Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
File: m-NDwvs9a40jeJq02m_NRlppBYM.mft (raw, json)
Hash identifier: VVP07WaEJntSRn8eNlx923VepqDfCzjm3cOHs/uZL1Q=
Subject key identifier: 36:7B:69:DB:16:2E:E3:37:F4:62:50:EF:3B:63:FE:8A:6C:A1:81:63
Authority key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
Certificate issuer: /CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Certificate serial: 0196771EF9A26F2A186A4430A5EAE49CF986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
Manifest number: 08FA
Signing time: Sun 27 Apr 2025 12:00:40 +0000
Manifest this update: Sun 27 Apr 2025 12:00:40 +0000
Manifest next update: Mon 28 Apr 2025 12:00:40 +0000
Files and hashes: 1: V1rYVkHJ4iIIHNg29wauYpELwcg.roa (hash: 7R1pOTL7gS5y/fLoZFKL53bP7clTOjblHiZzRpiMJxQ=)
2: m-NDwvs9a40jeJq02m_NRlppBYM.crl (hash: RpzAl8HBFIMZZ95jEqSzSp7lNY1xaJGUVIxHGReX4Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:f9:a2:6f:2a:18:6a:44:30:a5:ea:e4:9c:f9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Validity
Not Before: Apr 27 12:00:40 2025 GMT
Not After : Apr 28 12:00:40 2025 GMT
Subject: CN=367b69db162ee337f46250ef3b63fe8a6ca18163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:f9:b8:cd:52:65:6c:80:4a:60:c4:a3:6f:
d7:ad:27:62:16:bc:0f:47:df:04:ce:09:4b:0c:ad:
49:b4:58:6c:60:93:99:7b:a4:3e:87:0f:45:63:d7:
51:a7:6f:11:99:ab:27:0e:8f:fb:0d:82:3a:81:0a:
0b:0d:88:19:12:0f:1b:fa:4e:51:47:b4:5b:90:2a:
90:13:86:7a:ab:a0:e5:89:8b:28:7b:8d:44:59:05:
51:0e:32:7b:07:bb:d6:4a:7d:62:35:00:61:2f:bd:
40:6a:95:91:c0:49:0b:9b:5a:52:d7:21:de:41:a5:
6f:30:3b:68:66:5c:28:69:ef:d4:fe:e4:09:b7:a3:
d9:a2:ea:89:12:fc:90:c9:f2:c3:52:f5:1e:3d:04:
cb:31:44:4e:9b:2b:e4:b3:29:e1:67:46:b9:ca:77:
b7:35:17:5a:37:07:db:ac:00:dd:00:44:43:8d:39:
be:22:f0:c4:5d:30:f2:fb:dd:83:49:6b:ab:71:9a:
50:f5:6c:78:6b:00:73:1d:9b:10:f0:34:77:7e:10:
ff:9d:ec:1a:fd:12:cc:7f:d3:14:aa:78:5d:3e:ba:
94:49:bf:6b:96:0f:ff:06:82:b4:b5:4e:8d:ce:69:
f8:09:87:bf:95:47:b7:a5:f1:33:9d:80:fb:2f:bb:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7B:69:DB:16:2E:E3:37:F4:62:50:EF:3B:63:FE:8A:6C:A1:81:63
X509v3 Authority Key Identifier:
keyid:9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:50:d2:11:b8:75:b6:44:f4:a1:2f:98:44:2d:a6:6a:35:db:
15:3f:77:1d:4d:43:9b:98:50:04:88:07:cb:21:50:8b:3a:1d:
bd:cf:ea:54:ef:d8:47:6e:95:ad:b3:2f:8b:2e:c2:ce:43:73:
d7:f0:59:e5:a0:57:3a:1d:dc:25:ae:00:a3:3c:bc:58:3b:17:
0c:22:18:11:40:b9:82:cc:d7:b8:33:5b:84:f5:2a:e2:00:bf:
6f:da:d3:af:5f:b1:55:9f:df:b7:08:41:f5:73:b7:10:a6:08:
c6:ab:44:ce:8e:7c:df:9e:01:54:06:24:f5:d6:aa:f7:dc:bb:
2d:2d:ff:18:8c:a4:d6:98:fd:5d:db:3a:1d:b5:70:66:1b:f8:
dd:d4:2f:af:14:38:97:b9:75:64:07:f0:5c:63:df:ba:f7:3a:
81:96:a2:42:cc:f6:bb:24:8e:75:82:a7:2b:98:32:e3:bb:56:
03:51:d4:4e:83:d5:12:41:9e:eb:79:65:b5:97:6e:b8:65:ea:
d5:d5:e8:22:bf:45:68:c3:4e:6f:11:cf:d8:61:f8:23:65:67:
cb:99:0b:a9:aa:62:70:7f:4a:21:6c:fe:02:c5:ce:c3:1d:08:
d4:33:33:86:83:ab:d2:e0:0d:0f:b7:fa:29:07:e9:e5:dc:bd:
40:f7:0e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3HvmibyoYakQwperknPmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTM0M2MyZmIzZDZiOGQyMzc4OWFiNGRhNmZjZDQ2NWE2
OTA1ODMwHhcNMjUwNDI3MTIwMDQwWhcNMjUwNDI4MTIwMDQwWjAzMTEwLwYDVQQD
EygzNjdiNjlkYjE2MmVlMzM3ZjQ2MjUwZWYzYjYzZmU4YTZjYTE4MTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxX5uM1SZWyASmDEo2/XrSdiFrwP
R98EzglLDK1JtFhsYJOZe6Q+hw9FY9dRp28RmasnDo/7DYI6gQoLDYgZEg8b+k5R
R7RbkCqQE4Z6q6DliYsoe41EWQVRDjJ7B7vWSn1iNQBhL71AapWRwEkLm1pS1yHe
QaVvMDtoZlwoae/U/uQJt6PZouqJEvyQyfLDUvUePQTLMUROmyvksynhZ0a5yne3
NRdaNwfbrADdAERDjTm+IvDEXTDy+92DSWurcZpQ9Wx4awBzHZsQ8DR3fhD/newa
/RLMf9MUqnhdPrqUSb9rlg//BoK0tU6Nzmn4CYe/lUe3pfEznYD7L7vAqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZ7adsWLuM39GJQ7ztj/opsoYFjMB8GA1UdIwQY
MBaAFJvjQ8L7PWuNI3iatNpvzUZaaQWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWJkOTMtOTJiZC00YmY5LWI2NTUt
YWRjZWZkYWExMDI4LzEvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOWJkOTMtOTJiZC00YmY5LWI2NTUtYWRjZWZkYWExMDI4
LzEvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1DSEbh1
tkT0oS+YRC2majXbFT93HU1Dm5hQBIgHyyFQizodvc/qVO/YR26VrbMviy7CzkNz
1/BZ5aBXOh3cJa4Aozy8WDsXDCIYEUC5gszXuDNbhPUq4gC/b9rTr1+xVZ/ftwhB
9XO3EKYIxqtEzo58354BVAYk9daq99y7LS3/GIyk1pj9Xds6HbVwZhv43dQvrxQ4
l7l1ZAfwXGPfuvc6gZaiQsz2uySOdYKnK5gy47tWA1HUToPVEkGe63lltZduuGXq
1dXoIr9FaMNObxHP2GH4I2Vny5kLqapicH9KIWz+AsXOwx0I1DMzhoOr0uAND7f6
KQfp5dy9QPcO3Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:11:37 2025 by rpki-client