Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
File: nmh1g4EMwAZO207-QFf1phpV5ws.mft (raw, json)
Hash identifier: e1B9eq8PNblQWUPXqIWnUC0pBqmLXrgvHUjhq5rSxmU=
Subject key identifier: D4:2C:F5:2D:37:0A:2B:66:9B:5F:83:39:6A:78:E6:F0:76:FD:46:B6
Authority key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
Certificate issuer: /CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Certificate serial: 019648213142945C5DBDCB0DB001FB734660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
Manifest number: 03CC
Signing time: Fri 18 Apr 2025 09:00:56 +0000
Manifest this update: Fri 18 Apr 2025 09:00:56 +0000
Manifest next update: Sat 19 Apr 2025 09:00:56 +0000
Files and hashes: 1: nmh1g4EMwAZO207-QFf1phpV5ws.crl (hash: RgNuPx0nMBxLiJDWpucnuOvDU2ql8/JavLpGlVaX+3M=)
2: qw-aF3yIkt-72WfpE7ETeHkvHMU.roa (hash: 3nZH1KB8lozx5AtSdJomkLmrFoDBz1VyVSOmQdHc1wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:21:31:42:94:5c:5d:bd:cb:0d:b0:01:fb:73:46:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Validity
Not Before: Apr 18 09:00:56 2025 GMT
Not After : Apr 19 09:00:56 2025 GMT
Subject: CN=d42cf52d370a2b669b5f83396a78e6f076fd46b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:b9:d9:5f:25:9e:81:15:23:81:fb:66:05:
6a:19:ae:e2:3b:e1:a8:f0:11:a6:f2:24:b9:1b:09:
fc:5c:95:dc:6f:f7:7b:61:f4:e7:c4:97:8b:83:05:
f3:1e:fb:53:bb:dc:57:c0:58:a4:2d:1c:a5:79:55:
39:48:59:4f:aa:66:80:a6:22:16:0a:dc:21:24:d0:
41:76:39:d8:0d:56:22:2d:5d:96:e5:09:24:7f:d7:
f7:fc:8d:d8:27:a0:c8:98:77:ea:91:4c:d2:cb:a0:
35:8f:c1:bc:67:86:73:f5:e8:79:53:81:72:6f:2c:
19:3b:97:4b:9d:0f:70:04:f1:9d:0c:a6:8f:3d:05:
65:e7:06:79:d1:5a:4e:83:7f:0f:a6:b2:4d:1d:5e:
31:62:33:4a:ee:a2:a1:60:6b:a5:e6:0b:b6:df:35:
43:40:8f:d9:4c:12:3c:13:52:c2:67:c8:80:69:e7:
c8:d4:4e:fc:31:74:de:b9:93:91:1c:a8:3a:e2:5d:
86:4d:0d:5d:3e:3e:dc:b9:64:b3:6d:4b:1a:59:3c:
a7:65:ae:c5:d7:6e:4c:1b:ec:36:3c:de:7e:c3:97:
e8:4a:dd:c0:1e:94:a1:5f:82:4f:1f:41:2a:e1:e2:
4a:cf:b6:f3:db:28:7b:9b:07:9c:97:9b:87:2e:24:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2C:F5:2D:37:0A:2B:66:9B:5F:83:39:6A:78:E6:F0:76:FD:46:B6
X509v3 Authority Key Identifier:
keyid:9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:62:a3:e1:4c:06:4b:75:4a:b8:fc:d2:88:dc:02:68:6a:0c:
14:8d:9e:6a:b0:03:23:6b:80:c9:27:98:25:7a:15:23:49:55:
68:42:ae:8d:96:db:15:50:d8:ce:84:c3:cb:9d:ad:59:64:ed:
27:20:67:ce:9c:9d:64:ca:16:a1:e2:29:69:3a:81:46:eb:3b:
1c:f0:98:e7:b9:3e:06:44:c0:b4:ef:56:f7:0d:f0:c1:bb:d7:
08:12:60:97:0c:e6:fd:6a:ce:71:de:17:8c:da:65:7d:95:75:
2f:b5:11:76:63:3e:f7:22:d5:da:6e:4d:8c:6d:2a:ea:94:b9:
e2:d7:21:2a:1a:ca:90:34:30:6a:af:b5:24:d8:05:cf:18:53:
48:49:b4:60:9f:37:85:b3:2d:c5:cb:19:bf:08:98:0a:95:cd:
fc:6d:fc:23:63:b7:92:05:6c:fa:89:47:b0:70:09:e7:a2:01:
a0:30:87:7c:a8:82:a8:36:89:b3:9e:3e:58:73:c0:c0:ad:3c:
23:eb:61:d5:4a:59:72:cc:2b:75:a5:4a:17:1a:fb:b2:90:47:
ae:83:09:44:f1:26:76:65:71:c7:de:14:07:3f:38:59:25:49:
86:36:85:61:2a:70:3a:60:29:28:7f:be:f7:57:7b:e7:a2:7b:
2c:df:83:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIITFClFxdvcsNsAH7c0ZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjg3NTgzODEwY2MwMDY0ZWRiNGVmZTQwNTdmNWE2MWE1
NWU3MGIwHhcNMjUwNDE4MDkwMDU2WhcNMjUwNDE5MDkwMDU2WjAzMTEwLwYDVQQD
EyhkNDJjZjUyZDM3MGEyYjY2OWI1ZjgzMzk2YTc4ZTZmMDc2ZmQ0NmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx252V8lnoEVI4H7ZgVqGa7iO+Go
8BGm8iS5Gwn8XJXcb/d7YfTnxJeLgwXzHvtTu9xXwFikLRyleVU5SFlPqmaApiIW
CtwhJNBBdjnYDVYiLV2W5Qkkf9f3/I3YJ6DImHfqkUzSy6A1j8G8Z4Zz9eh5U4Fy
bywZO5dLnQ9wBPGdDKaPPQVl5wZ50VpOg38PprJNHV4xYjNK7qKhYGul5gu23zVD
QI/ZTBI8E1LCZ8iAaefI1E78MXTeuZORHKg64l2GTQ1dPj7cuWSzbUsaWTynZa7F
125MG+w2PN5+w5foSt3AHpShX4JPH0Eq4eJKz7bz2yh7mwecl5uHLiRgZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQs9S03Citmm1+DOWp45vB2/Ua2MB8GA1UdIwQY
MBaAFJ5odYOBDMAGTttO/kBX9aYaVecLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMt
NjliZTAzN2JmMDc5LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMtNjliZTAzN2JmMDc5
LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6WKj4UwG
S3VKuPzSiNwCaGoMFI2earADI2uAySeYJXoVI0lVaEKujZbbFVDYzoTDy52tWWTt
JyBnzpydZMoWoeIpaTqBRus7HPCY57k+BkTAtO9W9w3wwbvXCBJglwzm/WrOcd4X
jNplfZV1L7URdmM+9yLV2m5NjG0q6pS54tchKhrKkDQwaq+1JNgFzxhTSEm0YJ83
hbMtxcsZvwiYCpXN/G38I2O3kgVs+olHsHAJ56IBoDCHfKiCqDaJs54+WHPAwK08
I+th1UpZcswrdaVKFxr7spBHroMJRPEmdmVxx94UBz84WSVJhjaFYSpwOmApKH++
91d756J7LN+D7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:04:41 2025 by rpki-client