Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: N6OnvxhqNWOoc9aBXo2MVuaxN+5+nAR8PzKVQAkW7kI=
Subject key identifier: DD:3A:4A:AC:52:4B:DE:8C:64:67:F3:E9:23:7B:EF:9E:9E:32:73:9E
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 019680C705D629619626C2EC7CA80202DB57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0B26
Signing time: Tue 29 Apr 2025 09:00:48 +0000
Manifest this update: Tue 29 Apr 2025 09:00:48 +0000
Manifest next update: Wed 30 Apr 2025 09:00:48 +0000
Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: v6wQM5aZS1p+XhgZs6PqaxIF2Ds5uS/UEZDyfwxexbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c7:05:d6:29:61:96:26:c2:ec:7c:a8:02:02:db:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Apr 29 09:00:48 2025 GMT
Not After : Apr 30 09:00:48 2025 GMT
Subject: CN=dd3a4aac524bde8c6467f3e9237bef9e9e32739e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:18:41:29:a8:81:73:20:b0:a4:d7:51:cc:
16:f7:ae:6f:d5:6f:66:44:32:88:d2:9f:a5:d2:44:
46:f4:33:82:57:19:26:b2:93:ee:b8:fa:a3:2b:c9:
a6:7c:3e:cd:4a:04:e5:d9:d2:8f:0a:6b:36:89:5a:
6d:80:cd:63:38:e9:30:ff:af:75:ab:26:a8:98:c4:
95:d5:d9:45:70:53:d0:81:90:27:f2:7c:25:ae:0a:
a8:63:7b:36:7f:d4:fd:ed:9f:0c:cb:b2:e9:6a:1f:
31:a9:f0:b8:e3:cb:15:6f:af:32:9d:84:64:49:9b:
b4:df:5f:10:58:db:ae:12:49:1b:d5:ef:e7:1f:a4:
3a:c2:4f:82:61:62:57:a0:11:56:e9:54:a5:a5:9c:
bc:c8:dc:93:2e:2a:52:c8:96:e9:71:5c:89:4c:9e:
8a:4b:ac:2d:1d:54:8d:c1:50:d5:b6:3c:eb:81:4c:
9b:e9:93:72:ec:6e:a2:5a:bf:37:78:8e:3a:71:8f:
5d:ae:4a:14:6c:3c:1a:99:bd:55:9b:a8:7d:9c:57:
73:c6:a1:9f:d5:61:4b:52:e0:e3:81:16:cb:03:08:
7c:95:31:b4:85:09:35:4a:5a:11:d8:98:d5:4a:ee:
93:3e:f5:55:0d:61:62:be:54:9d:dc:9c:f6:2f:a6:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3A:4A:AC:52:4B:DE:8C:64:67:F3:E9:23:7B:EF:9E:9E:32:73:9E
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fa:8d:40:45:e8:e1:f7:7a:6e:dd:cc:8c:7e:9e:8b:c5:ca:
02:37:8e:29:0e:0f:14:88:36:33:c2:e3:73:b5:e6:99:35:c0:
af:8b:fc:3b:99:22:44:dc:d1:d0:ce:c0:f8:55:61:71:6a:50:
3a:ba:19:1c:c5:15:dc:fe:e5:59:52:96:2f:05:ef:c7:66:51:
13:7f:78:9f:70:f1:72:fa:5d:27:32:b5:e5:71:ba:f2:dd:ff:
96:2f:e6:09:90:35:7e:fc:03:ca:30:f7:1f:8b:1c:94:7d:d5:
6f:a4:92:ec:af:a1:a1:7b:79:3a:30:28:cc:b7:18:0d:82:3b:
6a:95:3a:dc:ac:f3:55:79:5f:e9:fe:34:b9:42:de:fa:f7:9a:
6e:cf:0f:ce:69:0a:6b:1d:2d:5a:8b:6a:68:83:b8:f4:54:1f:
f7:d9:44:d6:56:6d:46:75:43:a9:23:2c:b2:48:ba:bb:b5:54:
6c:c0:10:d9:1f:ff:bd:99:e6:e1:1b:d0:1c:20:42:97:22:0a:
9b:c9:4b:74:d4:f3:3a:a6:b8:60:11:c7:24:3f:bb:86:8e:d7:
6e:59:f6:2c:88:6c:1e:f9:ab:01:f4:ac:86:30:b6:b0:62:17:
02:9a:66:33:4a:5d:8a:44:1c:2a:7e:51:d5:b5:13:02:4d:bf:
86:9f:38:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAxwXWKWGWJsLsfKgCAttXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMGE4YzE3NzkxMWY2NGMzMDU1NzM2ODgxNWI5ZTY3ZDhm
YzNjMGYwHhcNMjUwNDI5MDkwMDQ4WhcNMjUwNDMwMDkwMDQ4WjAzMTEwLwYDVQQD
EyhkZDNhNGFhYzUyNGJkZThjNjQ2N2YzZTkyMzdiZWY5ZTllMzI3MzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmQYQSmogXMgsKTXUcwW965v1W9m
RDKI0p+l0kRG9DOCVxkmspPuuPqjK8mmfD7NSgTl2dKPCms2iVptgM1jOOkw/691
qyaomMSV1dlFcFPQgZAn8nwlrgqoY3s2f9T97Z8My7Lpah8xqfC448sVb68ynYRk
SZu0318QWNuuEkkb1e/nH6Q6wk+CYWJXoBFW6VSlpZy8yNyTLipSyJbpcVyJTJ6K
S6wtHVSNwVDVtjzrgUyb6ZNy7G6iWr83eI46cY9drkoUbDwamb1Vm6h9nFdzxqGf
1WFLUuDjgRbLAwh8lTG0hQk1SloR2JjVSu6TPvVVDWFivlSd3Jz2L6YfXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN06SqxSS96MZGfz6SN7756eMnOeMB8GA1UdIwQY
MBaAFJwKjBd5EfZMMFVzaIFbnmfY/DwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5Zjct
ZDU2Mzc0ZTExNTdhLzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5ZjctZDU2Mzc0ZTExNTdh
LzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfqNQEXo
4fd6bt3MjH6ei8XKAjeOKQ4PFIg2M8Ljc7XmmTXAr4v8O5kiRNzR0M7A+FVhcWpQ
OroZHMUV3P7lWVKWLwXvx2ZRE394n3DxcvpdJzK15XG68t3/li/mCZA1fvwDyjD3
H4sclH3Vb6SS7K+hoXt5OjAozLcYDYI7apU63KzzVXlf6f40uULe+veabs8PzmkK
ax0tWotqaIO49FQf99lE1lZtRnVDqSMsski6u7VUbMAQ2R//vZnm4RvQHCBClyIK
m8lLdNTzOqa4YBHHJD+7ho7Xbln2LIhsHvmrAfSshjC2sGIXAppmM0pdikQcKn5R
1bUTAk2/hp84Vg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:47:42 2025 by rpki-client