Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: Qy4QHXWBXXpiIciKIJEB5AyPWaLpUHxwjIsvm/43e48=
Subject key identifier: A2:A5:47:10:47:21:A9:89:E5:0C:5E:2F:BD:1E:C9:8B:F3:EF:DB:93
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 01965D27EC78C38B7ED6BC53946F1C63E172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 07B2
Signing time: Tue 22 Apr 2025 11:00:19 +0000
Manifest this update: Tue 22 Apr 2025 11:00:19 +0000
Manifest next update: Wed 23 Apr 2025 11:00:19 +0000
Files and hashes: 1: D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa (hash: pLl10ejVKSmOKcwrzyb02NjjAckX++6l+yonzmG4CME=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: W7TXdniKp+0Ttsw9H1esnB4otoAH7syTD+R100CpytU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:27:ec:78:c3:8b:7e:d6:bc:53:94:6f:1c:63:e1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Apr 22 11:00:19 2025 GMT
Not After : Apr 23 11:00:19 2025 GMT
Subject: CN=a2a547104721a989e50c5e2fbd1ec98bf3efdb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:57:0f:f9:e9:4b:36:c2:7e:9a:99:c5:2f:
8a:87:97:49:bc:15:b7:36:84:bc:13:ac:c9:40:75:
7c:5d:3f:10:6c:59:7e:8d:36:1d:73:46:25:29:a3:
20:03:80:df:51:5d:94:ac:23:2f:f0:60:12:a5:b2:
9e:dd:0e:0b:1e:13:3e:79:8a:cd:55:f7:9a:b8:5a:
a9:49:74:e1:80:14:a4:0d:e6:27:36:78:47:4d:1e:
55:ee:76:6a:85:ae:ae:aa:ec:e7:cc:3e:6f:7c:4d:
0a:2d:ea:ce:a0:3b:34:4e:75:ff:b1:f9:cf:bc:3d:
4b:f9:7d:2d:f1:74:d1:36:74:39:f3:bf:64:05:39:
de:d7:cf:68:d5:32:b1:50:79:b4:aa:bb:b2:20:c0:
ec:9f:b9:73:50:ea:7a:f5:13:1e:63:2b:da:d7:83:
6b:90:4d:d6:2b:27:76:42:b0:c9:ae:bf:1d:56:a2:
b9:23:57:dc:31:de:28:c6:02:19:34:ea:29:c1:f2:
ef:70:1a:0b:08:18:14:39:3c:9d:23:de:27:2f:31:
4d:a4:08:d8:35:dd:06:d1:e0:33:59:53:f0:13:8a:
d9:e3:ba:a0:60:ad:a7:9b:8e:e8:0c:1a:18:81:80:
57:83:88:43:50:72:91:48:ad:42:6d:6c:0b:a1:2a:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A5:47:10:47:21:A9:89:E5:0C:5E:2F:BD:1E:C9:8B:F3:EF:DB:93
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bc:fb:1b:8e:ff:85:f5:5a:86:a4:56:71:be:42:cf:84:03:
7f:17:1d:2b:01:16:28:68:d2:55:c1:47:55:23:71:25:ba:84:
d7:93:39:5d:b9:6b:ba:66:87:0b:d0:9c:2b:82:21:a2:b7:00:
18:fe:21:f8:84:a4:23:2f:cf:80:fc:b6:f1:15:9e:99:1d:53:
05:3c:fd:2a:e7:6d:c3:8e:f4:29:26:7f:00:9f:0d:b4:36:64:
0b:9d:fa:fe:76:90:4a:c0:fd:38:dc:84:6e:64:16:c9:6d:75:
45:db:99:1a:e0:74:20:98:21:43:b8:bd:21:a5:61:84:ff:55:
61:63:c5:cb:93:9b:51:54:71:2e:62:97:b7:16:15:12:7e:a3:
82:3e:67:34:09:b3:e8:59:bb:14:2e:76:6f:df:a2:0c:fa:0c:
86:45:af:a2:d6:68:6f:84:a3:f7:91:a1:3a:df:56:67:23:0a:
3e:77:73:ad:e0:6b:55:5a:d8:f1:9d:ac:65:4f:8b:f7:17:7a:
a6:af:0d:ec:4b:5b:42:36:db:5c:88:82:6d:36:46:55:dd:60:
16:18:76:4c:09:00:62:f9:ea:f8:fb:ee:cc:60:b5:7e:fc:cb:
07:38:8e:59:06:f3:c4:bf:7b:fb:a6:18:7c:d9:39:11:e9:21:
27:ed:78:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdJ+x4w4t+1rxTlG8cY+FyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjI0YWZiZmVjZGY2YTk5YzI4MmJmNTNiMzA0ZjNjMWU4
ZjQ3MGYwHhcNMjUwNDIyMTEwMDE5WhcNMjUwNDIzMTEwMDE5WjAzMTEwLwYDVQQD
EyhhMmE1NDcxMDQ3MjFhOTg5ZTUwYzVlMmZiZDFlYzk4YmYzZWZkYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9ZXD/npSzbCfpqZxS+Kh5dJvBW3
NoS8E6zJQHV8XT8QbFl+jTYdc0YlKaMgA4DfUV2UrCMv8GASpbKe3Q4LHhM+eYrN
VfeauFqpSXThgBSkDeYnNnhHTR5V7nZqha6uquznzD5vfE0KLerOoDs0TnX/sfnP
vD1L+X0t8XTRNnQ5879kBTne189o1TKxUHm0qruyIMDsn7lzUOp69RMeYyva14Nr
kE3WKyd2QrDJrr8dVqK5I1fcMd4oxgIZNOopwfLvcBoLCBgUOTydI94nLzFNpAjY
Nd0G0eAzWVPwE4rZ47qgYK2nm47oDBoYgYBXg4hDUHKRSK1CbWwLoSrQAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKlRxBHIamJ5QxeL70eyYvz79uTMB8GA1UdIwQY
MBaAFJ3ySvv+zfapnCgr9TswTzwej0cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQt
N2VlZGY0ZGQ2YzEzLzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQtN2VlZGY0ZGQ2YzEz
LzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLz7G47/
hfVahqRWcb5Cz4QDfxcdKwEWKGjSVcFHVSNxJbqE15M5XblrumaHC9CcK4IhorcA
GP4h+ISkIy/PgPy28RWemR1TBTz9Kudtw470KSZ/AJ8NtDZkC536/naQSsD9ONyE
bmQWyW11RduZGuB0IJghQ7i9IaVhhP9VYWPFy5ObUVRxLmKXtxYVEn6jgj5nNAmz
6Fm7FC52b9+iDPoMhkWvotZob4Sj95GhOt9WZyMKPndzreBrVVrY8Z2sZU+L9xd6
pq8N7EtbQjbbXIiCbTZGVd1gFhh2TAkAYvnq+PvuzGC1fvzLBziOWQbzxL97+6YY
fNk5EekhJ+14XQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:53:51 2025 by rpki-client