Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
File: nY85NIPUicQp_Biwk0LXbQr-QkQ.mft (raw, json)
Hash identifier: Dp9W3aSOEa2BQ11ioAydFsRS310wVylB4rNgQDmP/KM=
Subject key identifier: E9:64:22:6D:EF:AC:C6:2C:66:25:4F:71:16:AB:A5:3C:54:9D:DB:82
Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
Certificate issuer: /CN=9d8f393483d489c429fc18b09342d76d0afe4244
Certificate serial: 0196549317867607367D7B90F6519EDF0001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
Manifest number: 10E7
Signing time: Sun 20 Apr 2025 19:00:47 +0000
Manifest this update: Sun 20 Apr 2025 19:00:47 +0000
Manifest next update: Mon 21 Apr 2025 19:00:47 +0000
Files and hashes: 1: fCKBgjNaPgCYlEAaSC02t2TX-HQ.roa (hash: z50OwHqPJLgmTj1OD+z+QDtPxp5JJkD8lN3khIG3bwQ=)
2: nY85NIPUicQp_Biwk0LXbQr-QkQ.crl (hash: /JT8Axot6VpqEC3dXyv4jflivDwlcXppSnFCUVZHD2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:17:86:76:07:36:7d:7b:90:f6:51:9e:df:00:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244
Validity
Not Before: Apr 20 19:00:47 2025 GMT
Not After : Apr 21 19:00:47 2025 GMT
Subject: CN=e964226defacc62c66254f7116aba53c549ddb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:1e:1f:84:42:1c:88:63:a4:83:2a:18:6f:
a2:5b:79:15:1d:91:ba:3b:b3:50:27:4b:d1:94:04:
20:12:b2:a1:76:bf:1a:45:93:fc:e4:e1:30:42:53:
98:af:f4:84:13:6b:02:6d:45:bc:1d:8e:be:d0:1e:
0a:11:7d:a9:5f:02:05:5e:fc:c1:eb:18:62:f7:98:
ee:f2:7c:90:64:01:77:a8:b6:da:39:ff:e9:bd:8f:
8e:dd:52:d2:3c:56:cb:6d:e6:ff:d7:f3:cd:1f:ba:
ce:b7:15:f0:50:48:a8:d6:2a:81:17:7f:07:ed:48:
da:ab:8e:69:4b:60:2f:2d:a0:d1:27:7d:34:f5:e7:
26:3c:65:4a:04:1d:9e:26:8e:6f:be:59:6b:fa:6e:
26:5e:72:dc:73:0c:97:79:22:5f:36:c5:01:12:4a:
c6:0e:1c:d9:2c:ab:c3:85:e6:2c:89:64:ad:16:ff:
85:32:5a:3a:e7:ca:26:2a:bc:f8:4e:81:b4:48:52:
3c:4b:f5:36:a7:71:07:f0:d3:dd:39:de:6b:a5:0c:
36:bc:f9:c1:fa:2d:5e:19:33:c0:66:5b:9f:66:3e:
69:b3:9b:60:15:ed:1f:02:dd:e2:da:ab:f4:e7:f4:
35:99:be:f4:1a:c4:fb:39:ab:5f:d3:33:e1:dc:15:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:22:6D:EF:AC:C6:2C:66:25:4F:71:16:AB:A5:3C:54:9D:DB:82
X509v3 Authority Key Identifier:
keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0b:25:0b:97:01:8d:cd:16:7c:88:90:bf:c1:0f:20:2a:79:
57:c4:29:87:9a:cf:b2:b0:30:e1:bb:fe:51:a8:d2:01:dc:05:
b7:95:52:8c:bd:b4:76:33:27:86:1b:57:fa:0f:d6:b0:9d:80:
