Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
File: nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft (raw, json)
Hash identifier: 6QfIGWGMJSeXIRvu7oMLA6N3mcT2ww2YDfcunLd9ysw=
Subject key identifier: 72:74:A5:62:2E:68:D6:CB:AF:44:A6:2D:EC:AA:3F:23:C6:E4:70:84
Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
Certificate issuer: /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Certificate serial: 0196851145144B4EED7ECD431F55590ADF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
Manifest number: 0EF3
Signing time: Wed 30 Apr 2025 05:00:23 +0000
Manifest this update: Wed 30 Apr 2025 05:00:23 +0000
Manifest next update: Thu 01 May 2025 05:00:23 +0000
Files and hashes: 1: ftSo4Eg6cJOGHafsmdK7G5PlnAg.roa (hash: 6neyZwVBnZqx4smqdcitrT/v+77yfwQ7GJ0kV3y5qqs=)
2: nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl (hash: uofic80309ZwkLokKqm/uZI2hjhdqpyUBxjQxkjj8OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:45:14:4b:4e:ed:7e:cd:43:1f:55:59:0a:df:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Validity
Not Before: Apr 30 05:00:23 2025 GMT
Not After : May 1 05:00:23 2025 GMT
Subject: CN=7274a5622e68d6cbaf44a62decaa3f23c6e47084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:43:6f:47:b2:31:9f:ed:ca:a0:d2:a3:27:
c7:48:15:42:4b:f6:99:95:bb:4f:74:e5:40:d0:a1:
9e:96:42:a7:1b:08:19:85:d6:6b:87:fb:82:da:2a:
54:19:a9:ec:ad:8a:37:22:c7:e4:b5:c5:e9:62:c5:
23:cc:4a:90:bf:a7:30:4a:5a:ab:93:a4:0f:d8:8d:
95:a1:6b:38:7a:3c:c6:f2:5d:7e:f0:3b:bb:d2:2b:
6a:5b:7b:12:81:d7:52:e2:2f:29:b3:89:78:a9:8e:
e1:3f:40:c0:f5:1d:46:19:1b:3d:0c:0e:9d:86:07:
9e:06:60:ce:3b:e5:4f:fc:95:4d:ca:b2:56:ae:20:
7c:28:60:ac:85:7a:b8:51:1b:b7:63:f0:ff:9b:c6:
71:4b:85:d8:ce:61:6a:1a:00:a8:ca:43:e0:7e:bb:
9a:cd:c9:57:87:9c:a4:07:61:2b:a0:76:be:8b:4a:
54:c3:d7:53:3c:c4:2b:5c:33:8a:32:a5:60:38:cc:
e5:b0:a0:f1:2e:d9:cd:db:b9:d7:46:c4:65:b8:ce:
01:28:72:d9:f9:03:09:d5:9c:da:1e:bb:78:b9:84:
69:c3:27:17:be:b9:f6:cb:36:99:86:1d:5a:ec:1d:
b2:e9:a2:f2:a0:a7:b5:ec:f1:18:7f:29:39:1a:90:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:74:A5:62:2E:68:D6:CB:AF:44:A6:2D:EC:AA:3F:23:C6:E4:70:84
X509v3 Authority Key Identifier:
keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:74:4b:bc:c0:f0:3e:59:f5:67:40:a3:28:a2:d7:a8:22:00:
e1:99:92:7a:88:61:db:4e:23:e4:46:6f:71:de:ae:f0:b8:3f:
