a:62:85:db:25:7c:b2:b3:b3:
e0:86:75:f8:92:36:ad:de:ac:d0:17:e8:bc:44:f9:40:10:66:
63:89:d0:fa:37:db:a1:69:1c:2d:90:fe:15:b5:d5:5a:ec:36:
9e:ee:89:77:b8:a7:82:e2:62:89:91:71:3a:b3:5e:0e:72:36:
97:8d:85:41:28:5a:28:71:36:1a:4e:8e:6f:8d:24:06:13:87:
9d:23:22:17:37:bd:73:14:f5:72:38:78:56:99:62:88:d6:80:
c7:7d:a2:a2:a1:63:45:f1:58:dd:dd:bc:db:1f:20:7e:e0:8e:
d6:53:0f:36:23:14:1a:7f:77:51:0e:59:1d:63:50:59:2a:99:
3b:91:87:11:c3:e4:28:c8:80:c9:d2:14:70:3e:c7:c3:88:f0:
24:46:62:a9:49:58:67:0b:1c:5a:3a:70:8c:ab:fd:1a:12:4d:
5c:dc:68:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6H89WWgdnVxg33TTOnc8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNmI5Nzc0Yzk0ODc2Yzk4MzIxZGUzMjAxYjExYjc1YTEz
NThkMTkwHhcNMjUwNDI4MDIwMDI2WhcNMjUwNDI5MDIwMDI2WjAzMTEwLwYDVQQD
EyhkOGJiYTMxOGE1MzhiZDNiYWNhNGIzODM5Mjg4NWJiZDVmNDkyYWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTEyJzGzvGfkQ8n21wit3vAwiThl
JgAxU8HybK1WOv1/wpyMOS1wq6/LQdSt0JM5cn+X3M+W/ijTxMzo+nepmW7wyhyf
X5RgBLB+6YZH/EJsVcYqWoPlMKju7HAWl9F16CUToXijdzdh++YykC0cZfvv8cAV
7h36NvlqCmhl9364GSJhEjdyMt/9Rwu5/1hvnE+w5sDsIATjBU4D3SohWAf7ongM
YEhM6mjPzzKufPvgH8GkfZngKj9ltPvQY7HWtgalIx6sKC/eYZLV3wQOUcL86GaN
M9YtuElgcvazT5lXeMpSEZbNJpAGjUDL1ZiQwoLJ5vURhlXZn/rH/WGfVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNi7oxilOL07rKSzg5KIW71fSSrQMB8GA1UdIwQY
MBaAFJ1rl3TJSHbJgyHeMgGxG3WhNY0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5Njgt
YTU2YmRmYWRiODFlLzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5NjgtYTU2YmRmYWRiODFl
LzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6mtlRxh
iQnuApB7OtpOc0vSOGLnD//cmxBjEhr9KcSoGxxXgAUxdLekxqNuYJuIIbcbcwWd
ZHJ3TAM8zsAVBsP1Xw4CrW3f6zTc7l9eiZKfCmKF2yV8srOz4IZ1+JI2rd6s0Bfo
vET5QBBmY4nQ+jfboWkcLZD+FbXVWuw2nu6Jd7inguJiiZFxOrNeDnI2l42FQSha
KHE2Gk6Ob40kBhOHnSMiFze9cxT1cjh4VpliiNaAx32ioqFjRfFY3d282x8gfuCO
1lMPNiMUGn93UQ5ZHWNQWSqZO5GHEcPkKMiAydIUcD7Hw4jwJEZiqUlYZwscWjpw
jKv9GhJNXNxoTg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:37:38 2025 by rpki-client