Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json)
Hash identifier: WZXFFY7w0Shoo0pli/KzDmCFy55LLVmaJ61jLSWQuFY=
Subject key identifier: D0:04:58:E4:45:B8:0A:1C:A3:C9:B1:F5:BD:75:1F:2A:88:EA:2A:2F
Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
Certificate issuer: /CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Certificate serial: 019659EFEA5D7D2CE00021CC71C79E836DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
Manifest number: 0106
Signing time: Mon 21 Apr 2025 20:00:17 +0000
Manifest this update: Mon 21 Apr 2025 20:00:17 +0000
Manifest next update: Tue 22 Apr 2025 20:00:17 +0000
Files and hashes: 1: MaMIYt08Tc0Dvw5CdW33aL4DYlE.roa (hash: 1yCq3fhsKBl5S18vVeljQHZ1fPWzPn1J4kkG7WWFZZc=)
2: jzoaRST14iVv_bSGhulsr5_HKjg.roa (hash: eDucU+vORvsLhsrcVm/yMIU0JKeTCq2CqXsu5GoLiJA=)
3: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: 6Jachq0i1CKM9QK8t599YTRDUJIOkZzgpREC+sP6EWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:ea:5d:7d:2c:e0:00:21:cc:71:c7:9e:83:6d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Validity
Not Before: Apr 21 20:00:17 2025 GMT
Not After : Apr 22 20:00:17 2025 GMT
Subject: CN=d00458e445b80a1ca3c9b1f5bd751f2a88ea2a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:41:25:70:af:4e:70:cc:87:ad:b6:57:ed:
28:05:ff:1e:a6:ae:ca:c0:5a:ce:00:73:79:44:93:
55:bc:fa:44:6e:1c:31:d3:67:d8:24:00:89:64:92:
72:c9:2e:be:5a:46:a1:c6:46:a4:8c:a5:33:c3:e9:
ea:01:2b:54:9e:19:6c:b9:2a:4c:b4:83:01:fe:0a:
2d:c5:7d:73:57:cc:55:b6:e3:d8:4b:0b:38:f7:19:
68:dd:ce:98:ba:96:a4:b8:c9:03:bb:b1:54:7e:a0:
4b:e2:2b:ed:79:2f:6b:0f:e0:1a:ae:a7:2c:ce:eb:
56:06:13:92:52:bb:65:09:c6:67:30:f0:e3:97:11:
f2:35:9f:e6:dd:3a:56:ab:b7:56:a9:86:ff:03:c0:
ac:c0:38:06:5a:28:86:99:21:c1:15:eb:61:a5:1d:
9e:90:e3:d5:bd:aa:90:4c:7b:4b:56:8d:a4:1c:07:
3c:46:9d:08:cd:5a:55:6e:5c:fa:1a:ac:99:35:dd:
58:fb:28:12:97:0b:c4:a2:a7:82:9c:c3:e1:b7:56:
57:60:ef:00:d3:ae:a3:0c:31:2e:a9:6a:42:95:72:
5a:79:5b:45:4c:78:fe:b6:d5:9d:9a:6c:d8:53:4b:
ab:20:5a:7b:24:9f:54:c5:52:fd:54:b0:68:f1:8a:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:04:58:E4:45:B8:0A:1C:A3:C9:B1:F5:BD:75:1F:2A:88:EA:2A:2F
X509v3 Authority Key Identifier:
keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:60:0b:a1:83:0a:90:9b:b1:2b:5e:5c:83:77:f4:72:ca:b5:
37:a4:40:c2:6d:53:4a:5d:8d:4f:5c:2c:0d:0c:9c:21:e3:15:
