Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: iKMrYNbTsYRM5jwPFIaw+d7SZ0VFbrQOT8wdB9D4HS4=
Subject key identifier: 73:12:FE:02:D9:E5:A8:C9:64:5A:87:AD:51:49:50:2C:71:49:A4:C5
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 01965C837F0240EDC7C4CBFEC67509E3E3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 07
Signing time: Tue 22 Apr 2025 08:00:43 +0000
Manifest this update: Tue 22 Apr 2025 08:00:43 +0000
Manifest next update: Wed 23 Apr 2025 08:00:43 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: B5DdwT1wvEuZ59B4xd5g7loV7WjFKNkMi0CFFgfT7sk=)
2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:7f:02:40:ed:c7:c4:cb:fe:c6:75:09:e3:e3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Apr 22 08:00:43 2025 GMT
Not After : Apr 23 08:00:43 2025 GMT
Subject: CN=7312fe02d9e5a8c9645a87ad5149502c7149a4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:df:54:98:c1:16:7f:cb:af:cf:7a:ac:a9:2f:
9d:e9:78:0a:e5:d0:27:bf:a0:10:a5:b0:99:5e:e3:
20:81:c0:66:43:1a:7c:b9:8c:f6:c2:1a:d4:f9:db:
e8:d7:85:ae:fc:a5:f8:ca:50:a7:32:f1:ba:fe:fb:
44:8b:74:08:be:a6:b5:20:51:17:03:60:f0:a3:4f:
6d:6f:6e:dd:d9:d3:5f:bc:bc:6e:63:68:01:99:e0:
cf:46:2d:0d:be:69:34:4b:13:d2:72:59:a0:e5:de:
92:16:da:89:93:77:3b:f9:fc:e0:e9:6d:db:58:50:
5e:b5:90:4a:2a:1e:5d:15:77:35:b1:06:fa:15:a2:
66:7d:f0:08:33:57:89:ea:bc:62:4b:3c:11:8a:eb:
b8:47:2c:c7:0f:9b:ea:d3:33:32:93:4c:80:d9:c3:
45:6f:36:70:ff:ad:3d:5a:48:71:2d:89:6c:74:62:
f3:84:ec:5c:24:aa:d5:1c:97:f2:79:e6:13:49:3d:
3a:87:83:b8:77:99:c5:86:38:f1:e4:8e:20:87:d1:
92:4b:65:0f:80:47:e4:f6:ea:6c:2f:ba:db:7d:0e:
b1:0f:5b:d9:06:b8:29:4c:7f:e0:98:40:c8:f0:18:
ee:f1:b5:0a:5e:60:38:2b:ea:06:20:b9:52:42:c3:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:12:FE:02:D9:E5:A8:C9:64:5A:87:AD:51:49:50:2C:71:49:A4:C5
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d0:d2:40:42:8c:2a:25:46:cd:9d:63:22:7f:78:42:09:bd:
92:07:a2:5a:0d:ed:bd:5b:e2:aa:3c:6a:36:bf:77:26:8e:5a:
74:19:56:b9:de:6b:7e:39:3e:2b:94:67:76:65:9e:b0:b8:e8:
b7:a7:54:59:29:35:88:8f:da:8a:13:49:e9:75:e1:95:c1:4e:
04:49:d7:76:e8:6e:88:90:57:69:d1:51:cd:9b:92:dc:4b:da:
30:f0:5d:d3:69:f7:75:45:53:9c:dc:7b:cc:ea:3a:48:cf:7d:
20:40:9d:12:72:d1:df:3e:a6:13:df:77:13:15:86:6d:08:84:
d6:c6:3f:a5:f4:aa:ff:47:12:72:36:89:62:44:fa:e3:55:c5:
94:5e:8a:37:86:fb:b4:86:52:ef:7b:72:fb:67:be:ca:cc:5d:
3a:b3:49:9e:73:fd:34:22:a0:37:ef:89:81:15:0f:eb:c4:10:
36:5e:a7:29:4d:11:cf:98:f1:01:a0:de:4e:9f:71:ff:e6:d2:
61:5a:0e:8c:af:7f:12:8e:5f:e1:83:a6:b6:10:eb:9f:01:a1:
f4:da:58:03:c5:ad:ea:52:8d:f3:aa:e9:81:d3:cc:4a:cd:c9:
81:20:8e:f5:5f:4e:45:66:57:e0:38:5b:2d:d9:ea:b9:ed:67:
c0:ff:f9:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcg38CQO3HxMv+xnUJ4+PvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTE5M2M5NDJhMDcwZWI2ZTdiNzZkMzNjMTE3MGMxYWJh
YWFiYzAwHhcNMjUwNDIyMDgwMDQzWhcNMjUwNDIzMDgwMDQzWjAzMTEwLwYDVQQD
Eyg3MzEyZmUwMmQ5ZTVhOGM5NjQ1YTg3YWQ1MTQ5NTAyYzcxNDlhNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht9UmMEWf8uvz3qsqS+d6XgK5dAn
v6AQpbCZXuMggcBmQxp8uYz2whrU+dvo14Wu/KX4ylCnMvG6/vtEi3QIvqa1IFEX
A2Dwo09tb27d2dNfvLxuY2gBmeDPRi0Nvmk0SxPSclmg5d6SFtqJk3c7+fzg6W3b
WFBetZBKKh5dFXc1sQb6FaJmffAIM1eJ6rxiSzwRiuu4RyzHD5vq0zMyk0yA2cNF
bzZw/609WkhxLYlsdGLzhOxcJKrVHJfyeeYTST06h4O4d5nFhjjx5I4gh9GSS2UP
gEfk9upsL7rbfQ6xD1vZBrgpTH/gmEDI8Bju8bUKXmA4K+oGILlSQsOeeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMS/gLZ5ajJZFqHrVFJUCxxSaTFMB8GA1UdIwQY
MBaAFJyRk8lCoHDrbnt20zwRcMGrqqvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUt
Y2UwZTk3YmFiNmE3LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUtY2UwZTk3YmFiNmE3
LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONDSQEKM
KiVGzZ1jIn94Qgm9kgeiWg3tvVviqjxqNr93Jo5adBlWud5rfjk+K5RndmWesLjo
t6dUWSk1iI/aihNJ6XXhlcFOBEnXduhuiJBXadFRzZuS3EvaMPBd02n3dUVTnNx7
zOo6SM99IECdEnLR3z6mE993ExWGbQiE1sY/pfSq/0cScjaJYkT641XFlF6KN4b7
tIZS73ty+2e+ysxdOrNJnnP9NCKgN++JgRUP68QQNl6nKU0Rz5jxAaDeTp9x/+bS
YVoOjK9/Eo5f4YOmthDrnwGh9NpYA8Wt6lKN86rpgdPMSs3JgSCO9V9ORWZX4Dhb
Ldnque1nwP/5kQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:01:48 2025 by rpki-client