Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier: JeIa6QqaDaFwV76c5BzW9waHgVGDVpFAqPQQl0lkqCM=
Subject key identifier: 04:51:83:F8:70:FF:AA:94:D0:8D:01:DF:C5:07:88:90:6B:5A:A5:DB
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial: 019655377698551A9A2A3E3831B8AB3F4753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number: 10C1
Signing time: Sun 20 Apr 2025 22:00:20 +0000
Manifest this update: Sun 20 Apr 2025 22:00:20 +0000
Manifest next update: Mon 21 Apr 2025 22:00:20 +0000
Files and hashes: 1: UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa (hash: hiy12f2VyI89A+R22FhEyFKlin2hs0EKoXos1apn778=)
2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: JYx+CYLr/2283tDU2iw9wfjhobQCDmb2HGxWkDTtvV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:76:98:55:1a:9a:2a:3e:38:31:b8:ab:3f:47:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
Validity
Not Before: Apr 20 22:00:20 2025 GMT
Not After : Apr 21 22:00:20 2025 GMT
Subject: CN=045183f870ffaa94d08d01dfc50788906b5aa5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:c2:1e:75:d4:58:29:f9:67:c0:a6:bd:97:
9a:ea:42:13:ea:88:30:68:83:14:20:ec:be:5a:43:
f3:37:6b:f8:9c:53:78:af:02:70:cd:86:45:2b:3a:
1e:11:44:23:2b:9f:dd:50:a2:8e:9b:6d:71:e6:c9:
08:8e:5d:e6:a9:15:00:5d:e3:80:10:0a:99:89:72:
89:12:9d:21:90:ef:c8:0c:28:d9:ee:fb:d2:a0:bc:
67:d2:43:30:a1:d9:d5:3d:3f:ad:07:00:12:4b:cd:
11:87:e4:41:e3:35:ec:90:85:7f:e7:bb:36:53:6c:
11:3c:b3:8f:8c:46:83:13:1e:9d:4c:0d:72:db:09:
5d:44:d9:65:14:6d:0c:57:58:7e:e7:90:89:f3:bf:
c1:78:42:2b:e9:d0:a5:52:28:f9:6c:63:5d:ce:75:
c7:fc:27:83:9b:34:77:10:66:6c:1b:fb:c4:6e:d0:
89:74:2e:1f:ad:dd:14:90:55:8a:4e:8c:0f:57:22:
97:80:a7:16:ec:19:f0:f9:a3:1a:d4:20:cc:34:64:
41:30:5e:85:02:1b:7d:ec:11:cc:ed:67:15:49:79:
6d:fd:e2:26:66:12:1b:e0:bb:21:7b:69:04:8b:58:
45:c4:61:e6:db:eb:b0:17:de:a9:99:b5:87:20:c1:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:51:83:F8:70:FF:AA:94:D0:8D:01:DF:C5:07:88:90:6B:5A:A5:DB
X509v3 Authority Key Identifier:
keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a3:56:2f:bc:25:96:07:a0:fb:c7:f1:56:25:6a:1e:25:a4:
a8:87:46:41:15:fe:0f:5b:ba:83:1b:88:c7:07:ae:19:f0:ff:
6c:84:4d:45:78:05:62:90:c9:45:49:82:9e:e9:43:57:3f:5b:
6a:51:90:7c:3d:81:c2:16:7d:11:c5:7b:d4:91:4f:66:73:b7:
60:83:ca:89:9b:ea:52:10:ca:91:fe:ca:fc:e8:5f:ae:f9:97:
cc:c8:a0:ae:8f:0d:c6:a2:a9:3a:cd:2e:9c:7b:50:21:8a:22:
99:24:bd:df:42:11:9f:e7:61:6b:1a:72:b1:d3:57:cd:8c:c7:
a2:b7:a1:22:22:3e:c0:a8:43:45:b4:81:40:54:f2:a4:1e:33:
a1:c3:79:ec:99:34:38:c2:ae:f5:3a:2a:be:d6:d8:24:71:0a:
6c:cd:3d:28:db:41:0d:f5:43:00:5d:10:ed:a2:74:76:2a:d3:
ca:53:4d:ee:3d:ed:f0:cc:eb:7f:66:f9:2c:d7:24:4e:02:ae:
64:54:91:ca:54:e9:a3:fe:da:6a:23:9b:ed:39:85:a3:ce:c5:
22:f8:41:f4:74:98:a6:fb:0d:35:47:cd:ab:f7:4c:12:7b:99:
54:0d:ce:6a:70:61:20:25:f4:5d:eb:f9:55:7d:27:e3:c2:fd:
04:42:41:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVN3aYVRqaKj44MbirP0dTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYmU5YzQzZWU3NTk4OTYwMDM5MTk1MDg3MzQ3MjMzNDZi
ZjcwMTYwHhcNMjUwNDIwMjIwMDIwWhcNMjUwNDIxMjIwMDIwWjAzMTEwLwYDVQQD
EygwNDUxODNmODcwZmZhYTk0ZDA4ZDAxZGZjNTA3ODg5MDZiNWFhNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO3CHnXUWCn5Z8CmvZea6kIT6ogw
aIMUIOy+WkPzN2v4nFN4rwJwzYZFKzoeEUQjK5/dUKKOm21x5skIjl3mqRUAXeOA
EAqZiXKJEp0hkO/IDCjZ7vvSoLxn0kMwodnVPT+tBwASS80Rh+RB4zXskIV/57s2
U2wRPLOPjEaDEx6dTA1y2wldRNllFG0MV1h+55CJ87/BeEIr6dClUij5bGNdznXH
/CeDmzR3EGZsG/vEbtCJdC4frd0UkFWKTowPVyKXgKcW7Bnw+aMa1CDMNGRBMF6F
Aht97BHM7WcVSXlt/eImZhIb4Lshe2kEi1hFxGHm2+uwF96pmbWHIMF7DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARRg/hw/6qU0I0B38UHiJBrWqXbMB8GA1UdIwQY
MBaAFJy+nEPudZiWADkZUIc0cjNGv3AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgt
MWQxOTg5ZjA2NjE4LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgtMWQxOTg5ZjA2NjE4
LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuaNWL7wl
lgeg+8fxViVqHiWkqIdGQRX+D1u6gxuIxweuGfD/bIRNRXgFYpDJRUmCnulDVz9b
alGQfD2BwhZ9EcV71JFPZnO3YIPKiZvqUhDKkf7K/OhfrvmXzMigro8NxqKpOs0u
nHtQIYoimSS930IRn+dhaxpysdNXzYzHorehIiI+wKhDRbSBQFTypB4zocN57Jk0
OMKu9ToqvtbYJHEKbM09KNtBDfVDAF0Q7aJ0dirTylNN7j3t8Mzrf2b5LNckTgKu
ZFSRylTpo/7aaiOb7TmFo87FIvhB9HSYpvsNNUfNq/dMEnuZVA3OanBhICX0Xev5
VX0n48L9BEJBxw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:53:53 2025 by rpki-client