Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier: 8o2Pd9ps3Wlqu805Hfl0UZaW4o6w5q6NxaAyK8tJU1w=
Subject key identifier: CE:4E:61:4E:19:89:BB:A1:AD:FD:9B:29:36:01:16:2D:49:AF:30:CD
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 01964143240704DEEA8895AED28DDEB8A971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number: 1425
Signing time: Thu 17 Apr 2025 01:00:41 +0000
Manifest this update: Thu 17 Apr 2025 01:00:41 +0000
Manifest next update: Fri 18 Apr 2025 01:00:41 +0000
Files and hashes: 1: F8WpKfkO6WPBdgcnLvLi6tQEwfY.roa (hash: aC9X5Qw0ukYXbx0znES1kvpxFjIQA5ZR++ffurv/QKw=)
2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: y6xHWVXTk7rGTUfY6tr/FK6t5NoPLb+EGFDAaax5czc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:43:24:07:04:de:ea:88:95:ae:d2:8d:de:b8:a9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: Apr 17 01:00:41 2025 GMT
Not After : Apr 18 01:00:41 2025 GMT
Subject: CN=ce4e614e1989bba1adfd9b293601162d49af30cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:af:07:54:98:5d:2d:15:1d:f8:65:72:73:
cc:65:76:6b:32:0e:e3:15:00:0b:f5:be:8d:91:cc:
da:fc:b7:55:69:56:bf:97:02:c0:a7:17:76:bb:ec:
c6:8c:42:f2:93:23:c3:8d:a7:b5:2c:09:c0:51:a4:
e3:a0:17:18:d7:bd:34:23:bc:b3:2b:a3:b2:74:c4:
25:3e:ef:0b:64:d7:d5:e3:5e:f5:e2:84:e0:1b:07:
86:77:8a:70:6e:2f:b3:3f:a4:3a:d5:14:9a:aa:a1:
80:ce:3b:9a:e3:38:6f:3f:ac:1f:8f:3e:20:79:0a:
b0:40:46:20:5e:08:82:eb:a3:43:fa:31:bc:03:82:
19:b1:14:51:e6:a0:3b:1f:04:6f:17:df:0d:f6:cd:
1f:64:7d:3d:cd:a8:10:62:70:d4:51:ed:49:e4:1a:
f3:c8:f3:23:bf:50:4f:e4:42:98:3d:0d:49:5a:d5:
f3:1b:7a:16:78:28:7a:e3:3e:79:42:ff:3e:ca:b7:
61:30:d8:13:aa:be:82:45:05:ff:bd:b9:89:de:17:
23:06:bd:93:0d:6a:c8:e5:ad:8c:b3:be:3e:cc:57:
75:70:c9:cd:b3:c6:63:17:42:b1:12:23:50:b1:10:
d7:93:40:ed:6a:28:89:a9:ed:4e:f7:67:16:de:76:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4E:61:4E:19:89:BB:A1:AD:FD:9B:29:36:01:16:2D:49:AF:30:CD
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a1:bf:10:f4:04:0e:a2:0e:37:36:2c:ae:35:68:a3:e1:9c:
e5:66:6f:ef:93:fb:31:7b:4d:64:38:4d:ff:6f:20:36:3a:b9:
da:88:48:1f:b7:88:7a:45:c4:20:d3:03:44:78:96:f5:62:3c:
84:22:a1:54:f8:b1:71:6f:ca:45:24:b9:c6:3c:eb:d3:90:a9:
72:72:39:b4:61:68:a6:c7:4a:60:a8:77:51:89:6b:01:3c:34:
2e:59:9b:11:f4:38:80:92:d8:c8:67:41:2c:c4:81:39:95:1d:
54:c3:44:eb:75:8b:d4:d6:be:0c:f7:bc:88:76:49:4b:eb:05:
56:e7:7c:bb:2a:9b:b6:1d:fe:55:c3:6c:04:8d:51:7b:c2:08:
ff:1f:b1:a7:80:4c:53:9f:39:1e:d8:f9:66:90:6b:a3:48:e3:
f3:a8:0d:6e:08:30:91:62:ff:a4:e1:8d:bb:92:dd:35:48:8b:
c9:d0:fa:4a:fc:ce:6a:e6:37:61:32:aa:f9:4f:9b:2c:16:f7:
3d:14:aa:70:c6:11:a4:5d:07:0d:7d:f6:0b:91:3f:a5:e4:55:
18:ad:73:aa:03:15:fe:2c:99:49:31:54:d9:d9:72:25:f3:31:
f6:61:49:ef:bd:75:21:4f:2f:a3:ce:e9:32:9e:cf:cb:a6:aa:
b9:0b:e2:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZBQyQHBN7qiJWu0o3euKlxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkM2IzZmY5M2I4MzM3MzVjYWNkNjUyY2UzNDlmYTMyMzQw
MjQzMmIwHhcNMjUwNDE3MDEwMDQxWhcNMjUwNDE4MDEwMDQxWjAzMTEwLwYDVQQD
EyhjZTRlNjE0ZTE5ODliYmExYWRmZDliMjkzNjAxMTYyZDQ5YWYzMGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ICvB1SYXS0VHfhlcnPMZXZrMg7j
FQAL9b6Nkcza/LdVaVa/lwLApxd2u+zGjELykyPDjae1LAnAUaTjoBcY1700I7yz
K6OydMQlPu8LZNfV41714oTgGweGd4pwbi+zP6Q61RSaqqGAzjua4zhvP6wfjz4g
eQqwQEYgXgiC66ND+jG8A4IZsRRR5qA7HwRvF98N9s0fZH09zagQYnDUUe1J5Brz
yPMjv1BP5EKYPQ1JWtXzG3oWeCh64z55Qv8+yrdhMNgTqr6CRQX/vbmJ3hcjBr2T
DWrI5a2Ms74+zFd1cMnNs8ZjF0KxEiNQsRDXk0DtaiiJqe1O92cW3nasTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5OYU4Zibuhrf2bKTYBFi1JrzDNMB8GA1UdIwQY
MBaAFJ07P/k7gzc1ys1lLONJ+jI0AkMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNWQ0YjItYjU3Zi00NTYyLWFhYmUt
YzhjZWFiOGJjMDUwLzEvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jNWQ0YjItYjU3Zi00NTYyLWFhYmUtYzhjZWFiOGJjMDUw
LzEvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqG/EPQE
DqIONzYsrjVoo+Gc5WZv75P7MXtNZDhN/28gNjq52ohIH7eIekXEINMDRHiW9WI8
hCKhVPixcW/KRSS5xjzr05CpcnI5tGFopsdKYKh3UYlrATw0LlmbEfQ4gJLYyGdB
LMSBOZUdVMNE63WL1Na+DPe8iHZJS+sFVud8uyqbth3+VcNsBI1Re8II/x+xp4BM
U585Htj5ZpBro0jj86gNbggwkWL/pOGNu5LdNUiLydD6SvzOauY3YTKq+U+bLBb3
PRSqcMYRpF0HDX32C5E/peRVGK1zqgMV/iyZSTFU2dlyJfMx9mFJ7711IU8vo87p
Mp7Py6aquQviVQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:14:04 2025 by rpki-client