Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
File: nY85NIPUicQp_Biwk0LXbQr-QkQ.mft (raw, json)
Hash identifier: GNCu2yZHXBaJLstR3hWvjuiw3cu9wsDjymn7QlyIbWA=
Subject key identifier: 49:2F:62:A3:A7:19:28:E6:53:F2:A0:35:9F:A7:E4:2C:82:3C:01:75
Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
Certificate issuer: /CN=9d8f393483d489c429fc18b09342d76d0afe4244
Certificate serial: 019682EC30CA377EAB71C16AE87EA15E110D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
Manifest number: 10FF
Signing time: Tue 29 Apr 2025 19:00:39 +0000
Manifest this update: Tue 29 Apr 2025 19:00:39 +0000
Manifest next update: Wed 30 Apr 2025 19:00:39 +0000
Files and hashes: 1: fCKBgjNaPgCYlEAaSC02t2TX-HQ.roa (hash: z50OwHqPJLgmTj1OD+z+QDtPxp5JJkD8lN3khIG3bwQ=)
2: nY85NIPUicQp_Biwk0LXbQr-QkQ.crl (hash: GCb9DQ7mw5ywJolaZRLhFoPK0REL1cQsjaSdGYvqiAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:30:ca:37:7e:ab:71:c1:6a:e8:7e:a1:5e:11:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244
Validity
Not Before: Apr 29 19:00:39 2025 GMT
Not After : Apr 30 19:00:39 2025 GMT
Subject: CN=492f62a3a71928e653f2a0359fa7e42c823c0175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:9b:42:e6:3e:45:4c:ec:71:49:68:63:f6:
2c:b4:e6:0d:39:ab:b1:cf:c5:d2:8e:91:b0:3e:30:
e8:c2:d7:c2:70:14:67:c2:dd:24:23:41:28:b8:37:
a1:95:b4:7d:9f:59:38:df:26:c7:3c:1a:3c:39:cc:
b3:03:2c:26:34:8c:7e:ec:b6:39:4c:9e:70:7f:1b:
57:a2:c7:82:df:e8:ea:3b:22:99:70:a6:2c:5b:1d:
01:12:fc:de:7a:8e:e9:67:d4:ce:11:90:49:55:48:
35:ac:93:23:37:f2:02:62:d7:b0:8a:06:49:5f:e4:
dd:30:ef:1b:6d:ae:bf:53:e8:e4:64:45:0d:f1:32:
5e:e8:5f:9a:5c:af:a0:6a:a0:be:20:0d:b0:9f:de:
ad:ec:05:16:48:fd:6c:5e:2e:84:e3:74:f3:f3:79:
af:15:2d:95:de:0c:0c:7f:51:76:3a:27:25:1d:75:
6b:83:09:06:23:b1:8d:8a:a4:b7:26:1d:5f:bc:d8:
9d:b5:bf:4b:a0:a9:09:b8:b6:9b:9a:e5:ad:de:b9:
7e:87:5f:90:b8:f3:8a:5d:d4:c4:90:24:9f:d3:6d:
b7:cf:bc:fe:46:fc:d9:68:91:cc:41:73:3e:e3:65:
b3:de:a5:4e:7d:64:5d:df:4c:d8:2a:d2:ee:ce:a0:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2F:62:A3:A7:19:28:E6:53:F2:A0:35:9F:A7:E4:2C:82:3C:01:75
X509v3 Authority Key Identifier:
keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a7:59:72:e6:eb:ce:ac:9c:c4:cc:92:49:45:55:1f:ae:53:
c4:7b:7f:27:b0:31:a4:35:3a:c8:f2:16:51:57:dc:70:0e:eb:
b9:bd:c9:d4:04:31:bb:0a:4d:99:31:74:c8:c9:0e:d4:0b:c3:
