Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: cLcvSn9B3QX/jEUbpYhGtPHCKKOiB3Q7tz62po3ZDnY=
Subject key identifier: 7F:E5:7F:A0:5C:66:8F:7C:1A:AA:BA:F0:11:CB:21:83:48:1F:1C:EF
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 019684A3C6878FE5356325F81559DE363035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 0139
Signing time: Wed 30 Apr 2025 03:00:47 +0000
Manifest this update: Wed 30 Apr 2025 03:00:47 +0000
Manifest next update: Thu 01 May 2025 03:00:47 +0000
Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: gElZiNY290O7aiKsL3hIWlrAtLen+Mpedy5x/c96UA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:c6:87:8f:e5:35:63:25:f8:15:59:de:36:30:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Apr 30 03:00:47 2025 GMT
Not After : May 1 03:00:47 2025 GMT
Subject: CN=7fe57fa05c668f7c1aaabaf011cb2183481f1cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:16:f1:e9:c1:8d:bb:48:8a:1e:3e:53:7d:
4f:da:0c:f5:57:2e:9b:17:91:a6:4b:22:09:c2:9e:
6d:62:83:43:00:1e:b3:02:d8:8c:cf:57:5b:2a:e5:
ca:fc:75:63:ea:6e:6a:40:87:8d:e5:d3:33:88:b2:
ec:74:7a:09:66:57:8c:89:aa:7f:03:ef:9e:fb:5c:
a9:df:4a:05:6a:55:80:fc:56:ee:22:80:e6:ee:51:
c0:32:24:35:23:6f:9e:85:99:32:a6:fc:b2:07:f5:
4b:44:1e:c6:9d:f8:41:82:61:b8:08:fb:69:4f:fa:
b8:a2:d3:d5:de:25:e1:bb:1b:35:f7:ed:61:20:26:
a6:50:58:ac:46:72:37:ff:6c:5d:2e:32:c6:d4:c1:
13:ee:de:76:86:ea:ea:6a:e7:c8:f3:80:68:97:11:
83:13:de:ad:5c:46:fd:5a:c1:83:34:3a:12:8a:c7:
7c:57:36:62:dd:cc:42:2f:96:c6:98:1b:4a:18:1b:
98:50:9f:9b:76:7e:c0:ec:7e:ed:98:9b:65:56:ee:
0b:04:98:8c:9f:ec:97:29:74:94:d1:e9:70:ad:90:
81:40:af:a6:2b:e3:62:19:fd:8d:08:fa:d8:1e:5a:
7e:d1:e6:a3:e4:78:77:1e:e2:67:01:3f:e7:e5:a3:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E5:7F:A0:5C:66:8F:7C:1A:AA:BA:F0:11:CB:21:83:48:1F:1C:EF
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:10:85:5b:fd:41:5f:3e:26:ae:5b:ed:fd:20:75:46:67:46:
ca:d4:ce:d3:42:cf:7a:43:62:11:6c:0d:fd:18:50:78:d6:79:
af:5e:34:ed:49:0f:47:79:8e:1f:f8:c5:7e:39:b4:dd:2d:fe:
17:de:b7:74:c6:b1:0e:91:48:2a:c6:55:11:06:de:65:f2:ac:
12:f6:9c:29:92:a2:de:44:b3:b9:be:5d:14:16:e6:2c:b3:83:
23:33:13:f7:4f:e1:26:71:63:36:17:1b:f5:a9:31:82:28:71:
da:c1:9e:ce:44:d8:8a:a7:99:85:0f:81:da:3b:d3:2a:d4:e8:
cd:66:6f:b9:19:00:bb:0b:00:d4:0f:5b:68:cf:5c:45:5b:ce:
34:5f:0f:41:6a:da:35:1d:86:22:15:90:00:ed:a4:43:d9:6f:
e1:0e:ab:b5:53:91:3e:39:c1:fb:60:ba:b0:9c:36:9f:84:dc:
2c:97:a7:b8:16:a6:c0:04:be:e6:81:e4:44:29:4f:22:0d:98:
15:24:d4:83:bc:2d:88:5f:d4:f5:15:e2:73:02:46:e9:cc:54:
6d:25:56:b1:b2:08:55:ab:46:86:b3:e0:ac:0d:da:dd:71:cc:
3b:41:16:96:d9:e6:56:8d:1c:7b:42:7f:33:f3:73:c1:40:e6:
cd:a9:ca:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEo8aHj+U1YyX4FVneNjA1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl
M2U3MzMwHhcNMjUwNDMwMDMwMDQ3WhcNMjUwNTAxMDMwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZmU1N2ZhMDVjNjY4ZjdjMWFhYWJhZjAxMWNiMjE4MzQ4MWYxY2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuEW8enBjbtIih4+U31P2gz1Vy6b
F5GmSyIJwp5tYoNDAB6zAtiMz1dbKuXK/HVj6m5qQIeN5dMziLLsdHoJZleMiap/
A++e+1yp30oFalWA/FbuIoDm7lHAMiQ1I2+ehZkypvyyB/VLRB7GnfhBgmG4CPtp
T/q4otPV3iXhuxs19+1hICamUFisRnI3/2xdLjLG1MET7t52hurqaufI84BolxGD
E96tXEb9WsGDNDoSisd8VzZi3cxCL5bGmBtKGBuYUJ+bdn7A7H7tmJtlVu4LBJiM
n+yXKXSU0elwrZCBQK+mK+NiGf2NCPrYHlp+0eaj5Hh3HuJnAT/n5aN7XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/lf6BcZo98Gqq68BHLIYNIHxzvMB8GA1UdIwQY
MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt
ZTg3NTEwM2ZhZjEyLzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy
LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1hCFW/1B
Xz4mrlvt/SB1RmdGytTO00LPekNiEWwN/RhQeNZ5r1407UkPR3mOH/jFfjm03S3+
F963dMaxDpFIKsZVEQbeZfKsEvacKZKi3kSzub5dFBbmLLODIzMT90/hJnFjNhcb
9akxgihx2sGezkTYiqeZhQ+B2jvTKtTozWZvuRkAuwsA1A9baM9cRVvONF8PQWra
NR2GIhWQAO2kQ9lv4Q6rtVORPjnB+2C6sJw2n4TcLJenuBamwAS+5oHkRClPIg2Y
FSTUg7wtiF/U9RXicwJG6cxUbSVWsbIIVatGhrPgrA3a3XHMO0EWltnmVo0ce0J/
M/NzwUDmzanKyA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 06:47:38 2025 by rpki-client