Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: DHf4P2F8lTFNvNDnZJYImqmrRgWtQkZ6N1VUNE3nrEg=
Subject key identifier: BE:73:2F:0A:39:5D:C7:4D:9F:95:B1:AA:C1:46:AF:74:D5:59:1D:2B
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 019681346AD37E66253F764E2ABB855ED274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 1A
Signing time: Tue 29 Apr 2025 11:00:17 +0000
Manifest this update: Tue 29 Apr 2025 11:00:17 +0000
Manifest next update: Wed 30 Apr 2025 11:00:17 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: y/57bI6pkfI6s9lEDviGj5Lmt7XcSvnk4XmYwTpWrQE=)
2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:6a:d3:7e:66:25:3f:76:4e:2a:bb:85:5e:d2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Apr 29 11:00:17 2025 GMT
Not After : Apr 30 11:00:17 2025 GMT
Subject: CN=be732f0a395dc74d9f95b1aac146af74d5591d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:21:5d:9a:7a:b6:73:25:bc:55:21:da:2c:34:
96:0d:b1:13:e7:0b:87:c5:45:b9:c0:db:c9:99:eb:
17:64:27:2d:35:63:20:df:c2:b3:1e:6b:fd:36:ee:
58:2a:fd:ef:e8:48:14:fc:57:89:33:14:24:b4:f4:
e8:12:30:e8:7e:68:a9:cd:89:f5:ae:f8:d6:6f:8b:
e9:02:c4:c4:64:d7:07:76:7b:bb:30:28:ea:0e:cb:
5e:62:b8:f4:c2:c2:f4:6b:ef:a3:ec:ef:d8:11:6b:
b1:72:71:c3:80:62:b2:36:05:7d:c1:51:fa:8d:2b:
a4:1e:5b:1f:cc:cb:50:1e:bc:cf:2c:23:36:57:1b:
3e:23:30:8c:4d:7e:18:2b:3c:ee:4c:ba:89:c4:d6:
f4:a2:2c:95:06:fc:6c:e2:cd:96:83:65:ee:f0:e0:
f4:f5:36:c3:ee:53:d8:90:64:bc:a8:11:f2:c8:fd:
30:c6:a4:8a:e3:e4:1a:f1:30:00:c3:8c:75:52:e7:
e2:ec:76:65:2c:53:50:fc:55:b7:97:2d:e0:ef:a9:
83:2a:35:62:5a:68:d0:d2:e6:9c:2e:f7:b4:d7:40:
5c:a9:dd:e6:37:e9:5a:2c:cc:43:85:d6:f3:a2:aa:
66:97:43:a3:61:eb:70:c1:68:dc:53:f4:5e:1a:76:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:73:2F:0A:39:5D:C7:4D:9F:95:B1:AA:C1:46:AF:74:D5:59:1D:2B
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:68:9d:37:4b:46:64:5a:9b:4a:f5:95:b1:d8:bc:c9:62:d1:
0d:24:09:d6:20:04:c2:2c:7b:5b:9f:4e:8f:6a:f6:d8:3f:6d:
20:0a:1f:d8:9f:91:ea:76:33:67:a7:d2:d9:08:4d:b0:5d:0d:
6c:96:f6:60:77:cf:84:3e:23:b5:68:57:dd:18:cd:71:de:3a:
2d:9c:87:8b:31:65:de:52:35:b1:25:61:97:95:e8:72:03:c5:
2a:4a:11:9c:48:a9:24:ce:04:1b:96:52:b3:92:5a:49:a2:64:
e5:ab:ae:e1:98:62:1c:1c:79:c8:a0:b7:f1:ab:a6:dc:e4:0a:
40:39:a0:38:c4:0f:49:3d:84:c0:ba:18:10:14:01:0a:6a:fc:
7f:13:a0:f6:09:1f:0c:b8:ad:e1:18:30:1e:bd:1f:4c:22:ca:
32:bf:13:8c:cf:c5:d0:4e:e6:f8:97:92:b3:da:61:97:0e:cb:
71:24:d2:19:22:9c:71:e6:72:f6:e9:7f:bb:58:44:89:57:95:
43:bc:f7:5e:a9:be:b5:23:a1:a5:00:b6:ac:4d:0f:02:de:a4:
a6:90:7b:26:6c:ba:16:b6:8d:a1:1d:11:7a:0a:97:78:0c:a2:
34:4d:a4:8d:a3:ec:e9:26:88:51:a5:3f:2a:07:b8:17:48:a2:
43:e3:09:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBNGrTfmYlP3ZOKruFXtJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTE5M2M5NDJhMDcwZWI2ZTdiNzZkMzNjMTE3MGMxYWJh
YWFiYzAwHhcNMjUwNDI5MTEwMDE3WhcNMjUwNDMwMTEwMDE3WjAzMTEwLwYDVQQD
EyhiZTczMmYwYTM5NWRjNzRkOWY5NWIxYWFjMTQ2YWY3NGQ1NTkxZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yFdmnq2cyW8VSHaLDSWDbET5wuH
xUW5wNvJmesXZCctNWMg38KzHmv9Nu5YKv3v6EgU/FeJMxQktPToEjDofmipzYn1
rvjWb4vpAsTEZNcHdnu7MCjqDsteYrj0wsL0a++j7O/YEWuxcnHDgGKyNgV9wVH6
jSukHlsfzMtQHrzPLCM2Vxs+IzCMTX4YKzzuTLqJxNb0oiyVBvxs4s2Wg2Xu8OD0
9TbD7lPYkGS8qBHyyP0wxqSK4+Qa8TAAw4x1Uufi7HZlLFNQ/FW3ly3g76mDKjVi
WmjQ0uacLve010Bcqd3mN+laLMxDhdbzoqpml0OjYetwwWjcU/ReGnZpIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5zLwo5XcdNn5WxqsFGr3TVWR0rMB8GA1UdIwQY
MBaAFJyRk8lCoHDrbnt20zwRcMGrqqvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUt
Y2UwZTk3YmFiNmE3LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUtY2UwZTk3YmFiNmE3
LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvmidN0tG
ZFqbSvWVsdi8yWLRDSQJ1iAEwix7W59Oj2r22D9tIAof2J+R6nYzZ6fS2QhNsF0N
bJb2YHfPhD4jtWhX3RjNcd46LZyHizFl3lI1sSVhl5XocgPFKkoRnEipJM4EG5ZS
s5JaSaJk5auu4ZhiHBx5yKC38aum3OQKQDmgOMQPST2EwLoYEBQBCmr8fxOg9gkf
DLit4RgwHr0fTCLKMr8TjM/F0E7m+JeSs9phlw7LcSTSGSKcceZy9ul/u1hEiVeV
Q7z3Xqm+tSOhpQC2rE0PAt6kppB7Jmy6FraNoR0RegqXeAyiNE2kjaPs6SaIUaU/
Kge4F0iiQ+MJ6w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:26:19 2025 by rpki-client