Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: y3GK4P95YiSofbeuA34RE/HKAb+BYfwlWaN0x4jtuqw=
Subject key identifier: 61:A8:50:71:E7:DF:45:AD:18:73:F7:19:CC:FD:DD:19:7A:9A:F0:C8
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 0196507F8040A1DD6964C15AAF7E1444F694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 07F2
Signing time: Sun 20 Apr 2025 00:00:55 +0000
Manifest this update: Sun 20 Apr 2025 00:00:55 +0000
Manifest next update: Mon 21 Apr 2025 00:00:55 +0000
Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: W4qCsBXIwoYgEv+/hyJ/3vAbkBlYehI5yTuD6h4WDLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:80:40:a1:dd:69:64:c1:5a:af:7e:14:44:f6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Apr 20 00:00:55 2025 GMT
Not After : Apr 21 00:00:55 2025 GMT
Subject: CN=61a85071e7df45ad1873f719ccfddd197a9af0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:8d:db:e5:0a:69:cb:c4:3e:e0:e8:43:65:
4a:e8:fd:64:38:bd:95:2d:78:c0:e6:76:28:98:3e:
1a:98:28:01:65:f2:dc:c0:a7:1b:94:a3:5a:64:59:
d5:fd:0b:35:1e:3a:47:aa:c9:af:9e:60:53:44:20:
2d:ab:02:e8:b4:d6:dc:17:36:1f:f8:aa:99:de:20:
67:ea:99:dc:fb:22:e6:46:1a:3b:76:4b:4f:5d:72:
d7:84:44:ec:b7:fc:5e:24:d2:9e:ed:cf:27:f2:c8:
bf:90:df:a1:da:c3:c6:ee:37:2a:f0:68:d3:63:6f:
fb:e2:06:70:49:fb:5b:e3:2c:00:f3:ba:51:c0:e0:
3e:48:b7:e0:34:6b:bf:ee:b6:1b:35:61:8e:cb:eb:
17:0e:e2:b9:e2:73:06:b3:08:69:ed:61:c6:b0:44:
2c:02:84:0e:d5:d2:0b:6d:fb:99:51:9e:6d:52:cb:
48:61:3c:15:d6:77:17:c2:94:10:60:7f:16:ed:f9:
6c:ec:2d:dc:5c:3f:03:d5:ca:08:42:03:73:e6:6b:
3a:cf:24:4d:92:28:e7:e0:0b:f6:0d:47:8c:61:2f:
6b:c7:32:b2:1c:d6:32:e1:4e:40:33:75:f7:17:22:
fa:49:0f:f9:39:bd:43:96:81:28:01:84:21:0b:f1:
3b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A8:50:71:E7:DF:45:AD:18:73:F7:19:CC:FD:DD:19:7A:9A:F0:C8
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:86:6b:76:f1:8f:e8:d4:df:35:92:7e:c9:7b:d1:6b:1f:81:
e9:1e:f1:89:8d:4b:da:cb:5f:8c:55:5c:e5:a4:4f:e2:7b:64:
0d:bb:a1:44:b2:c7:11:13:11:30:00:b4:b9:26:5a:3d:e6:12:
dc:26:39:03:3d:d5:34:6d:ad:88:90:d8:9b:c3:5e:0a:6a:a0:
ce:1a:2e:f7:52:a2:24:e4:6e:d1:ea:66:17:a5:2d:9f:63:c8:
4c:39:cd:2a:49:fe:c7:78:8d:1f:c5:59:cc:b5:fe:e2:6a:42:
66:95:6c:14:85:45:7f:cf:1f:34:07:a9:56:42:f3:f7:66:ab:
4d:48:6f:9c:c4:8c:15:11:2d:8f:97:e3:fd:23:21:c2:26:b1:
92:19:c9:d4:41:9c:ac:1b:14:75:dc:22:4f:0b:24:45:4b:ae:
39:67:2f:7c:69:60:16:f9:db:e2:68:23:a7:39:3f:1a:53:60:
0b:64:dd:6e:19:86:de:57:e0:9d:bb:f7:97:92:52:9b:77:28:
fc:36:e7:84:c6:0a:36:32:e8:d2:e0:d1:fc:cc:35:86:a3:f8:
ad:8f:02:fb:db:f5:85:31:d4:e2:01:97:b3:d1:10:9b:90:f4:
45:f8:56:f0:33:be:50:40:c4:14:bc:0f:2d:5d:87:ed:a1:4a:
92:ff:00:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQf4BAod1pZMFar34URPaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5
ZjhhNzEwHhcNMjUwNDIwMDAwMDU1WhcNMjUwNDIxMDAwMDU1WjAzMTEwLwYDVQQD
Eyg2MWE4NTA3MWU3ZGY0NWFkMTg3M2Y3MTljY2ZkZGQxOTdhOWFmMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8iN2+UKacvEPuDoQ2VK6P1kOL2V
LXjA5nYomD4amCgBZfLcwKcblKNaZFnV/Qs1HjpHqsmvnmBTRCAtqwLotNbcFzYf
+KqZ3iBn6pnc+yLmRho7dktPXXLXhETst/xeJNKe7c8n8si/kN+h2sPG7jcq8GjT
Y2/74gZwSftb4ywA87pRwOA+SLfgNGu/7rYbNWGOy+sXDuK54nMGswhp7WHGsEQs
AoQO1dILbfuZUZ5tUstIYTwV1ncXwpQQYH8W7fls7C3cXD8D1coIQgNz5ms6zyRN
kijn4Av2DUeMYS9rxzKyHNYy4U5AM3X3FyL6SQ/5Ob1DloEoAYQhC/E7nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGoUHHn30WtGHP3Gcz93Rl6mvDIMB8GA1UdIwQY
MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt
MTRlYzQxZDRjMGE2LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2
LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIZrdvGP
6NTfNZJ+yXvRax+B6R7xiY1L2stfjFVc5aRP4ntkDbuhRLLHERMRMAC0uSZaPeYS
3CY5Az3VNG2tiJDYm8NeCmqgzhou91KiJORu0epmF6Utn2PITDnNKkn+x3iNH8VZ
zLX+4mpCZpVsFIVFf88fNAepVkLz92arTUhvnMSMFREtj5fj/SMhwiaxkhnJ1EGc
rBsUddwiTwskRUuuOWcvfGlgFvnb4mgjpzk/GlNgC2TdbhmG3lfgnbv3l5JSm3co
/DbnhMYKNjLo0uDR/Mw1hqP4rY8C+9v1hTHU4gGXs9EQm5D0RfhW8DO+UEDEFLwP
LV2H7aFKkv8Abw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:00 2025 by rpki-client