Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
File: nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json)
Hash identifier: YKeUnX7HV9zjsT5/Lr0mMl2sG7q/a2h5HNy8LaI2GjY=
Subject key identifier: 36:84:7C:EE:F7:25:5C:64:50:A3:6E:16:A8:57:13:15:CF:F3:C6:B8
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial: 0196789F98FBC604F096C16E40FBDC4C639B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
Manifest number: 086D
Signing time: Sun 27 Apr 2025 19:00:47 +0000
Manifest this update: Sun 27 Apr 2025 19:00:47 +0000
Manifest next update: Mon 28 Apr 2025 19:00:47 +0000
Files and hashes: 1: nJBx_aFvLLmg9WQ03TK76fpJWGM.roa (hash: 02dNoeVE9Sy74k3q/XOECz/G2VHIiUVMONX/87WPyrU=)
2: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: QWaAYhhunZOQwDtruoQtlJVbb1X+rqBHP+pAreUnduw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:98:fb:c6:04:f0:96:c1:6e:40:fb:dc:4c:63:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Validity
Not Before: Apr 27 19:00:47 2025 GMT
Not After : Apr 28 19:00:47 2025 GMT
Subject: CN=36847ceef7255c6450a36e16a8571315cff3c6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a9:17:df:a5:49:4e:97:9f:c0:bb:6f:de:ef:
c1:75:b1:95:13:9b:c4:8e:61:75:87:48:cf:45:26:
41:0d:8a:6d:0e:67:7c:52:4d:ee:3b:20:14:d0:c6:
e6:4c:62:fd:e3:88:8c:53:4b:7c:a1:89:0b:fd:66:
d8:8f:f7:3e:1c:cb:0a:94:91:60:40:36:86:e1:63:
a6:28:f7:56:8d:56:d6:0a:46:f7:2c:f5:91:a5:bc:
a6:86:79:d0:b1:1d:73:40:4b:f1:ed:f3:15:f5:d4:
59:9f:59:a1:d9:d7:de:71:cc:ab:aa:99:ce:a1:b2:
e8:9a:d2:4f:71:30:8e:df:8f:81:a9:14:14:2a:7c:
02:86:76:0d:ea:53:01:1a:25:46:48:76:90:eb:09:
82:0d:89:40:74:a0:59:19:98:e5:8f:c5:b9:87:4b:
3b:34:3d:1f:c1:9b:8f:3a:89:6a:e0:14:c8:4c:34:
af:40:da:5f:16:b5:8e:63:1b:57:3a:33:e6:ff:e7:
93:52:20:b2:ca:6c:9e:6b:15:56:ef:3f:b5:8f:5a:
27:a5:da:15:fb:d9:a7:8a:cb:2c:a9:92:74:91:97:
5f:c8:6a:97:d4:6d:7a:c3:4e:9b:bb:27:60:c5:f1:
5c:9d:27:12:ee:e0:2a:47:32:5b:ef:24:b4:94:e3:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:84:7C:EE:F7:25:5C:64:50:A3:6E:16:A8:57:13:15:CF:F3:C6:B8
X509v3 Authority Key Identifier:
keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bc:09:ea:de:6f:50:53:fd:0f:0b:58:86:eb:45:9f:28:90:
79:c6:d0:9e:0a:d6:01:94:6b:2b:87:20:d5:d1:62:2e:ae:f5:
52:a2:a5:cd:27:31:42:73:02:d8:94:fb:3f:f8:9f:5c:0a:4f:
83:1e:09:cd:55:16:b3:a5:d1:08:52:61:7a:be:b3:c1:59:da:
60:0c:4b:2c:96:35:53:f7:6b:44:6c:ae:6d:11:12:36:f8:df:
3a:41:ad:7a:4d:53:bf:a5:21:ee:ab:61:f0:c4:84:60:40:11:
3c:7a:9a:4f:5d:7a:1e:12:2d:5a:de:cb:1a:53:f7:5c:19:74:
94:ea:5a:7a:2d:85:0b:68:21:ca:67:b2:a3:ce:80:5e:8c:9d:
16:7d:c6:45:24:34:89:9f:b3:03:10:36:b4:01:80:29:bb:ab:
93:e0:d6:01:1c:8b:56:66:6c:a3:6c:9c:83:34:d6:4f:72:29:
d4:23:7f:6a:41:70:21:69:09:5e:9f:0a:e2:af:44:1f:00:42:
8b:36:85:68:68:c5:e6:8a:f8:e3:b7:3c:45:7d:91:31:f7:26:
f9:8b:c8:72:c2:28:45:1c:15:ae:ed:c7:e5:89:d9:fc:bc:cc:
c3:f9:5d:cf:44:c0:54:29:94:76:6c:1f:f5:23:49:11:e7:d0:
53:03:e1:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4n5j7xgTwlsFuQPvcTGObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOGMwOGY0YWQ4ZmVhZDM3MWRhM2U3YzAyYjZjZmQ2ODlm
Y2E1YmEwHhcNMjUwNDI3MTkwMDQ3WhcNMjUwNDI4MTkwMDQ3WjAzMTEwLwYDVQQD
EygzNjg0N2NlZWY3MjU1YzY0NTBhMzZlMTZhODU3MTMxNWNmZjNjNmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlakX36VJTpefwLtv3u/BdbGVE5vE
jmF1h0jPRSZBDYptDmd8Uk3uOyAU0MbmTGL944iMU0t8oYkL/WbYj/c+HMsKlJFg
QDaG4WOmKPdWjVbWCkb3LPWRpbymhnnQsR1zQEvx7fMV9dRZn1mh2dfeccyrqpnO
obLomtJPcTCO34+BqRQUKnwChnYN6lMBGiVGSHaQ6wmCDYlAdKBZGZjlj8W5h0s7
ND0fwZuPOolq4BTITDSvQNpfFrWOYxtXOjPm/+eTUiCyymyeaxVW7z+1j1onpdoV
+9mnisssqZJ0kZdfyGqX1G16w06buydgxfFcnScS7uAqRzJb7yS0lOPfWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaEfO73JVxkUKNuFqhXExXP88a4MB8GA1UdIwQY
MBaAFJ2MCPStj+rTcdo+fAK2z9aJ/KW6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbll3STlLMlA2dE54Mmo1OEFyYlAxb244cGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mYWE1MGYtNGRlMS00ZDFjLWI4MDMt
MTliZjc4MTA5NjFiLzEvbll3STlLMlA2dE54Mmo1OEFyYlAxb244cGJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mYWE1MGYtNGRlMS00ZDFjLWI4MDMtMTliZjc4MTA5NjFi
LzEvbll3STlLMlA2dE54Mmo1OEFyYlAxb244cGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7wJ6t5v
UFP9DwtYhutFnyiQecbQngrWAZRrK4cg1dFiLq71UqKlzScxQnMC2JT7P/ifXApP
gx4JzVUWs6XRCFJher6zwVnaYAxLLJY1U/drRGyubRESNvjfOkGtek1Tv6Uh7qth
8MSEYEARPHqaT116HhItWt7LGlP3XBl0lOpaei2FC2ghymeyo86AXoydFn3GRSQ0
iZ+zAxA2tAGAKburk+DWARyLVmZso2ycgzTWT3Ip1CN/akFwIWkJXp8K4q9EHwBC
izaFaGjF5or447c8RX2RMfcm+YvIcsIoRRwVru3H5YnZ/LzMw/ldz0TAVCmUdmwf
9SNJEefQUwPhqA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:06:35 2025 by rpki-client