Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: teVpUSGdvMEw59wGviJV1JC6ex32fgvd9CjEgFaBvAM=
Subject key identifier: A9:4A:94:E2:94:98:70:3C:68:5A:25:88:DD:4B:16:D3:B6:5A:EE:6F
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 019657947BAAE006F88F9CC1FF83F6A0E690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 1483
Signing time: Mon 21 Apr 2025 09:01:10 +0000
Manifest this update: Mon 21 Apr 2025 09:01:10 +0000
Manifest next update: Tue 22 Apr 2025 09:01:10 +0000
Files and hashes: 1: 0h3Xfcral2IubnxmY9_tstWMwfs.roa (hash: 1nhiOKUXN9GzK8aVndHDOX8caRYt3h/1uQ8akkf2jNw=)
2: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: P6J/DnOdRkuP8M+Zp5bni5nj4I+Zj2u2AJM9eSPu384=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:7b:aa:e0:06:f8:8f:9c:c1:ff:83:f6:a0:e6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Apr 21 09:01:10 2025 GMT
Not After : Apr 22 09:01:10 2025 GMT
Subject: CN=a94a94e29498703c685a2588dd4b16d3b65aee6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:95:44:d7:ac:73:e7:e6:c2:3e:43:6e:33:c4:
5c:0c:91:da:d2:2f:44:c3:9d:11:d1:f2:0f:9b:cb:
5b:7f:8a:e4:29:c4:56:32:da:ac:a3:8f:4d:c0:a6:
5e:bd:2a:f1:16:8c:13:0b:6c:e8:90:07:1a:7b:b7:
a0:da:af:c3:fe:ea:80:75:9b:6c:2c:3b:31:c3:a7:
b2:1b:77:95:4f:e2:16:6c:ed:76:44:57:39:f5:49:
f4:d1:22:92:9d:53:a4:9d:b2:76:e6:d7:49:e5:ae:
aa:65:72:88:22:62:9c:c0:0f:42:ca:8a:22:8c:8a:
fc:28:db:e3:df:22:2b:f6:5b:10:5f:8a:28:1b:1b:
6b:76:fe:5e:07:0a:4c:58:d2:57:8b:5b:61:43:d3:
c5:19:52:1e:2a:3d:b3:4d:27:39:03:09:a4:a9:e3:
3e:04:c7:12:85:51:78:af:46:9d:34:8c:56:1a:bf:
50:c7:db:02:09:14:ee:dd:8b:bb:8b:6f:92:fb:53:
78:23:6a:28:b2:4e:af:44:88:b8:b7:3f:60:ec:ad:
a9:d7:b6:c8:fc:d9:da:fd:78:47:3a:62:74:78:37:
3c:d2:e8:1c:09:a7:d3:51:a1:95:3d:b1:a1:42:7b:
4f:55:67:6d:0f:94:4c:07:ca:75:09:9c:37:00:4a:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4A:94:E2:94:98:70:3C:68:5A:25:88:DD:4B:16:D3:B6:5A:EE:6F
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:88:3b:b2:e1:3c:bd:6e:3b:0e:e4:ca:db:23:99:be:1c:17:
65:62:ca:08:0c:56:84:e4:a3:b6:de:1a:c9:92:c9:e6:11:b6:
e8:f0:86:dd:ba:9f:48:97:95:74:c3:ea:f4:78:92:91:c9:1f:
e4:8a:d5:51:56:01:fd:8d:24:2f:e9:0d:43:f0:2e:a2:93:ed:
6f:f0:a1:1e:ce:3d:d1:8c:6f:4b:44:ab:6e:48:4d:d8:0a:12:
07:09:de:a1:70:06:7d:f5:e6:b7:1e:a1:99:ef:1a:75:83:c5:
fc:8a:f0:a8:a8:36:eb:61:93:4b:1a:db:c5:2b:08:b7:77:38:
3a:59:85:37:e3:d3:84:94:97:1a:39:9c:52:06:53:f2:0b:3b:
38:e6:63:a9:03:d2:80:05:3c:16:65:ba:df:ee:4e:f5:98:40:
76:14:a7:76:8f:78:6f:10:e0:da:4e:b8:0c:a5:14:2f:6e:8a:
cb:aa:9c:64:fe:97:ef:fb:d3:56:8e:a5:38:d3:e8:0c:5e:a3:
60:8f:51:1a:a0:1a:85:73:f4:66:62:3e:76:6a:b3:82:78:02:
98:a6:43:ad:ba:35:66:1c:ba:74:47:d8:e9:64:e5:61:fa:2a:
3d:c1:f1:1b:7d:f0:24:e5:de:74:54:3e:01:da:8e:a2:7a:be:
5b:35:99:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXlHuq4Ab4j5zB/4P2oOaQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZjFmZDY5ZTcxOTZhZWY1ZTI5YmE3OTU2ODBkYWMzZTM0
ODY4YzgwHhcNMjUwNDIxMDkwMTEwWhcNMjUwNDIyMDkwMTEwWjAzMTEwLwYDVQQD
EyhhOTRhOTRlMjk0OTg3MDNjNjg1YTI1ODhkZDRiMTZkM2I2NWFlZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pVE16xz5+bCPkNuM8RcDJHa0i9E
w50R0fIPm8tbf4rkKcRWMtqso49NwKZevSrxFowTC2zokAcae7eg2q/D/uqAdZts
LDsxw6eyG3eVT+IWbO12RFc59Un00SKSnVOknbJ25tdJ5a6qZXKIImKcwA9Cyooi
jIr8KNvj3yIr9lsQX4ooGxtrdv5eBwpMWNJXi1thQ9PFGVIeKj2zTSc5AwmkqeM+
BMcShVF4r0adNIxWGr9Qx9sCCRTu3Yu7i2+S+1N4I2oosk6vRIi4tz9g7K2p17bI
/Nna/XhHOmJ0eDc80ugcCafTUaGVPbGhQntPVWdtD5RMB8p1CZw3AEo4KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlKlOKUmHA8aFoliN1LFtO2Wu5vMB8GA1UdIwQY
MBaAFDXx/WnnGWrvXim6eVaA2sPjSGjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82NmYzNzktZjU5OC00ZTYwLWI0OTMt
ZjljYTcxMjRmMDk4LzEvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82NmYzNzktZjU5OC00ZTYwLWI0OTMtZjljYTcxMjRmMDk4
LzEvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYg7suE8
vW47DuTK2yOZvhwXZWLKCAxWhOSjtt4ayZLJ5hG26PCG3bqfSJeVdMPq9HiSkckf
5IrVUVYB/Y0kL+kNQ/AuopPtb/ChHs490YxvS0SrbkhN2AoSBwneoXAGffXmtx6h
me8adYPF/IrwqKg262GTSxrbxSsIt3c4OlmFN+PThJSXGjmcUgZT8gs7OOZjqQPS
gAU8FmW63+5O9ZhAdhSndo94bxDg2k64DKUUL26Ky6qcZP6X7/vTVo6lONPoDF6j
YI9RGqAahXP0ZmI+dmqzgngCmKZDrbo1Zhy6dEfY6WTlYfoqPcHxG33wJOXedFQ+
AdqOonq+WzWZxw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:35 2025 by rpki-client