6f:75:c6:02:37:bd:5c:09:5c:0d:9f:5a:b1:cd:40:86:00:96:
45:12:cc:2d:cc:b3:8c:d7:75:e7:05:df:1e:26:e1:00:c7:d6:
7f:b7:20:4f:c3:61:c8:d3:78:d8:d7:9f:38:1b:39:f9:62:4a:
6d:a6:69:99:54:1a:eb:eb:c6:d9:60:43:3c:36:2e:dd:99:e7:
2d:77:a3:b6:2c:67:63:34:94:5a:f3:8a:c7:5b:15:86:9a:74:
cd:b5:26:75:0f:7d:77:f0:c3:6c:48:a4:19:7c:37:36:f8:63:
61:4f:65:18:66:d8:d5:4f:cb:80:65:0f:4e:ee:96:7f:a0:b2:
09:0d:ab:f8:d5:2c:9c:0d:9f:85:ad:e6:d8:2e:ff:15:99:c5:
a6:b9:4c:be:50:a0:ed:b3:92:34:d7:6e:31:4e:b4:2e:11:4b:
c9:5d:06:9f:38:a5:84:b7:73:0d:58:6a:fe:b1:ed:59:9e:e0:
29:23:66:d3:0b:5a:95:f0:a5:d1:35:c6:04:f9:84:f7:9e:ea:
f7:33:c5:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaC7DDKN36rccFq6H6hXhENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOGYzOTM0ODNkNDg5YzQyOWZjMThiMDkzNDJkNzZkMGFm
ZTQyNDQwHhcNMjUwNDI5MTkwMDM5WhcNMjUwNDMwMTkwMDM5WjAzMTEwLwYDVQQD
Eyg0OTJmNjJhM2E3MTkyOGU2NTNmMmEwMzU5ZmE3ZTQyYzgyM2MwMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9ObQuY+RUzscUloY/YstOYNOaux
z8XSjpGwPjDowtfCcBRnwt0kI0EouDehlbR9n1k43ybHPBo8OcyzAywmNIx+7LY5
TJ5wfxtXoseC3+jqOyKZcKYsWx0BEvzeeo7pZ9TOEZBJVUg1rJMjN/ICYtewigZJ
X+TdMO8bba6/U+jkZEUN8TJe6F+aXK+gaqC+IA2wn96t7AUWSP1sXi6E43Tz83mv
FS2V3gwMf1F2OiclHXVrgwkGI7GNiqS3Jh1fvNidtb9LoKkJuLabmuWt3rl+h1+Q
uPOKXdTEkCSf0223z7z+RvzZaJHMQXM+42Wz3qVOfWRd30zYKtLuzqCZ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkvYqOnGSjmU/KgNZ+n5CyCPAF1MB8GA1UdIwQY
MBaAFJ2POTSD1InEKfwYsJNC120K/kJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblk4NU5JUFVpY1FwX0Jpd2swTFhiUXItUWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85ZTgxNjYtMTYwZi00Y2UyLTkwMTct
MWUxNTFhYTFhZmRjLzEvblk4NU5JUFVpY1FwX0Jpd2swTFhiUXItUWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85ZTgxNjYtMTYwZi00Y2UyLTkwMTctMWUxNTFhYTFhZmRj
LzEvblk4NU5JUFVpY1FwX0Jpd2swTFhiUXItUWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6dZcubr
zqycxMySSUVVH65TxHt/J7AxpDU6yPIWUVfccA7rub3J1AQxuwpNmTF0yMkO1AvD
b3XGAje9XAlcDZ9asc1AhgCWRRLMLcyzjNd15wXfHibhAMfWf7cgT8NhyNN42Nef
OBs5+WJKbaZpmVQa6+vG2WBDPDYu3ZnnLXejtixnYzSUWvOKx1sVhpp0zbUmdQ99
d/DDbEikGXw3NvhjYU9lGGbY1U/LgGUPTu6Wf6CyCQ2r+NUsnA2fha3m2C7/FZnF
prlMvlCg7bOSNNduMU60LhFLyV0GnzilhLdzDVhq/rHtWZ7gKSNm0wtalfCl0TXG
BPmE957q9zPFrg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:31:31 2025 by rpki-client