Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File: n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier: f6kkvgmWJ6X74ELo00l0AYjKApuYAnumIcVqQEv77AY=
Subject key identifier: 33:E9:AE:D2:5F:F7:44:DE:66:80:C7:97:B1:79:A9:D1:DD:34:B9:4E
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial: 019679E96B683BE402B68EBD9EF5C218AC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number: 094F
Signing time: Mon 28 Apr 2025 01:01:02 +0000
Manifest this update: Mon 28 Apr 2025 01:01:02 +0000
Manifest next update: Tue 29 Apr 2025 01:01:02 +0000
Files and hashes: 1: D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa (hash: zDBANuUPdW/jRqqSGkjw8mcyfQtAQBZkgjZavcu4Hqg=)
2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: 6ES8cK2W5tSitvlTSh/eyWhA4QTIe8SAKjYdmxzJz5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:6b:68:3b:e4:02:b6:8e:bd:9e:f5:c2:18:ac:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Validity
Not Before: Apr 28 01:01:02 2025 GMT
Not After : Apr 29 01:01:02 2025 GMT
Subject: CN=33e9aed25ff744de6680c797b179a9d1dd34b94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:70:8e:bb:d8:4f:db:61:9e:1c:98:89:0a:
42:54:6a:3a:76:59:9f:f0:ed:34:59:49:84:2c:68:
2d:2f:83:d3:9d:9d:4e:72:c3:24:70:67:46:3d:1e:
32:84:c0:69:e3:2a:29:70:1e:d3:5d:ce:8c:f1:c6:
a0:af:db:3f:e2:ea:53:98:d3:f5:52:dd:91:00:28:
5a:62:fc:5b:f0:49:19:37:2b:69:2b:53:05:2e:fa:
f9:46:96:b9:91:2b:a6:05:a5:d1:6d:ca:e8:a0:c6:
bb:96:ff:fe:9c:f9:cb:cc:b5:4d:0e:33:44:49:5f:
84:ac:76:a8:d3:3a:0f:4e:17:b4:5a:d7:ff:e5:6c:
07:c8:c5:7d:ed:4e:c4:9b:29:18:82:33:70:9a:d2:
83:5f:a1:d0:2b:2f:d5:a4:56:b5:b0:1b:53:02:e0:
4a:98:9e:8e:8a:ab:a8:45:64:e8:b3:ba:5f:8e:6c:
48:b5:4c:f2:41:3c:2e:ba:99:0e:45:94:a7:90:9a:
74:63:b1:7b:16:d2:49:c3:e9:fa:1a:5c:06:88:bc:
ad:14:58:ea:bd:84:76:54:56:2b:5c:2d:7f:41:ae:
09:87:59:14:4d:79:61:3f:d6:7b:b1:ab:e1:7a:c2:
56:d5:fb:26:4e:47:4b:7f:63:c2:0f:c3:5b:17:6e:
87:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E9:AE:D2:5F:F7:44:DE:66:80:C7:97:B1:79:A9:D1:DD:34:B9:4E
X509v3 Authority Key Identifier:
keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d4:ce:7d:c5:4a:b6:8b:84:bd:fd:b7:06:7d:52:a1:38:50:
9a:e4:1e:e2:76:91:aa:49:4b:73:c7:ad:65:7d:7c:a1:f9:ca:
46:64:f7:41:92:bc:82:24:ac:e8:c2:0f:2a:bc:5e:7a:d5:93:
ae:78:41:fa:17:f2:e0:fa:c8:3b:12:5d:2f:a9:55:9a:bb:99:
bc:b3:d9:43:d1:02:54:20:a7:8b:00:4a:7c:82:c1:b2:36:20:
77:2d:90:8b:fa:2b:17:b7:eb:16:f4:a5:42:fb:dd:db:7b:26:
aa:e3:73:51:e1:eb:aa:f1:85:b2:21:a2:af:ed:28:71:c8:60:
55:bd:a5:d1:2a:3e:38:89:79:b7:1e:f7:6d:59:a9:2d:bf:e5:
79:f6:7e:42:0b:1d:39:fe:3d:71:41:d4:60:f4:46:04:fa:b1:
4e:c7:74:b9:6c:84:4b:ce:80:de:aa:28:08:d2:cb:39:62:9f:
28:44:c9:2c:9f:20:51:d1:21:52:cb:27:8a:04:28:e0:01:24:
7b:f5:8f:cd:53:e0:93:86:75:2c:e2:11:72:5e:3f:5b:6b:ea:
91:6f:01:93:ff:87:66:ed:74:75:4e:37:74:4d:cd:46:98:a2:
f1:17:39:39:a8:5f:a7:ca:71:20:47:50:8a:46:86:59:d3:0b:
49:21:6e:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56WtoO+QCto69nvXCGKwpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODkxZmYzNDc3ZWQ3ZmRhYWNmYWUyZTNmMGRmYTY0ZmQ5
MmFjMGMwHhcNMjUwNDI4MDEwMTAyWhcNMjUwNDI5MDEwMTAyWjAzMTEwLwYDVQQD
EygzM2U5YWVkMjVmZjc0NGRlNjY4MGM3OTdiMTc5YTlkMWRkMzRiOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP9wjrvYT9thnhyYiQpCVGo6dlmf
8O00WUmELGgtL4PTnZ1OcsMkcGdGPR4yhMBp4yopcB7TXc6M8cagr9s/4upTmNP1
Ut2RAChaYvxb8EkZNytpK1MFLvr5Rpa5kSumBaXRbcrooMa7lv/+nPnLzLVNDjNE
SV+ErHao0zoPThe0Wtf/5WwHyMV97U7EmykYgjNwmtKDX6HQKy/VpFa1sBtTAuBK
mJ6OiquoRWTos7pfjmxItUzyQTwuupkORZSnkJp0Y7F7FtJJw+n6GlwGiLytFFjq
vYR2VFYrXC1/Qa4Jh1kUTXlhP9Z7savhesJW1fsmTkdLf2PCD8NbF26HZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPprtJf90TeZoDHl7F5qdHdNLlOMB8GA1UdIwQY
MBaAFJ+JH/NHftf9qs+uLj8N+mT9kqwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jNzc4MzMtMzFhZS00NDEyLWIwNDkt
NzBhNGE4ZDdjNDNmLzEvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jNzc4MzMtMzFhZS00NDEyLWIwNDktNzBhNGE4ZDdjNDNm
LzEvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdTOfcVK
touEvf23Bn1SoThQmuQe4naRqklLc8etZX18ofnKRmT3QZK8giSs6MIPKrxeetWT
rnhB+hfy4PrIOxJdL6lVmruZvLPZQ9ECVCCniwBKfILBsjYgdy2Qi/orF7frFvSl
Qvvd23smquNzUeHrqvGFsiGir+0occhgVb2l0So+OIl5tx73bVmpLb/lefZ+Qgsd
Of49cUHUYPRGBPqxTsd0uWyES86A3qooCNLLOWKfKETJLJ8gUdEhUssnigQo4AEk
e/WPzVPgk4Z1LOIRcl4/W2vqkW8Bk/+HZu10dU43dE3NRpii8Rc5Oahfp8pxIEdQ
ikaGWdMLSSFusw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:34:21 2025 by rpki-client