Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: fy/3/XFTb0XjuAf5LgTaenUgx4YfO0LChO6FcdW8/Ys=
Subject key identifier: 4F:4A:78:31:CD:6E:61:C5:6C:14:B6:DD:E6:A2:98:13:0D:E9:19:32
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 0196556E802776B726BAA41A7A8F0D0463CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 0EFD
Signing time: Sun 20 Apr 2025 23:00:27 +0000
Manifest this update: Sun 20 Apr 2025 23:00:27 +0000
Manifest next update: Mon 21 Apr 2025 23:00:27 +0000
Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=)
2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: OmOfuSyzXEnfGFplSCmtN8M2ObX6kmiVGKC/y7sAF8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:80:27:76:b7:26:ba:a4:1a:7a:8f:0d:04:63:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Apr 20 23:00:27 2025 GMT
Not After : Apr 21 23:00:27 2025 GMT
Subject: CN=4f4a7831cd6e61c56c14b6dde6a298130de91932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:d4:93:de:3a:03:b0:d4:14:e6:aa:e3:6f:
ac:61:fa:25:f8:9f:ec:d1:66:02:39:83:81:0c:27:
ea:c4:8a:ba:41:85:e4:09:a6:9a:9b:5b:7e:5d:7b:
99:32:e4:3e:eb:0d:02:04:87:42:45:3d:14:97:fa:
59:4f:23:6e:96:56:36:04:a6:17:fa:b0:cc:f2:18:
5e:bf:75:b0:a9:b4:23:b5:61:8a:e0:8d:5c:8c:9b:
e2:17:1b:aa:00:5c:a8:6e:d5:d4:d5:9e:ac:e1:7b:
b3:81:06:87:4e:d2:02:8a:c0:9e:01:c2:7b:e5:c0:
cc:fe:c5:2e:40:8f:ee:cd:47:ce:f9:c1:10:ca:07:
89:3d:31:ec:79:67:1a:d7:94:3a:80:52:b8:b9:3b:
64:6b:f6:c4:b1:cd:bc:1f:4e:88:33:d4:55:30:01:
f4:df:1a:5d:53:ef:77:72:4a:11:7c:ca:9e:64:b7:
79:db:b6:ff:f6:f2:6a:ec:c7:5a:9a:af:3a:bb:09:
08:8f:aa:ed:ce:67:c7:06:85:36:c4:c5:83:ff:3c:
48:f5:2d:24:e2:df:f1:fe:e6:8b:4b:dd:8a:ed:7c:
89:34:94:81:ed:48:f4:40:fe:11:f2:b9:81:b3:1b:
55:a1:9e:a5:3e:f1:dd:dc:48:89:5a:33:fe:32:e3:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4A:78:31:CD:6E:61:C5:6C:14:B6:DD:E6:A2:98:13:0D:E9:19:32
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e8:6e:b0:a6:04:b0:63:aa:56:36:c3:3c:22:2f:aa:38:74:
82:2e:33:47:ea:88:f1:69:27:d6:9d:62:82:01:7c:07:6f:8e:
8f:96:0f:30:11:79:3d:1b:b3:0a:ee:cb:c8:82:fc:4c:17:05:
53:6b:7d:21:fb:c2:ed:7c:57:9a:23:1f:c6:32:60:56:62:98:
e0:57:2f:80:24:59:73:7e:e7:f2:22:87:c3:fe:90:7d:2c:e6:
e6:1a:96:83:3d:6f:3d:f3:00:5a:f4:29:98:ee:1f:f5:72:c1:
66:3b:87:10:47:d1:5f:8c:14:03:24:b5:c5:0d:cc:fe:1c:d3:
77:5b:e4:5f:95:d6:26:c4:d1:d4:59:00:53:35:24:12:1c:c3:
65:cf:5c:aa:0f:cd:b0:ca:c5:42:93:da:cd:5a:22:e1:4c:a4:
0c:d5:74:85:82:67:44:21:fa:24:01:c6:91:f2:03:a2:64:c4:
05:92:bb:e4:c9:fc:57:c6:45:99:30:42:11:d7:b6:95:c1:73:
ea:5b:7f:ef:7d:88:4c:da:3f:61:37:b2:49:ff:c8:f1:83:b9:
7f:2c:dd:3e:35:9a:c4:8d:77:e7:1c:71:a2:3c:9b:31:0b:f7:
ff:96:bc:06:3a:48:87:09:20:0f:43:23:4b:c8:9b:e4:a2:0a:
22:2f:b6:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVboAndrcmuqQaeo8NBGPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYThhMTMyNTE5YTI0Mjk0OTQ5NzM2M2I4Y2FhMzNlNzJj
NjczZjgwHhcNMjUwNDIwMjMwMDI3WhcNMjUwNDIxMjMwMDI3WjAzMTEwLwYDVQQD
Eyg0ZjRhNzgzMWNkNmU2MWM1NmMxNGI2ZGRlNmEyOTgxMzBkZTkxOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpLUk946A7DUFOaq42+sYfol+J/s
0WYCOYOBDCfqxIq6QYXkCaaam1t+XXuZMuQ+6w0CBIdCRT0Ul/pZTyNullY2BKYX
+rDM8hhev3WwqbQjtWGK4I1cjJviFxuqAFyobtXU1Z6s4XuzgQaHTtICisCeAcJ7
5cDM/sUuQI/uzUfO+cEQygeJPTHseWca15Q6gFK4uTtka/bEsc28H06IM9RVMAH0
3xpdU+93ckoRfMqeZLd527b/9vJq7Mdamq86uwkIj6rtzmfHBoU2xMWD/zxI9S0k
4t/x/uaLS92K7XyJNJSB7Uj0QP4R8rmBsxtVoZ6lPvHd3EiJWjP+MuOdnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9KeDHNbmHFbBS23eaimBMN6RkyMB8GA1UdIwQY
MBaAFJyooTJRmiQpSUlzY7jKoz5yxnP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWIt
MDBjZDg2YWY4NDlkLzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWItMDBjZDg2YWY4NDlk
LzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANehusKYE
sGOqVjbDPCIvqjh0gi4zR+qI8Wkn1p1iggF8B2+Oj5YPMBF5PRuzCu7LyIL8TBcF
U2t9IfvC7XxXmiMfxjJgVmKY4FcvgCRZc37n8iKHw/6QfSzm5hqWgz1vPfMAWvQp
mO4f9XLBZjuHEEfRX4wUAyS1xQ3M/hzTd1vkX5XWJsTR1FkAUzUkEhzDZc9cqg/N
sMrFQpPazVoi4UykDNV0hYJnRCH6JAHGkfIDomTEBZK75Mn8V8ZFmTBCEde2lcFz
6lt/732ITNo/YTeySf/I8YO5fyzdPjWaxI135xxxojybMQv3/5a8BjpIhwkgD0Mj
S8ib5KIKIi+2Ug==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:10 2025 by rpki-client