Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: ltGowQ5arj9Ozg1jFfvseLMWbL47NRVBWTfsNyORS4g=
Subject key identifier: 4C:4D:E3:A4:A4:6B:DA:68:12:D0:8D:75:71:1F:27:12:D0:5E:55:C9
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 01961734DD6531507C13BAF8BCDEBA2DA11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 07F7
Signing time: Tue 08 Apr 2025 21:01:02 +0000
Manifest this update: Tue 08 Apr 2025 21:01:02 +0000
Manifest next update: Wed 09 Apr 2025 21:01:02 +0000
Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=)
2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=)
3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: L3c1xbOLI9zXwmSxX7Q9e9pD6EmHcTvxS2+5o14SdJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:17:34:dd:65:31:50:7c:13:ba:f8:bc:de:ba:2d:a1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Apr 8 21:01:02 2025 GMT
Not After : Apr 9 21:01:02 2025 GMT
Subject: CN=4c4de3a4a46bda6812d08d75711f2712d05e55c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:5b:65:9c:ad:a1:52:c7:90:26:6b:0b:bd:
5b:e0:69:b6:40:6c:50:dc:26:69:45:ce:79:86:11:
73:a4:d2:09:98:80:9c:91:2e:75:ba:49:69:ba:40:
6f:8d:2e:cf:b6:75:11:5b:c6:13:93:07:99:77:8d:
14:ff:07:6f:48:09:23:5c:0e:08:d7:d6:72:81:98:
e5:fd:46:68:04:05:c8:b4:6a:42:b6:46:1a:69:16:
20:55:a1:e0:21:0d:22:b9:79:81:ef:93:58:aa:75:
33:80:e9:7d:15:ce:ea:1c:a5:0f:71:01:84:df:26:
b8:63:49:9c:e2:f1:69:96:7f:b7:f9:11:e6:4a:a0:
6e:ab:3c:6f:19:bb:f0:e2:1f:73:6c:3f:bd:0d:0a:
35:24:31:02:69:6e:30:66:10:ae:cb:74:71:4b:0a:
42:a0:82:77:77:9d:fb:c8:8b:86:e5:b7:34:80:fa:
83:aa:4d:97:25:90:9c:89:45:f7:23:15:b1:48:6e:
57:5a:2d:c8:be:a0:bd:d1:be:4d:20:cb:33:f7:a5:
0d:09:65:09:6c:18:2a:a1:83:11:60:d2:56:b5:2f:
a8:71:79:55:bb:d7:87:61:0d:70:e2:a7:53:cd:b5:
97:49:ff:10:f4:12:17:7f:08:2d:d3:94:1d:5a:92:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4D:E3:A4:A4:6B:DA:68:12:D0:8D:75:71:1F:27:12:D0:5E:55:C9
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:54:bc:52:f1:77:2b:15:0d:d2:d5:c8:d2:5b:c0:df:b1:ca:
b3:2f:bc:2f:3e:4f:1b:8f:fb:f3:b0:e4:9b:47:54:a8:d2:64:
b2:71:fe:20:48:c1:c2:8a:d6:fe:7d:a7:43:6e:90:b9:32:c3:
b4:8c:6f:0b:92:b7:60:2c:4f:38:f2:c0:81:11:80:e6:b2:5a:
ce:f5:8a:dc:12:2e:a5:a2:58:21:27:96:af:d1:7d:d5:6f:4d:
6b:ef:c3:9d:fb:4a:c2:ed:7c:99:92:50:06:b5:52:fb:40:66:
20:33:e5:22:1a:97:b6:70:29:a8:1d:df:a3:6e:d2:39:0a:07:
a8:6a:d2:0b:0f:2e:74:ca:9a:0c:25:b6:d6:a9:56:63:e7:09:
c4:45:a1:80:c0:a1:be:11:b0:0a:a3:7a:85:46:01:3d:fd:c7:
86:d7:d1:21:2b:53:bf:e9:a7:54:b6:fa:e7:d2:0a:84:3c:5f:
d6:d2:3c:ff:b7:47:37:18:50:4b:b3:cf:f9:38:c2:9a:fa:6a:
02:9e:3b:cc:a6:63:25:47:c2:9c:e7:05:ed:db:58:28:26:1a:
be:5b:27:ee:2c:8a:1e:3c:4b:a5:85:b2:52:63:85:5e:1a:78:
f3:94:13:87:c2:77:73:3c:4f:9c:2a:b2:88:8a:4a:30:ac:7a:
63:e9:19:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYXNN1lMVB8E7r4vN66LaEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjllODU1NDAyMGJkZWZhMTdjNTU2MTQzOGZiNGJhZjU4
MzFmNTIwHhcNMjUwNDA4MjEwMTAyWhcNMjUwNDA5MjEwMTAyWjAzMTEwLwYDVQQD
Eyg0YzRkZTNhNGE0NmJkYTY4MTJkMDhkNzU3MTFmMjcxMmQwNWU1NWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxRbZZytoVLHkCZrC71b4Gm2QGxQ
3CZpRc55hhFzpNIJmICckS51uklpukBvjS7PtnURW8YTkweZd40U/wdvSAkjXA4I
19ZygZjl/UZoBAXItGpCtkYaaRYgVaHgIQ0iuXmB75NYqnUzgOl9Fc7qHKUPcQGE
3ya4Y0mc4vFpln+3+RHmSqBuqzxvGbvw4h9zbD+9DQo1JDECaW4wZhCuy3RxSwpC
oIJ3d537yIuG5bc0gPqDqk2XJZCciUX3IxWxSG5XWi3IvqC90b5NIMsz96UNCWUJ
bBgqoYMRYNJWtS+ocXlVu9eHYQ1w4qdTzbWXSf8Q9BIXfwgt05QdWpIlmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExN46Ska9poEtCNdXEfJxLQXlXJMB8GA1UdIwQY
MBaAFJ8p6FVAIL3voXxVYUOPtLr1gx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYt
M2ZlOGY4OTZlNTUxLzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYtM2ZlOGY4OTZlNTUx
LzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVS8UvF3
KxUN0tXI0lvA37HKsy+8Lz5PG4/787Dkm0dUqNJksnH+IEjBworW/n2nQ26QuTLD
tIxvC5K3YCxPOPLAgRGA5rJazvWK3BIupaJYISeWr9F91W9Na+/DnftKwu18mZJQ
BrVS+0BmIDPlIhqXtnApqB3fo27SOQoHqGrSCw8udMqaDCW21qlWY+cJxEWhgMCh
vhGwCqN6hUYBPf3HhtfRIStTv+mnVLb659IKhDxf1tI8/7dHNxhQS7PP+TjCmvpq
Ap47zKZjJUfCnOcF7dtYKCYavlsn7iyKHjxLpYWyUmOFXhp485QTh8J3czxPnCqy
iIpKMKx6Y+kZPA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:29:50 2025 by rpki-client