Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: VJyq8tnCUA+Fol5xd13zIiMlLRiF7bZvDrO1yGg0fnU=
Subject key identifier: D9:06:2B:B6:CF:E0:C7:BC:36:FD:F2:F7:7D:CE:C8:6F:8B:EA:2E:17
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 0196526DD8C04A1BB0A5B4415C0EAABD4290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 0896
Signing time: Sun 20 Apr 2025 09:00:52 +0000
Manifest this update: Sun 20 Apr 2025 09:00:52 +0000
Manifest next update: Mon 21 Apr 2025 09:00:52 +0000
Files and hashes: 1: _O2K9lYrU1ufrJyVF92JtVYbIao.roa (hash: opCkasUjE09S1Hv7hZM9HKqW92oCRoLsRmm8L97k62Q=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: WKAs8kWwWa9vrHmQ8Uvn8BBqs49k5MIfkF+6cNGmuho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:d8:c0:4a:1b:b0:a5:b4:41:5c:0e:aa:bd:42:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Apr 20 09:00:52 2025 GMT
Not After : Apr 21 09:00:52 2025 GMT
Subject: CN=d9062bb6cfe0c7bc36fdf2f77dcec86f8bea2e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:6f:0f:4b:4f:a2:e1:8f:47:1b:b5:28:05:
54:21:de:54:23:4c:41:e0:5f:05:73:36:25:8c:d6:
3f:0a:6b:03:af:fd:8d:d5:a9:21:c2:4c:ae:c6:a1:
9a:47:da:ad:b2:6a:8b:a9:65:63:dd:29:1a:54:31:
e2:f0:51:b7:18:73:f1:96:84:9a:3c:43:7a:4a:21:
65:16:cb:98:a9:1e:2a:ed:8f:c2:ce:0c:e0:4c:6a:
68:b7:57:6f:c6:b5:45:5a:a2:4f:ef:fd:0a:ea:56:
ab:90:02:a0:7b:f8:25:96:c6:b9:09:d9:57:80:c4:
da:58:75:a3:e5:58:07:fa:0c:a8:4f:5a:8a:65:20:
36:6e:30:fc:37:66:86:56:87:8b:2a:45:09:9d:99:
06:aa:7d:8e:d2:c1:e7:74:20:8a:0d:32:7c:3a:cf:
3b:36:b7:da:2f:58:0c:3e:eb:c4:ae:ec:ac:5a:08:
a4:de:05:0a:40:24:06:0e:91:18:33:3e:77:4e:b5:
b5:9f:49:c4:3d:b1:19:a7:e0:53:25:12:be:23:7d:
22:71:f0:6f:fe:0e:66:71:a1:c0:1c:ed:02:ae:eb:
15:ee:37:f7:24:f9:e3:85:f5:a5:fa:2d:36:83:24:
13:15:4c:73:34:3a:fb:44:51:d0:91:8f:94:73:4d:
4f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:06:2B:B6:CF:E0:C7:BC:36:FD:F2:F7:7D:CE:C8:6F:8B:EA:2E:17
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:25:53:e2:9e:b3:85:d8:66:7d:06:51:e6:49:04:e4:bd:4b:
16:a1:de:94:c4:c5:17:6f:10:8d:41:fa:1f:ca:75:52:02:df:
ac:f8:aa:c7:a6:82:b4:af:2d:1f:00:9a:4a:78:b2:f8:fb:8a:
e7:e6:0c:ed:01:cb:e0:d1:a0:16:06:bf:36:02:c1:c8:19:51:
c8:b9:ba:7a:b6:88:62:25:41:db:43:24:a5:e0:45:a3:8c:5e:
f0:dc:b5:fd:f5:69:79:56:fd:6b:25:14:a4:79:d4:28:e9:4f:
84:f8:c8:ef:6f:48:90:8e:1b:04:e7:72:17:f2:a4:e7:b3:02:
57:1b:fb:6f:2b:3d:a3:ed:5e:7e:32:63:1d:f4:0c:e9:26:78:
31:ea:7e:f2:b3:af:3d:34:af:a6:2c:bd:16:77:19:e0:f3:d0:
d6:c9:f2:47:44:f9:f8:5f:36:84:69:f7:8c:c0:0d:0e:58:5c:
fb:5b:83:95:31:20:46:91:30:6f:9c:10:db:a3:59:0f:a2:ba:
07:53:70:09:d0:75:3d:ab:79:29:5c:9a:b2:82:fe:e2:b8:94:
8e:5b:81:ba:c2:a7:e5:49:37:23:f7:49:d3:ad:ae:e8:0b:32:
28:53:32:da:cb:2f:65:f9:57:3a:36:5c:d7:08:84:d4:90:84:
d7:04:02:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSbdjAShuwpbRBXA6qvUKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkM2ViYmE5ZmEyY2FkMjg2YWM5MTI3NjU3NTc0NWY2MTVl
OGZhNzEwHhcNMjUwNDIwMDkwMDUyWhcNMjUwNDIxMDkwMDUyWjAzMTEwLwYDVQQD
EyhkOTA2MmJiNmNmZTBjN2JjMzZmZGYyZjc3ZGNlYzg2ZjhiZWEyZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+pvD0tPouGPRxu1KAVUId5UI0xB
4F8FczYljNY/CmsDr/2N1akhwkyuxqGaR9qtsmqLqWVj3SkaVDHi8FG3GHPxloSa
PEN6SiFlFsuYqR4q7Y/CzgzgTGpot1dvxrVFWqJP7/0K6larkAKge/gllsa5CdlX
gMTaWHWj5VgH+gyoT1qKZSA2bjD8N2aGVoeLKkUJnZkGqn2O0sHndCCKDTJ8Os87
NrfaL1gMPuvEruysWgik3gUKQCQGDpEYMz53TrW1n0nEPbEZp+BTJRK+I30icfBv
/g5mcaHAHO0CrusV7jf3JPnjhfWl+i02gyQTFUxzNDr7RFHQkY+Uc01P0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkGK7bP4Me8Nv3y933OyG+L6i4XMB8GA1UdIwQY
MBaAFJ0+u6n6LK0oaskSdldXRfYV6PpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85ZmY5YzctZDMyOS00NWE2LTg5OGEt
OWQ5NTlhYmNlNTI2LzEvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85ZmY5YzctZDMyOS00NWE2LTg5OGEtOWQ5NTlhYmNlNTI2
LzEvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyVT4p6z
hdhmfQZR5kkE5L1LFqHelMTFF28QjUH6H8p1UgLfrPiqx6aCtK8tHwCaSniy+PuK
5+YM7QHL4NGgFga/NgLByBlRyLm6eraIYiVB20MkpeBFo4xe8Ny1/fVpeVb9ayUU
pHnUKOlPhPjI729IkI4bBOdyF/Kk57MCVxv7bys9o+1efjJjHfQM6SZ4Mep+8rOv
PTSvpiy9FncZ4PPQ1snyR0T5+F82hGn3jMANDlhc+1uDlTEgRpEwb5wQ26NZD6K6
B1NwCdB1Pat5KVyasoL+4riUjluBusKn5Uk3I/dJ062u6AsyKFMy2ssvZflXOjZc
1wiE1JCE1wQCjg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:18 2025 by rpki-client