Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier: 9IUTYPGt8La22+VKV8Rz3lRIqhVWJyq9juGZa0oqRdU=
Subject key identifier: 36:D4:C4:F3:6A:88:0A:5C:3A:7C:48:52:CB:5B:81:0E:8E:A2:A4:D2
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 019643D6480EF266534B3270BAB952474A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number: 0C6C
Signing time: Thu 17 Apr 2025 13:00:38 +0000
Manifest this update: Thu 17 Apr 2025 13:00:38 +0000
Manifest next update: Fri 18 Apr 2025 13:00:38 +0000
Files and hashes: 1: DwD4MRqZCp-c4uFsMsWnYL0-SzA.roa (hash: 2tkEE6WjjJq4tK+YMGxG4bkpbYxQV0qlFZ5Ps3gC3Vo=)
2: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: wift9duRupkOt7lN5JCWxm+wYYgMN0CQOdmwtklrWeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:48:0e:f2:66:53:4b:32:70:ba:b9:52:47:4a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Apr 17 13:00:38 2025 GMT
Not After : Apr 18 13:00:38 2025 GMT
Subject: CN=36d4c4f36a880a5c3a7c4852cb5b810e8ea2a4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:de:55:96:28:e6:37:05:f7:a5:b5:f8:bf:d8:
d6:4c:f8:1e:22:f1:0e:15:37:a5:6c:dd:9d:11:c4:
09:09:5a:d7:90:ca:74:9d:f9:25:39:b4:90:58:59:
6e:d4:de:8e:55:61:82:0e:93:38:95:f2:77:43:66:
63:ac:0e:29:c2:34:4f:d7:1b:f5:66:ba:0e:57:2f:
cc:30:94:4a:07:a2:6c:79:cb:3d:8b:65:57:0f:30:
38:fc:8e:30:08:d1:fc:ce:f7:2e:77:cd:29:e0:88:
a1:18:93:55:41:01:af:9b:2c:fa:88:ff:30:b4:0e:
e9:f4:21:b3:d5:a2:78:11:b5:65:d0:68:cd:c0:a1:
05:8e:e1:ab:2a:ad:f5:1d:d5:2b:9e:ac:6b:b2:e0:
aa:36:4f:ca:45:ca:c6:d3:6a:49:15:82:fd:c3:c9:
b0:4a:ba:e4:00:41:20:db:dc:e1:c9:a9:77:66:3a:
9c:56:c6:51:0c:c1:4c:a4:29:04:6f:2b:e1:01:a5:
7f:62:99:fd:77:e6:50:60:14:6c:cb:97:73:13:e7:
37:29:21:5f:7c:95:f3:40:32:67:a6:3c:62:75:c1:
0f:fd:55:76:e5:91:f8:b0:45:6c:56:68:b4:c4:08:
38:49:de:cd:1e:72:ac:fb:47:75:da:21:e5:a1:5b:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D4:C4:F3:6A:88:0A:5C:3A:7C:48:52:CB:5B:81:0E:8E:A2:A4:D2
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b9:f3:e0:59:dd:64:f4:48:a1:39:73:fb:07:0d:01:f5:11:
80:bd:f3:f2:f9:a1:04:d6:0b:cc:8f:02:d2:81:e2:66:66:d2:
fa:b2:ca:f7:7d:85:0e:db:e2:6b:7c:00:47:fb:23:d7:d1:73:
79:79:9a:1a:15:74:a8:1b:28:ab:8f:e5:a9:ba:4f:6b:1d:86:
50:69:23:89:47:bb:98:da:f1:f2:8a:7d:05:d4:8a:c2:d7:d4:
90:7a:88:14:a7:4b:38:91:84:4f:bd:e3:ef:61:25:f2:52:92:
32:92:b5:77:38:96:d6:a3:49:03:73:7a:7e:91:ac:35:eb:8b:
1d:97:63:04:e6:3e:4a:e6:46:b3:21:6c:83:ea:ce:24:8a:76:
31:73:af:cc:17:41:72:96:b7:6e:26:8b:63:35:26:7c:3f:d4:
1c:b2:73:d1:f6:b6:29:17:c3:2c:7f:bb:e6:ce:f5:bb:0b:05:
f7:25:5c:0f:55:87:1c:42:01:af:57:49:0f:33:62:59:ec:6e:
33:57:64:6a:9b:72:d2:16:0c:a9:a5:a5:93:dc:25:05:c3:0b:
04:5d:89:e1:39:bf:69:05:b2:87:38:85:bd:3d:5e:b1:ab:08:
27:1c:02:1f:00:8a:65:a6:fc:5e:d0:71:1a:f2:b9:8a:cb:39:
06:59:01:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1kgO8mZTSzJwurlSR0o2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMjA5MTU3YmY3ODllNmJiYTM0ZTBkYmQzZWZlY2Q5YjIw
ZGQwNmIwHhcNMjUwNDE3MTMwMDM4WhcNMjUwNDE4MTMwMDM4WjAzMTEwLwYDVQQD
EygzNmQ0YzRmMzZhODgwYTVjM2E3YzQ4NTJjYjViODEwZThlYTJhNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8d5VlijmNwX3pbX4v9jWTPgeIvEO
FTelbN2dEcQJCVrXkMp0nfklObSQWFlu1N6OVWGCDpM4lfJ3Q2ZjrA4pwjRP1xv1
ZroOVy/MMJRKB6Jsecs9i2VXDzA4/I4wCNH8zvcud80p4IihGJNVQQGvmyz6iP8w
tA7p9CGz1aJ4EbVl0GjNwKEFjuGrKq31HdUrnqxrsuCqNk/KRcrG02pJFYL9w8mw
SrrkAEEg29zhyal3ZjqcVsZRDMFMpCkEbyvhAaV/Ypn9d+ZQYBRsy5dzE+c3KSFf
fJXzQDJnpjxidcEP/VV25ZH4sEVsVmi0xAg4Sd7NHnKs+0d12iHloVuwTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbUxPNqiApcOnxIUstbgQ6OoqTSMB8GA1UdIwQY
MBaAFJwgkVe/eJ5rujTg29Pv7NmyDdBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgt
MTE2OTA5ZTQzODI0LzEvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgtMTE2OTA5ZTQzODI0
LzEvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbnz4Fnd
ZPRIoTlz+wcNAfURgL3z8vmhBNYLzI8C0oHiZmbS+rLK932FDtvia3wAR/sj19Fz
eXmaGhV0qBsoq4/lqbpPax2GUGkjiUe7mNrx8op9BdSKwtfUkHqIFKdLOJGET73j
72El8lKSMpK1dziW1qNJA3N6fpGsNeuLHZdjBOY+SuZGsyFsg+rOJIp2MXOvzBdB
cpa3biaLYzUmfD/UHLJz0fa2KRfDLH+75s71uwsF9yVcD1WHHEIBr1dJDzNiWexu
M1dkapty0hYMqaWlk9wlBcMLBF2J4Tm/aQWyhziFvT1esasIJxwCHwCKZab8XtBx
GvK5iss5BlkBdg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 20:05:30 2025 by rpki-client