Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: NRbBlAMjozpydJfQaE6A5Zcyfn7vleS5cAE05y9gl30=
Subject key identifier: 17:DA:B1:24:07:1F:42:4E:7E:6F:DF:4F:CC:02:BD:A5:BC:99:B0:24
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 01968E82B274501597E63BC904CCAFAB3FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 0111
Signing time: Fri 02 May 2025 01:00:51 +0000
Manifest this update: Fri 02 May 2025 01:00:51 +0000
Manifest next update: Sat 03 May 2025 01:00:51 +0000
Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=)
2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: BYtdKtRaYdXFHjfVj/idvKpaehtXme39YDeXdfTwDr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:b2:74:50:15:97:e6:3b:c9:04:cc:af:ab:3f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: May 2 01:00:51 2025 GMT
Not After : May 3 01:00:51 2025 GMT
Subject: CN=17dab124071f424e7e6fdf4fcc02bda5bc99b024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:36:12:6c:e5:7f:95:e2:50:91:04:8b:c5:
fe:2e:94:40:5b:e0:a5:a5:34:67:e2:6e:92:10:f9:
01:b8:31:1d:a9:c9:7b:6c:46:92:f7:c4:cc:09:6c:
58:8e:1c:e5:70:ee:12:c9:57:19:20:36:78:3e:53:
bc:f7:bd:3e:45:84:db:d0:7d:38:09:6d:b4:8a:cf:
00:ec:e2:62:e5:ef:dd:89:f7:b1:d1:ba:59:d3:f5:
73:d0:66:fe:9c:ea:53:6c:0a:c0:5d:ec:8c:5a:68:
86:13:81:5c:69:6d:61:a1:d6:35:7c:da:cd:94:24:
c4:37:a5:5e:2c:a0:6c:0f:c5:12:44:de:75:51:a5:
6e:b2:50:b6:af:c8:31:6b:0c:a3:6e:80:ab:f5:b4:
95:d2:86:a6:a7:46:ac:50:3d:bd:e2:46:a3:5a:15:
1a:e5:a8:c5:68:ab:54:39:0f:59:26:52:7e:fb:87:
24:05:be:5a:0b:f6:ea:26:11:ae:90:60:d4:25:19:
ce:83:2c:03:7c:bc:01:f7:4f:da:ab:e9:1c:5d:b0:
b4:bb:ff:70:e1:82:ab:95:72:1b:b9:40:5b:e2:25:
a8:82:78:ec:5c:50:5c:0e:0c:e4:ea:9b:a5:ee:a3:
b8:fd:6c:bd:b4:06:c0:a0:6d:1a:c8:c2:b5:f3:b6:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DA:B1:24:07:1F:42:4E:7E:6F:DF:4F:CC:02:BD:A5:BC:99:B0:24
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:15:be:93:de:da:87:ef:39:5a:4e:e9:ff:32:0f:57:fb:16:
df:51:89:63:96:9c:eb:e3:cf:31:ce:b0:b5:0e:3e:e2:4c:89:
a6:6e:71:2d:a0:4b:75:a3:44:7d:27:0c:db:2c:30:a3:82:20:
a6:00:85:44:f5:3b:cf:73:bd:9b:3f:bb:23:e6:ab:a0:7f:3a:
1a:b9:11:95:08:53:bf:55:89:05:1e:e7:e1:24:cc:bb:7d:c8:
f2:59:a8:4d:2d:16:81:e2:d2:96:e7:92:cf:23:91:a3:d2:94:
ad:89:d7:4a:cc:c9:17:dc:87:fb:9c:c8:98:ac:cc:cb:78:aa:
85:90:6b:cb:d7:88:ec:20:ad:82:12:c5:c6:5b:eb:8a:d5:10:
9b:f3:53:67:25:51:cb:cb:13:f6:a8:ec:88:a8:25:fd:f5:a9:
a6:7e:68:93:9c:d1:3c:e5:2a:1d:2c:52:9e:24:b4:17:fd:62:
11:6b:db:7c:d9:3a:e1:e6:c5:c9:07:98:3f:a7:c1:cb:eb:39:
64:0c:7a:45:93:69:83:32:b7:a3:b7:67:45:2a:a5:3d:f1:42:
74:ff:e5:c9:74:5f:b3:b5:a2:e4:e4:02:0e:5e:00:19:8c:a1:
e2:f4:81:04:10:15:1e:33:78:55:68:11:50:81:27:42:e9:43:
0e:71:07:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaOgrJ0UBWX5jvJBMyvqz/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNmYyNjIyZTY1YzJlZTg2MzUwMWQ3NzIxNDc1YTA1ZWY1
MzQzZmIwHhcNMjUwNTAyMDEwMDUxWhcNMjUwNTAzMDEwMDUxWjAzMTEwLwYDVQQD
EygxN2RhYjEyNDA3MWY0MjRlN2U2ZmRmNGZjYzAyYmRhNWJjOTliMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tI2Emzlf5XiUJEEi8X+LpRAW+Cl
pTRn4m6SEPkBuDEdqcl7bEaS98TMCWxYjhzlcO4SyVcZIDZ4PlO8970+RYTb0H04
CW20is8A7OJi5e/difex0bpZ0/Vz0Gb+nOpTbArAXeyMWmiGE4FcaW1hodY1fNrN
lCTEN6VeLKBsD8USRN51UaVuslC2r8gxawyjboCr9bSV0oamp0asUD294kajWhUa
5ajFaKtUOQ9ZJlJ++4ckBb5aC/bqJhGukGDUJRnOgywDfLwB90/aq+kcXbC0u/9w
4YKrlXIbuUBb4iWognjsXFBcDgzk6pul7qO4/Wy9tAbAoG0ayMK187Yu/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfasSQHH0JOfm/fT8wCvaW8mbAkMB8GA1UdIwQY
MBaAFJ5vJiLmXC7oY1AddyFHWgXvU0P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2Qt
YjFkYjcwMDcxZGRlLzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2QtYjFkYjcwMDcxZGRl
LzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhW+k97a
h+85Wk7p/zIPV/sW31GJY5ac6+PPMc6wtQ4+4kyJpm5xLaBLdaNEfScM2ywwo4Ig
pgCFRPU7z3O9mz+7I+aroH86GrkRlQhTv1WJBR7n4STMu33I8lmoTS0WgeLSlueS
zyORo9KUrYnXSszJF9yH+5zImKzMy3iqhZBry9eI7CCtghLFxlvritUQm/NTZyVR
y8sT9qjsiKgl/fWppn5ok5zRPOUqHSxSniS0F/1iEWvbfNk64ebFyQeYP6fBy+s5
ZAx6RZNpgzK3o7dnRSqlPfFCdP/lyXRfs7Wi5OQCDl4AGYyh4vSBBBAVHjN4VWgR
UIEnQulDDnEHAQ==
-----END CERTIFICATE-----
Generated at Fri May 2 03:21:28 2025 by rpki-client