Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: GsqHsQnL78G8fWYQgJIYXnzIH4Pw1H6Sf5/f+6t7oK8=
Subject key identifier: 55:B7:8D:7A:11:D7:4F:92:EB:CB:DB:B2:FE:5F:E5:B7:B3:0C:67:9B
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 01964CD90E4254F00416001EB951DFAA77BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 0E78
Signing time: Sat 19 Apr 2025 07:00:15 +0000
Manifest this update: Sat 19 Apr 2025 07:00:15 +0000
Manifest next update: Sun 20 Apr 2025 07:00:15 +0000
Files and hashes: 1: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=)
2: bKdFeyVH_r7HsHfe9GqBe_UUrg8.roa (hash: vnPbAxKFKizMFdUh2dDG9y/SGopR40zinaRVaCXXct4=)
3: d-A9abVhzoyR77GP5fjse5opquk.roa (hash: SH9taC665HXJXvPloMTs2WsTRMUAVA4wBqAM/eu3n6o=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: K/1iUsEon2sGOpQjfKZfiVTN6Ey/baWVGlGOOxZDb4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:0e:42:54:f0:04:16:00:1e:b9:51:df:aa:77:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Apr 19 07:00:15 2025 GMT
Not After : Apr 20 07:00:15 2025 GMT
Subject: CN=55b78d7a11d74f92ebcbdbb2fe5fe5b7b30c679b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:ff:ae:1d:ed:85:b1:36:5c:3e:25:91:df:
b8:64:c3:fc:79:c1:ca:a7:3c:df:b0:0d:48:70:eb:
89:8d:05:b3:c1:7a:96:67:a4:02:cc:34:18:b6:b4:
aa:83:e7:09:96:8d:73:81:88:18:77:72:8b:99:9c:
cb:dd:27:74:31:56:9b:a4:31:2b:4e:c1:f3:72:a9:
60:37:c6:57:5b:28:c4:5a:3c:53:85:01:6a:75:c3:
cb:fa:8a:66:4c:01:35:25:7a:0c:61:9d:46:b8:9b:
a1:63:19:0a:6a:e4:f1:77:09:dc:8a:66:c3:ff:80:
53:53:b9:cf:f6:b9:ea:42:79:b2:62:15:59:23:5a:
3a:78:53:ec:1e:07:46:32:14:d7:91:20:a4:22:e8:
37:1b:08:d3:54:c4:37:ea:cc:e6:4c:50:35:b3:10:
3b:a0:4a:9c:89:c7:3a:9a:fa:6e:62:2b:8d:75:45:
b6:54:85:0e:ca:c7:f0:74:91:27:0b:57:fd:e3:4e:
54:b5:79:71:4f:56:96:db:f5:37:67:75:2d:ea:ab:
49:66:e2:7f:20:d7:5c:9b:70:b0:02:e6:21:f9:0f:
d9:8d:f0:df:9e:51:01:55:99:47:39:fd:57:0b:72:
e4:17:ac:f3:d4:a2:03:3f:3f:48:8d:e0:12:c4:bb:
c1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B7:8D:7A:11:D7:4F:92:EB:CB:DB:B2:FE:5F:E5:B7:B3:0C:67:9B
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:45:1a:ac:92:6e:f9:7c:fe:61:de:1b:f6:b3:92:42:73:ba:
47:b9:f3:74:4e:9a:2c:d4:fc:d5:ef:48:03:3d:9a:96:93:ff:
2b:c4:96:ba:81:e3:37:0f:c2:5b:25:8b:28:b2:29:51:ad:01:
f2:b1:61:af:3b:5c:2f:17:ee:93:19:08:12:2b:ff:eb:53:e6:
87:c8:3c:63:24:b2:09:08:42:8a:e2:ff:ae:dc:7e:d9:35:3b:
b3:b8:30:57:79:83:04:91:8e:b1:4f:67:1d:22:80:55:f1:5c:
57:bc:01:77:cd:90:71:0c:20:24:17:fa:c2:18:c5:57:d3:d4:
6f:bc:df:e7:1d:b9:c4:7f:aa:92:a9:4b:9d:f6:89:97:9a:22:
9c:67:16:9e:35:50:43:ea:bc:34:3b:29:83:5f:0a:3a:84:b7:
15:a0:81:3f:7e:ef:df:47:96:0d:cd:eb:d3:a9:ff:61:5e:8b:
c1:d2:d4:86:3a:9d:f5:24:60:9e:5f:9c:5f:b0:50:85:d2:2b:
93:ff:e7:2a:d4:13:3d:c0:8c:dd:e0:56:ec:c1:cc:a6:ef:db:
a4:65:41:2b:28:52:bd:d4:06:ef:09:47:b7:43:38:d1:d9:96:
80:35:a0:1a:be:2b:a4:18:c6:24:15:ef:3b:9f:c0:6f:c5:fb:
44:6c:96:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2Q5CVPAEFgAeuVHfqne/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDQxZTllNzA1YWRhM2Y5YzFlODI3Y2QyNzZkYmQwOTc0
ODc2MDgwHhcNMjUwNDE5MDcwMDE1WhcNMjUwNDIwMDcwMDE1WjAzMTEwLwYDVQQD
Eyg1NWI3OGQ3YTExZDc0ZjkyZWJjYmRiYjJmZTVmZTViN2IzMGM2NzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4j/rh3thbE2XD4lkd+4ZMP8ecHK
pzzfsA1IcOuJjQWzwXqWZ6QCzDQYtrSqg+cJlo1zgYgYd3KLmZzL3Sd0MVabpDEr
TsHzcqlgN8ZXWyjEWjxThQFqdcPL+opmTAE1JXoMYZ1GuJuhYxkKauTxdwncimbD
/4BTU7nP9rnqQnmyYhVZI1o6eFPsHgdGMhTXkSCkIug3GwjTVMQ36szmTFA1sxA7
oEqcicc6mvpuYiuNdUW2VIUOysfwdJEnC1f9405UtXlxT1aW2/U3Z3Ut6qtJZuJ/
INdcm3CwAuYh+Q/ZjfDfnlEBVZlHOf1XC3LkF6zz1KIDPz9IjeASxLvBzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFW3jXoR10+S68vbsv5f5bezDGebMB8GA1UdIwQY
MBaAFJ5EHp5wWto/nB6CfNJ229CXSHYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZTE2ZjctYjg2OC00YjRjLTlkOWIt
OTMyZDE2YjA4ZGYwLzEvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9jZTE2ZjctYjg2OC00YjRjLTlkOWItOTMyZDE2YjA4ZGYw
LzEvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUUarJJu
+Xz+Yd4b9rOSQnO6R7nzdE6aLNT81e9IAz2alpP/K8SWuoHjNw/CWyWLKLIpUa0B
8rFhrztcLxfukxkIEiv/61Pmh8g8YySyCQhCiuL/rtx+2TU7s7gwV3mDBJGOsU9n
HSKAVfFcV7wBd82QcQwgJBf6whjFV9PUb7zf5x25xH+qkqlLnfaJl5oinGcWnjVQ
Q+q8NDspg18KOoS3FaCBP37v30eWDc3r06n/YV6LwdLUhjqd9SRgnl+cX7BQhdIr
k//nKtQTPcCM3eBW7MHMpu/bpGVBKyhSvdQG7wlHt0M40dmWgDWgGr4rpBjGJBXv
O5/Ab8X7RGyWKA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:06:55 2025 by rpki-client