Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: z9bEiWEH8bVckq7eoxwUfr4iQgkR57EvUTMXzJeNMf8=
Subject key identifier: 1C:CF:CD:C4:86:00:E0:DA:11:87:F1:AC:5B:EB:4C:21:BF:D9:51:36
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 019656EF22F7F848A4F1E8E33B5A6C062D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 02BD
Signing time: Mon 21 Apr 2025 06:00:34 +0000
Manifest this update: Mon 21 Apr 2025 06:00:34 +0000
Manifest next update: Tue 22 Apr 2025 06:00:34 +0000
Files and hashes: 1: Rjc45YVuDrAMQdY8qgjKUXqz9To.roa (hash: VkM0hIqEPGBmrXo8E00kzKR2aWKMeDBdfCqKvjZR58E=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: 1Io2IMzjNFctPRRW3tFywt9YS8py2wwOK0B+sVM5zVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:22:f7:f8:48:a4:f1:e8:e3:3b:5a:6c:06:2d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Apr 21 06:00:34 2025 GMT
Not After : Apr 22 06:00:34 2025 GMT
Subject: CN=1ccfcdc48600e0da1187f1ac5beb4c21bfd95136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:72:9d:fe:ab:6e:ed:6e:c9:5b:cb:d7:22:
d1:d8:aa:37:12:b7:9b:2f:45:56:c5:82:e4:e9:f7:
e0:e8:56:e9:08:5c:49:20:d7:3d:10:89:6d:50:08:
62:4e:4e:d4:9b:08:8b:1f:76:93:97:7e:a4:2c:eb:
54:e2:b7:e0:6e:4b:90:0b:21:93:a0:c2:67:28:4d:
c0:71:40:42:a3:4a:0e:e9:5e:25:d2:10:36:01:58:
56:cf:1a:e1:f8:19:42:a3:33:d9:3c:79:f4:46:06:
b9:d1:5c:73:bb:fe:e0:a2:69:fa:de:11:6e:19:8f:
bd:0a:4a:52:ff:5a:51:c2:94:37:ed:90:16:2c:22:
fa:da:9b:c8:94:84:a6:4d:22:77:a3:42:65:f1:59:
a4:e0:70:46:bf:d2:f1:b9:ad:7f:00:a3:25:5c:ca:
ee:72:51:bb:5e:ff:76:2f:25:77:30:46:7f:23:4e:
16:df:4f:2c:aa:84:a3:d4:39:c1:40:c2:93:b1:eb:
dd:e3:b8:56:8e:c1:d9:df:25:12:60:fd:4c:2c:c4:
d8:5a:03:06:24:f6:61:a9:53:dc:38:f4:1d:e4:7e:
16:54:60:ba:a7:a3:bd:cd:2a:e7:ba:1e:59:ee:44:
43:a9:b1:f0:18:7d:10:3c:cd:82:2e:71:f5:2c:4d:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CF:CD:C4:86:00:E0:DA:11:87:F1:AC:5B:EB:4C:21:BF:D9:51:36
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:19:39:52:cc:b2:2c:48:af:17:65:fa:c0:b1:28:ae:e1:95:
dc:80:b6:c0:b6:83:49:7a:d3:a6:ff:22:00:6f:b9:ee:de:f6:
a4:d4:03:97:82:75:2c:f8:fe:32:c0:12:c4:cb:03:6b:be:3f:
51:39:90:33:2f:cd:1e:38:33:37:06:d4:32:65:37:5d:21:21:
d0:99:70:ef:79:cf:4c:a5:7b:1a:2b:46:52:6e:42:fa:b8:42:
93:c4:d9:8c:5f:75:b1:a8:81:7d:ef:55:67:dd:49:3f:f7:dc:
27:ae:01:e3:37:8f:d7:db:c0:f5:0e:70:06:f4:a7:b1:d4:96:
f7:a4:56:42:7a:40:b8:9e:1c:de:da:a7:19:e0:73:f5:7c:24:
6a:fd:59:54:78:8c:43:1d:27:69:2c:8a:a8:06:de:e1:b6:74:
33:ca:16:4e:70:13:22:a0:d6:19:f8:a7:87:1c:e7:f3:2b:21:
35:58:c4:95:df:ac:64:cc:7b:3b:54:95:60:d6:da:fd:78:22:
61:a9:f4:f0:93:7e:3a:ca:21:48:97:1a:b1:83:32:95:f2:b8:
11:9e:1c:94:6f:f4:4d:5c:33:b9:bd:f2:b1:b0:f2:7f:c5:a4:
72:68:eb:99:3c:15:4e:b9:17:d5:10:7b:34:c5:e2:f5:97:94:
24:96:30:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZW7yL3+Eik8ejjO1psBi1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZDk4ODZlMmRiMjcwOWRiMjIzNjRlMzM0ZDM5ZTJlZTQ4
OGQzNmUwHhcNMjUwNDIxMDYwMDM0WhcNMjUwNDIyMDYwMDM0WjAzMTEwLwYDVQQD
EygxY2NmY2RjNDg2MDBlMGRhMTE4N2YxYWM1YmViNGMyMWJmZDk1MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe5ynf6rbu1uyVvL1yLR2Ko3Ereb
L0VWxYLk6ffg6FbpCFxJINc9EIltUAhiTk7UmwiLH3aTl36kLOtU4rfgbkuQCyGT
oMJnKE3AcUBCo0oO6V4l0hA2AVhWzxrh+BlCozPZPHn0Rga50Vxzu/7gomn63hFu
GY+9CkpS/1pRwpQ37ZAWLCL62pvIlISmTSJ3o0Jl8Vmk4HBGv9Lxua1/AKMlXMru
clG7Xv92LyV3MEZ/I04W308sqoSj1DnBQMKTsevd47hWjsHZ3yUSYP1MLMTYWgMG
JPZhqVPcOPQd5H4WVGC6p6O9zSrnuh5Z7kRDqbHwGH0QPM2CLnH1LE2S7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzPzcSGAODaEYfxrFvrTCG/2VE2MB8GA1UdIwQY
MBaAFJ/ZiG4tsnCdsiNk4zTTni7kiNNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEt
ZWJhMGNkNTdjMDIwLzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEtZWJhMGNkNTdjMDIw
LzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhk5Usyy
LEivF2X6wLEoruGV3IC2wLaDSXrTpv8iAG+57t72pNQDl4J1LPj+MsASxMsDa74/
UTmQMy/NHjgzNwbUMmU3XSEh0Jlw73nPTKV7GitGUm5C+rhCk8TZjF91saiBfe9V
Z91JP/fcJ64B4zeP19vA9Q5wBvSnsdSW96RWQnpAuJ4c3tqnGeBz9Xwkav1ZVHiM
Qx0naSyKqAbe4bZ0M8oWTnATIqDWGfinhxzn8yshNVjEld+sZMx7O1SVYNba/Xgi
Yan08JN+OsohSJcasYMylfK4EZ4clG/0TVwzub3ysbDyf8WkcmjrmTwVTrkX1RB7
NMXi9ZeUJJYwgQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:01:35 2025 by rpki-client