Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
File: nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json)
Hash identifier: FyG6Uu+qgxyW6FM97zoIM+J/xuEMYFEY5yPTgXMOeuk=
Subject key identifier: 4E:EC:BD:D5:D5:B6:1F:F1:FD:78:88:93:85:FF:78:1C:21:DC:E5:5C
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 01958F2A4A2A6C45DE39FA47CBAC43FF6EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
Manifest number: 1498
Signing time: Thu 13 Mar 2025 11:01:08 +0000
Manifest this update: Thu 13 Mar 2025 11:01:08 +0000
Manifest next update: Fri 14 Mar 2025 11:01:08 +0000
Files and hashes: 1: 2R1UFCZ6LPm3SJQHM7rJf5ia5HE.roa (hash: 9iVp3ax6SoInGkRmccCgwLuza4oa5BeDphs/tDw0ZLo=)
2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: LgO0uOLBhB+qFgmTUd4R7u0c6fu/bjqhIPzBbZINvXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:4a:2a:6c:45:de:39:fa:47:cb:ac:43:ff:6e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: Mar 13 11:01:08 2025 GMT
Not After : Mar 14 11:01:08 2025 GMT
Subject: CN=4eecbdd5d5b61ff1fd78889385ff781c21dce55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:2c:09:be:e8:71:4d:57:68:50:63:60:2e:
c8:89:74:c5:6f:87:15:5c:d4:6e:2e:0c:c9:6d:fb:
04:5e:67:51:12:ec:41:7e:c3:be:a4:53:3f:e3:a7:
f5:2c:d0:57:fd:49:99:7c:77:a3:25:b1:a0:a4:e2:
5e:94:dd:46:3e:77:59:c6:72:65:db:4a:4a:12:27:
d5:3c:07:47:8e:5f:24:a1:c4:11:64:cc:73:f2:51:
c1:69:b1:e7:81:45:44:e1:75:8c:2c:b5:c9:6f:94:
52:01:f9:ec:c5:9a:06:b2:e1:4b:48:6b:63:31:37:
46:4e:14:e5:8d:fe:06:9d:5d:80:a6:16:c8:ca:b0:
ce:80:93:a2:96:0f:fc:51:e3:0a:61:0f:1b:b2:df:
53:61:8a:40:84:e4:a6:ab:6b:1e:77:dd:e5:7f:e2:
52:6c:e2:c0:30:f3:cd:8f:a7:27:e5:1d:57:46:3f:
6e:c6:5c:25:06:35:bb:8e:02:f4:1a:0f:85:5e:c5:
f8:50:3f:b2:97:50:37:c6:a1:d5:61:84:f6:ed:31:
c2:2d:99:19:d4:98:39:77:6a:a6:70:92:6e:d7:12:
50:d8:73:1c:ce:d7:61:6e:bb:c1:64:c7:51:aa:7b:
12:55:01:87:2e:14:31:43:8a:85:98:52:c9:9d:23:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EC:BD:D5:D5:B6:1F:F1:FD:78:88:93:85:FF:78:1C:21:DC:E5:5C
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:92:ce:a2:3f:79:ac:c2:28:72:65:5e:87:27:3a:8d:84:bc:
3e:fc:cb:61:fd:71:93:e4:dd:cf:61:60:7b:66:ad:a1:09:df:
d9:f7:50:f9:97:ab:fb:2c:8e:b7:83:2d:fc:bc:4f:ba:c1:18:
aa:7e:2a:2d:fb:6d:a0:d5:90:d6:83:53:f3:7e:0a:70:24:69:
fd:18:15:2d:03:5d:da:a4:6c:5d:47:e0:9e:f5:3a:29:c6:0d:
f5:cc:2c:39:35:85:62:33:b3:19:5b:06:e5:41:7a:61:ef:2e:
30:17:00:81:29:96:6e:ea:1c:3d:8f:4b:86:d6:8e:4a:98:7e:
b7:f3:5b:3f:78:1f:c7:41:5a:2f:e3:8a:1a:83:4b:32:7d:54:
e2:b3:75:f4:b1:8a:11:d5:d5:ee:3a:3d:a6:09:d6:b8:6d:59:
26:81:29:7f:65:da:c9:31:c6:8f:0a:d3:7d:e4:e3:8e:65:4d:
4d:a5:27:73:ee:fb:0d:4e:11:d5:74:66:48:73:d8:56:24:d3:
5d:b2:be:c9:56:86:5d:44:25:d2:13:0c:fc:87:ec:86:1e:42:
f1:9b:47:af:fc:a4:86:2d:00:e9:7c:c2:f9:a2:51:f0:4e:39:
aa:eb:6e:82:f8:72:53:0f:83:79:36:86:07:c0:cf:96:a9:ee:
2f:19:47:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPKkoqbEXeOfpHy6xD/26yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNDk1MDc3OWQ1OTc1NTFkNzljNDNlNjE2YTUwOTA3ZGU4
Y2RmNzcwHhcNMjUwMzEzMTEwMTA4WhcNMjUwMzE0MTEwMTA4WjAzMTEwLwYDVQQD
Eyg0ZWVjYmRkNWQ1YjYxZmYxZmQ3ODg4OTM4NWZmNzgxYzIxZGNlNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspksCb7ocU1XaFBjYC7IiXTFb4cV
XNRuLgzJbfsEXmdREuxBfsO+pFM/46f1LNBX/UmZfHejJbGgpOJelN1GPndZxnJl
20pKEifVPAdHjl8kocQRZMxz8lHBabHngUVE4XWMLLXJb5RSAfnsxZoGsuFLSGtj
MTdGThTljf4GnV2AphbIyrDOgJOilg/8UeMKYQ8bst9TYYpAhOSmq2sed93lf+JS
bOLAMPPNj6cn5R1XRj9uxlwlBjW7jgL0Gg+FXsX4UD+yl1A3xqHVYYT27THCLZkZ
1Jg5d2qmcJJu1xJQ2HMcztdhbrvBZMdRqnsSVQGHLhQxQ4qFmFLJnSPQ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7svdXVth/x/XiIk4X/eBwh3OVcMB8GA1UdIwQY
MBaAFJxJUHedWXVR15xD5halCQfejN93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkVsUWQ1MVpkVkhYbkVQbUZxVUpCOTZNMzNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9iY2UzOTctMzcyZC00ZDJmLWFkMGEt
YTQ4ZWJkMzAxNjcxLzEvbkVsUWQ1MVpkVkhYbkVQbUZxVUpCOTZNMzNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9iY2UzOTctMzcyZC00ZDJmLWFkMGEtYTQ4ZWJkMzAxNjcx
LzEvbkVsUWQ1MVpkVkhYbkVQbUZxVUpCOTZNMzNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZLOoj95
rMIocmVehyc6jYS8PvzLYf1xk+Tdz2Fge2atoQnf2fdQ+Zer+yyOt4Mt/LxPusEY
qn4qLfttoNWQ1oNT834KcCRp/RgVLQNd2qRsXUfgnvU6KcYN9cwsOTWFYjOzGVsG
5UF6Ye8uMBcAgSmWbuocPY9LhtaOSph+t/NbP3gfx0FaL+OKGoNLMn1U4rN19LGK
EdXV7jo9pgnWuG1ZJoEpf2XayTHGjwrTfeTjjmVNTaUnc+77DU4R1XRmSHPYViTT
XbK+yVaGXUQl0hMM/Ifshh5C8ZtHr/ykhi0A6XzC+aJR8E45qutugvhyUw+DeTaG
B8DPlqnuLxlHzg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:24 2025 by rpki-client