51:66:a8:e2:09:0e:06:da:8d:bf:66:4e:85:8b:43:f9:45:d4:
68:07:4a:90:db:96:85:2e:8c:20:ce:df:6a:e9:41:37:93:a6:
41:16:cc:b9:5c:2d:0b:41:42:0f:64:31:a2:f3:7c:4d:59:de:
4f:84:1e:33:e8:16:ef:c3:1c:09:ff:c4:6d:b2:d2:20:25:16:
4a:9c:f8:e2:2a:08:e6:05:55:b6:6b:00:8b:ea:54:9a:47:46:
b1:47:b5:2d:0a:c5:61:9b:2c:b1:96:9f:fa:f1:12:af:53:ee:
3d:02:8b:f0:a4:f4:10:b5:f9:4b:90:c9:5b:ab:ae:ce:8a:80:
d2:9e:9f:70:cf:1e:0e:62:e1:2d:53:d9:a2:d6:8b:65:26:8a:
b9:df:77:9e:3d:76:79:be:3a:21:81:ca:3e:ab:36:c6:f6:02:
1d:86:86:6c:83:a0:d8:d5:4f:60:c1:be:b7:6e:3d:0e:2b:a2:
ef:b2:29:2a:d4:1a:eb:d6:a8:08:8b:2e:36:69:3c:4b:5b:66:
f8:d9:1c:00:62:d3:4c:b8:7a:06:03:84:ff:cc:32:95:fa:ad:
a8:d2:d5:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZ7+pdfSzgACHMcceeg23kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNWExNzI3MWQ5OWNmMTViNzNlY2M2NTg2NzMxNDNjMjhl
MjA3ZWQwHhcNMjUwNDIxMjAwMDE3WhcNMjUwNDIyMjAwMDE3WjAzMTEwLwYDVQQD
EyhkMDA0NThlNDQ1YjgwYTFjYTNjOWIxZjViZDc1MWYyYTg4ZWEyYTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw1BJXCvTnDMh622V+0oBf8epq7K
wFrOAHN5RJNVvPpEbhwx02fYJACJZJJyyS6+WkahxkakjKUzw+nqAStUnhlsuSpM
tIMB/gotxX1zV8xVtuPYSws49xlo3c6YupakuMkDu7FUfqBL4ivteS9rD+Aarqcs
zutWBhOSUrtlCcZnMPDjlxHyNZ/m3TpWq7dWqYb/A8CswDgGWiiGmSHBFethpR2e
kOPVvaqQTHtLVo2kHAc8Rp0IzVpVblz6GqyZNd1Y+ygSlwvEoqeCnMPht1ZXYO8A
066jDDEuqWpClXJaeVtFTHj+ttWdmmzYU0urIFp7JJ9UxVL9VLBo8YpcSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAEWORFuAoco8mx9b11HyqI6iovMB8GA1UdIwQY
MBaAFJ1aFycdmc8Vtz7MZYZzFDwo4gftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZvWEp4Mlp6eFczUHN4bGhuTVVQQ2ppQi0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85MDg5NTYtYzVlNi00YTNlLTlmMTct
YTE0Y2EwZWMxYzFhLzEvblZvWEp4Mlp6eFczUHN4bGhuTVVQQ2ppQi0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My85MDg5NTYtYzVlNi00YTNlLTlmMTctYTE0Y2EwZWMxYzFh
LzEvblZvWEp4Mlp6eFczUHN4bGhuTVVQQ2ppQi0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmALoYMK
kJuxK15cg3f0csq1N6RAwm1TSl2NT1wsDQycIeMVUWao4gkOBtqNv2ZOhYtD+UXU
aAdKkNuWhS6MIM7faulBN5OmQRbMuVwtC0FCD2QxovN8TVneT4QeM+gW78McCf/E
bbLSICUWSpz44ioI5gVVtmsAi+pUmkdGsUe1LQrFYZsssZaf+vESr1PuPQKL8KT0
ELX5S5DJW6uuzoqA0p6fcM8eDmLhLVPZotaLZSaKud93nj12eb46IYHKPqs2xvYC
HYaGbIOg2NVPYMG+t249Diui77IpKtQa69aoCIsuNmk8S1tm+NkcAGLTTLh6BgOE
/8wylfqtqNLVKQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:25 2025 by rpki-client