7a:4e:77:97:73:51:19:ea:7e:fa:16:ce:68:96:de:7a:d7:2e:
aa:72:6b:7d:d2:af:2a:78:b0:f9:11:a1:c2:80:f0:04:56:20:
63:3a:bf:f9:3b:19:cc:db:cb:1a:60:f1:19:c4:4e:bb:6c:1d:
1a:ca:36:4c:be:b2:cb:2d:52:47:f7:7b:7f:fa:58:78:de:d9:
21:ee:ff:da:eb:41:c2:e3:5a:24:6b:15:51:4f:d4:20:33:bf:
65:cd:4a:51:85:14:a4:a9:81:31:46:26:93:fb:df:3f:3c:0c:
bf:db:02:14:3f:f9:b5:2b:ce:d8:a9:47:2e:1e:0a:80:65:6e:
9d:74:1c:7e:f9:79:3c:48:58:e8:2e:ae:a9:75:e2:f0:24:d3:
9e:58:d3:76:d2:e0:ce:d2:f7:3f:34:b4:8b:2b:79:ef:96:69:
06:15:24:d0:70:00:71:6e:38:9b:53:f2:7f:5e:6d:f1:5a:61:
28:b4:80:37:84:66:47:b9:0b:15:df:35:11:4e:e7:95:8b:27:
19:18:0e:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkxeGdgc2fXuQ9lGe3wABMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOGYzOTM0ODNkNDg5YzQyOWZjMThiMDkzNDJkNzZkMGFm
ZTQyNDQwHhcNMjUwNDIwMTkwMDQ3WhcNMjUwNDIxMTkwMDQ3WjAzMTEwLwYDVQQD
EyhlOTY0MjI2ZGVmYWNjNjJjNjYyNTRmNzExNmFiYTUzYzU0OWRkYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PQeH4RCHIhjpIMqGG+iW3kVHZG6
O7NQJ0vRlAQgErKhdr8aRZP85OEwQlOYr/SEE2sCbUW8HY6+0B4KEX2pXwIFXvzB
6xhi95ju8nyQZAF3qLbaOf/pvY+O3VLSPFbLbeb/1/PNH7rOtxXwUEio1iqBF38H
7Ujaq45pS2AvLaDRJ3009ecmPGVKBB2eJo5vvllr+m4mXnLccwyXeSJfNsUBEkrG
DhzZLKvDheYsiWStFv+FMlo658omKrz4ToG0SFI8S/U2p3EH8NPdOd5rpQw2vPnB
+i1eGTPAZlufZj5ps5tgFe0fAt3i2qv05/Q1mb70GsT7Oatf0zPh3BXWxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlkIm3vrMYsZiVPcRarpTxUnduCMB8GA1UdIwQY
MBaAFJ2POTSD1InEKfwYsJNC120K/kJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblk4NU5JUFVpY1FwX0Jpd2swTFhiUXItUWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85ZTgxNjYtMTYwZi00Y2UyLTkwMTct
MWUxNTFhYTFhZmRjLzEvblk4NU5JUFVpY1FwX0Jpd2swTFhiUXItUWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85ZTgxNjYtMTYwZi00Y2UyLTkwMTctMWUxNTFhYTFhZmRj
LzEvblk4NU5JUFVpY1FwX0Jpd2swTFhiUXItUWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswslC5cB
jc0WfIiQv8EPICp5V8Qph5rPsrAw4bv+UajSAdwFt5VSjL20djMnhhtX+g/WsJ2A
ek53l3NRGep++hbOaJbeetcuqnJrfdKvKniw+RGhwoDwBFYgYzq/+TsZzNvLGmDx
GcROu2wdGso2TL6yyy1SR/d7f/pYeN7ZIe7/2utBwuNaJGsVUU/UIDO/Zc1KUYUU
pKmBMUYmk/vfPzwMv9sCFD/5tSvO2KlHLh4KgGVunXQcfvl5PEhY6C6uqXXi8CTT
nljTdtLgztL3PzS0iyt575ZpBhUk0HAAcW44m1Pyf15t8VphKLSAN4RmR7kLFd81
EU7nlYsnGRgObw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:20 2025 by rpki-client