Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: Eiy5JglyglwanDNnSIhlMIQkdLksXmHz92slbc6ETZI=
Subject key identifier: EF:86:CA:51:5B:64:E8:AB:18:04:F0:49:4E:82:94:5C:2F:5C:DD:C9
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019672304CB96B55CD3B675E683B50D1F8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 152A
Signing time: Sat 26 Apr 2025 13:01:30 +0000
Manifest this update: Sat 26 Apr 2025 13:01:30 +0000
Manifest next update: Sun 27 Apr 2025 13:01:30 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: yuNtkPADK494D3qSu762NhaAkBCzrubJ9FPl8YqDHn4=)
6: WX7sPJ6RhH3U5xnN-el0l4C0log.roa (hash: zkMfoRomzAgbM+6nX6pmWw/o4OyOrZ/9refp1cS1ytA=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:30:4c:b9:6b:55:cd:3b:67:5e:68:3b:50:d1:f8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Apr 26 13:01:30 2025 GMT
Not After : Apr 27 13:01:30 2025 GMT
Subject: CN=ef86ca515b64e8ab1804f0494e82945c2f5cddc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:45:da:53:85:f3:93:84:35:7d:ea:ba:d5:
c0:fe:95:09:b9:c6:d6:16:7a:ba:1e:52:c0:26:e1:
c5:28:14:16:91:91:f1:fe:3f:4a:50:c2:9a:b2:89:
e8:25:0f:ad:85:46:cb:a6:1f:4d:fb:50:4c:3b:89:
d0:bd:64:6f:a2:16:4b:e9:40:b0:2e:50:04:76:ef:
3f:5c:b8:f4:45:61:da:19:e6:f1:89:7f:45:dc:24:
83:eb:bb:5c:eb:47:92:42:78:32:f8:6d:a4:62:b7:
2d:b5:ac:98:6f:c7:e8:d8:b6:90:eb:3f:b8:c5:2d:
2e:c3:6f:a9:0e:a5:15:05:db:cd:9f:dd:4b:52:30:
e3:2c:ef:06:70:b2:2f:92:5c:f5:0c:8d:d5:6a:a9:
9b:2e:25:c7:2e:60:ee:8f:37:12:42:5f:a2:fe:cd:
c5:a7:2c:1f:ac:a3:7a:20:05:54:40:98:25:2e:3a:
3b:f1:53:61:2b:86:80:0d:98:68:91:a1:d6:0a:b8:
b0:29:0f:54:34:4e:92:8b:77:64:11:59:6e:65:16:
2b:80:45:cd:60:f7:e4:61:59:55:78:b3:d1:50:6b:
f4:a8:6a:3a:0f:a7:38:39:74:a2:c6:fa:6e:c5:66:
5f:33:bd:50:e2:b0:e6:51:cc:92:b1:26:0c:aa:49:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:86:CA:51:5B:64:E8:AB:18:04:F0:49:4E:82:94:5C:2F:5C:DD:C9
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b2:9e:00:3f:64:a4:d5:1b:81:01:1d:fd:f8:e5:d6:41:66:
cd:1d:2b:7f:ad:ef:fc:2d:5b:76:8e:7c:c3:21:94:ad:8e:7b:
ef:fb:82:68:a1:a7:6b:8e:4d:4c:95:e5:97:00:2b:2d:2a:a4:
73:6c:1d:af:7c:30:f6:8b:93:ff:82:9f:e9:ba:6c:71:55:c2:
95:78:c1:bf:e3:f2:95:53:48:db:b3:d0:13:da:b8:c8:05:cb:
7f:20:96:2f:2a:71:eb:ec:ea:9e:60:f0:7c:59:d3:0a:4b:a6:
57:af:49:ae:c5:60:96:74:8d:01:2d:26:fb:89:9a:ef:78:38:
81:43:36:02:05:23:e3:a0:ab:05:0b:c7:48:0e:c1:70:d7:82:
20:d0:6a:b3:9c:76:52:4c:62:1b:ae:e8:1b:d6:11:60:85:f1:
a9:2a:8c:29:c5:8f:73:b4:94:54:a2:b9:a4:94:c0:39:93:c8:
ea:63:16:0f:97:36:fc:cf:aa:8b:6e:b0:b6:8d:88:fa:60:31:
7e:d1:e2:ca:16:d6:97:b2:32:7e:cb:f4:ea:9b:aa:24:ab:2f:
65:b4:9a:6a:b8:8e:33:07:42:2d:4f:a6:8e:20:c9:1c:99:31:
7c:3f:34:72:ad:68:c4:35:05:81:5b:bd:1f:52:35:71:82:eb:
34:f0:19:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZyMEy5a1XNO2deaDtQ0fjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4
NjJlNWYwHhcNMjUwNDI2MTMwMTMwWhcNMjUwNDI3MTMwMTMwWjAzMTEwLwYDVQQD
EyhlZjg2Y2E1MTViNjRlOGFiMTgwNGYwNDk0ZTgyOTQ1YzJmNWNkZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0RF2lOF85OENX3qutXA/pUJucbW
Fnq6HlLAJuHFKBQWkZHx/j9KUMKasonoJQ+thUbLph9N+1BMO4nQvWRvohZL6UCw
LlAEdu8/XLj0RWHaGebxiX9F3CSD67tc60eSQngy+G2kYrcttayYb8fo2LaQ6z+4
xS0uw2+pDqUVBdvNn91LUjDjLO8GcLIvklz1DI3VaqmbLiXHLmDujzcSQl+i/s3F
pywfrKN6IAVUQJglLjo78VNhK4aADZhokaHWCriwKQ9UNE6Si3dkEVluZRYrgEXN
YPfkYVlVeLPRUGv0qGo6D6c4OXSixvpuxWZfM71Q4rDmUcySsSYMqkk6vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+GylFbZOirGATwSU6ClFwvXN3JMB8GA1UdIwQY
MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt
MGQzZmNlNDI5YmRlLzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl
LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLKeAD9k
pNUbgQEd/fjl1kFmzR0rf63v/C1bdo58wyGUrY577/uCaKGna45NTJXllwArLSqk
c2wdr3ww9ouT/4Kf6bpscVXClXjBv+PylVNI27PQE9q4yAXLfyCWLypx6+zqnmDw
fFnTCkumV69JrsVglnSNAS0m+4ma73g4gUM2AgUj46CrBQvHSA7BcNeCINBqs5x2
UkxiG67oG9YRYIXxqSqMKcWPc7SUVKK5pJTAOZPI6mMWD5c2/M+qi26wto2I+mAx
ftHiyhbWl7Iyfsv06puqJKsvZbSaariOMwdCLU+mjiDJHJkxfD80cq1oxDUFgVu9
H1I1cYLrNPAZog==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:21:08 2025 by rpki-client