Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json)
Hash identifier: L28nbJEzW7mU1tlzE5pd7Ro7RipMtCfV2drgT+8rFd4=
Subject key identifier: F9:AF:82:3D:05:1C:13:4D:68:96:8E:43:B8:C2:BA:DD:FF:57:15:A7
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial: 0196556ED831FDFCAB8C9B7C55B45CB7B087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
Manifest number: 088A
Signing time: Sun 20 Apr 2025 23:00:49 +0000
Manifest this update: Sun 20 Apr 2025 23:00:49 +0000
Manifest next update: Mon 21 Apr 2025 23:00:49 +0000
Files and hashes: 1: EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa (hash: YaLUi/WCyF+z1PE1hT5J9Z4ZVraA/YT5/9yCeg4jCDs=)
2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: 2hxU1HFoEPgypDm5ZOts7MUttLWLE9Y9PLPccDmcFU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:d8:31:fd:fc:ab:8c:9b:7c:55:b4:5c:b7:b0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Validity
Not Before: Apr 20 23:00:49 2025 GMT
Not After : Apr 21 23:00:49 2025 GMT
Subject: CN=f9af823d051c134d68968e43b8c2baddff5715a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:7d:6b:fb:b3:26:93:2e:22:36:d4:0a:03:
ab:6b:31:5b:7d:b5:d3:9c:f1:65:56:14:94:db:31:
bd:ce:b7:23:d1:e0:c6:e5:0a:47:0f:ea:22:89:d6:
86:a0:fc:3a:d8:a1:4c:bb:51:e9:fc:f7:88:e5:e9:
ee:23:52:f5:df:a9:77:62:f7:d6:c2:f4:a4:29:bc:
37:87:9b:49:28:e2:7a:3a:5c:19:ff:6a:ef:ff:02:
e6:e3:44:37:fd:3a:ed:a4:e1:3c:56:15:ef:29:14:
08:23:c3:02:6c:4d:65:d8:14:0b:77:50:3c:e9:75:
2b:d0:76:12:de:75:6b:0e:69:40:cd:23:4f:cb:92:
60:b5:09:b5:23:4e:10:41:0f:8a:86:5e:15:0e:86:
b8:44:88:f7:dc:66:63:ae:c8:98:0c:45:ca:32:9a:
4d:04:2f:3c:35:0b:63:3c:3c:67:c3:61:81:42:5a:
b5:49:c8:5c:c4:37:bf:c3:04:54:e1:e3:02:50:97:
85:e5:6f:35:34:08:2b:f3:11:33:09:6d:e2:c0:cd:
52:db:6c:25:ef:fa:9d:ed:73:3c:3e:e4:11:a7:1b:
a1:b2:a5:c9:bb:ad:8f:5d:c3:88:8a:ef:ff:39:7d:
97:c8:c3:f7:07:37:ee:e7:4c:b1:7b:a7:da:d0:19:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AF:82:3D:05:1C:13:4D:68:96:8E:43:B8:C2:BA:DD:FF:57:15:A7
X509v3 Authority Key Identifier:
keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:10:a7:4c:a4:60:29:44:c6:83:b6:8d:53:96:5d:62:69:d9:
5b:78:1b:96:fb:95:6a:55:43:4a:85:45:03:81:e2:38:92:e1:
1a:8b:e2:ca:d0:01:81:d2:51:7b:80:54:4f:27:3f:37:53:97:
4a:c2:ee:c0:4b:42:d1:0b:be:a9:92:49:d6:46:c8:c9:7e:cc:
73:71:48:d3:44:01:f6:42:f6:d4:42:27:5e:94:fb:07:41:f5:
85:8a:39:8a:6b:d1:89:ed:56:c1:03:e0:dc:f1:70:d7:03:5f:
87:3f:8f:d1:13:97:da:35:db:5c:0c:96:eb:90:62:7e:f7:4d:
59:8e:cb:4d:28:f9:23:ba:de:10:17:ae:41:b6:53:32:04:aa:
6a:9e:ac:08:cf:63:d9:5d:07:59:ed:95:18:b1:63:ef:3d:b2:
b3:48:8b:5a:96:68:41:c9:62:10:68:1e:9a:02:67:d7:2b:3e:
9d:92:33:ff:5f:45:63:66:2b:7c:0c:f0:b0:62:ba:d3:a3:60:
87:20:e4:ef:29:85:d4:03:75:50:f5:90:67:b9:1a:12:cc:7e:
4b:48:16:52:ef:e6:26:c2:70:0d:36:83:a7:46:51:58:9a:1e:
10:6e:80:c5:14:64:d3:4d:2d:98:29:2e:5c:2d:e0:cd:95:a7:
81:62:5f:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbtgx/fyrjJt8VbRct7CHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjM1ZTM4M2U5Y2Q0NGE3MjQ5YWM1ZDQxYjZkZmFkZjQz
NTdiNGYwHhcNMjUwNDIwMjMwMDQ5WhcNMjUwNDIxMjMwMDQ5WjAzMTEwLwYDVQQD
EyhmOWFmODIzZDA1MWMxMzRkNjg5NjhlNDNiOGMyYmFkZGZmNTcxNWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk19a/uzJpMuIjbUCgOrazFbfbXT
nPFlVhSU2zG9zrcj0eDG5QpHD+oiidaGoPw62KFMu1Hp/PeI5enuI1L136l3YvfW
wvSkKbw3h5tJKOJ6OlwZ/2rv/wLm40Q3/TrtpOE8VhXvKRQII8MCbE1l2BQLd1A8
6XUr0HYS3nVrDmlAzSNPy5JgtQm1I04QQQ+Khl4VDoa4RIj33GZjrsiYDEXKMppN
BC88NQtjPDxnw2GBQlq1SchcxDe/wwRU4eMCUJeF5W81NAgr8xEzCW3iwM1S22wl
7/qd7XM8PuQRpxuhsqXJu62PXcOIiu//OX2XyMP3Bzfu50yxe6fa0BkjnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmvgj0FHBNNaJaOQ7jCut3/VxWnMB8GA1UdIwQY
MBaAFK/zXjg+nNRKckmsXUG23630NXtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTIt
NTcwYWVkNThjMTk0LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTItNTcwYWVkNThjMTk0
LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhCnTKRg
KUTGg7aNU5ZdYmnZW3gblvuValVDSoVFA4HiOJLhGoviytABgdJRe4BUTyc/N1OX
SsLuwEtC0Qu+qZJJ1kbIyX7Mc3FI00QB9kL21EInXpT7B0H1hYo5imvRie1WwQPg
3PFw1wNfhz+P0ROX2jXbXAyW65BifvdNWY7LTSj5I7reEBeuQbZTMgSqap6sCM9j
2V0HWe2VGLFj7z2ys0iLWpZoQcliEGgemgJn1ys+nZIz/19FY2YrfAzwsGK606Ng
hyDk7ymF1AN1UPWQZ7kaEsx+S0gWUu/mJsJwDTaDp0ZRWJoeEG6AxRRk000tmCku
XC3gzZWngWJfsA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:56 2025 by rpki-client