55:37:99:d4:fa:9e:72:f2:13:a2:e9:73:67:1c:49:2b:9a:67:
12:65:c2:06:60:bb:ff:ad:4a:61:6a:a4:a5:1b:1f:81:77:4f:
c2:36:ae:c6:f2:b2:be:42:49:fe:08:9a:27:69:e8:8b:d6:78:
55:e9:a8:2e:94:85:19:d8:65:a0:4d:e4:2e:40:fb:3e:e6:6e:
a1:ea:3b:77:cd:8e:8c:37:1f:c6:3f:71:5d:9a:2e:3b:50:26:
f6:4c:7d:d4:39:56:47:43:4c:2d:a4:1c:63:91:3b:35:c1:b4:
47:7f:bf:91:7b:39:a1:86:4a:6a:6d:7f:09:7f:89:95:f1:7e:
12:5a:0e:75:e5:ff:85:f6:31:9c:09:bf:59:be:92:95:cf:98:
13:c2:8e:01:bc:3a:d5:d3:e4:e7:c6:c7:7f:95:b0:62:1b:10:
ac:44:d9:d6:dd:da:d4:8f:6b:8e:78:d2:e7:05:78:fa:7b:55:
b1:26:ee:78:80:20:d8:43:af:be:50:80:19:57:9f:81:e4:9a:
69:ca:2e:bc:37:89:df:6c:8f:42:f8:56:d3:00:de:bc:80:1f:
f6:bc:0e:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFEUUUS07tfs1DH1VZCt9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjI4OWYzZDllMTNiZTY3YTI0NGI3MmJkMjQ5NDViMmMz
MjBhNjMwHhcNMjUwNDMwMDUwMDIzWhcNMjUwNTAxMDUwMDIzWjAzMTEwLwYDVQQD
Eyg3Mjc0YTU2MjJlNjhkNmNiYWY0NGE2MmRlY2FhM2YyM2M2ZTQ3MDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAhDb0eyMZ/tyqDSoyfHSBVCS/aZ
lbtPdOVA0KGelkKnGwgZhdZrh/uC2ipUGansrYo3IsfktcXpYsUjzEqQv6cwSlqr
k6QP2I2VoWs4ejzG8l1+8Du70itqW3sSgddS4i8ps4l4qY7hP0DA9R1GGRs9DA6d
hgeeBmDOO+VP/JVNyrJWriB8KGCshXq4URu3Y/D/m8ZxS4XYzmFqGgCoykPgfrua
zclXh5ykB2EroHa+i0pUw9dTPMQrXDOKMqVgOMzlsKDxLtnN27nXRsRluM4BKHLZ
+QMJ1ZzaHrt4uYRpwycXvrn2yzaZhh1a7B2y6aLyoKe17PEYfyk5GpAYhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJ0pWIuaNbLr0SmLeyqPyPG5HCEMB8GA1UdIwQY
MBaAFJ6yifPZ4TvmeiRLcr0klFssMgpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJLSjg5bmhPLVo2SkV0eXZTU1VXeXd5Q21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83OWE2MDUtNjA3Mi00MTQyLTg1NmUt
ZDhlMTgzNTY5M2NkLzEvbnJLSjg5bmhPLVo2SkV0eXZTU1VXeXd5Q21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83OWE2MDUtNjA3Mi00MTQyLTg1NmUtZDhlMTgzNTY5M2Nk
LzEvbnJLSjg5bmhPLVo2SkV0eXZTU1VXeXd5Q21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnRLvMDw
Pln1Z0CjKKLXqCIA4ZmSeohh204j5EZvcd6u8Lg/VTeZ1PqecvIToulzZxxJK5pn
EmXCBmC7/61KYWqkpRsfgXdPwjauxvKyvkJJ/giaJ2noi9Z4VemoLpSFGdhloE3k
LkD7PuZuoeo7d82OjDcfxj9xXZouO1Am9kx91DlWR0NMLaQcY5E7NcG0R3+/kXs5
oYZKam1/CX+JlfF+EloOdeX/hfYxnAm/Wb6Slc+YE8KOAbw61dPk58bHf5WwYhsQ
rETZ1t3a1I9rjnjS5wV4+ntVsSbueIAg2EOvvlCAGVefgeSaacouvDeJ32yPQvhW
0wDevIAf9rwOIg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:52:03 2025 by rpki-client