Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: WJFEJGtg2Z1j8covQ39ucMzyB4ylPHp6Y1TqEVfXbFQ=
Subject key identifier: 78:8C:5E:97:E8:F4:8C:AF:01:BD:1B:7C:53:5D:57:36:EC:36:0A:9C
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 01958CCE6AD0EEAB1A1412F60A8324685EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 0379
Signing time: Thu 13 Mar 2025 00:01:32 +0000
Manifest this update: Thu 13 Mar 2025 00:01:32 +0000
Manifest next update: Fri 14 Mar 2025 00:01:32 +0000
Files and hashes: 1: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: eqpAQu/Ry6+AL13QBJu22e6GIpYMvZzdeNadPk8g07Y=)
2: nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa (hash: 8HytWsFdzKFviKTtfyGmrk77Cg5YhpoczU6o9u5sUno=)
3: qxkGe1Ztq8AC8Xy-vkslbb-4Yjc.roa (hash: Vk6as9yIInb4okYrwyyw/9HVRxpOcsbPGA6Y1uEJnuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:6a:d0:ee:ab:1a:14:12:f6:0a:83:24:68:5e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Mar 13 00:01:32 2025 GMT
Not After : Mar 14 00:01:32 2025 GMT
Subject: CN=788c5e97e8f48caf01bd1b7c535d5736ec360a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:31:62:30:21:bd:27:e3:48:e1:78:5d:74:48:
ca:e9:9b:a8:8a:e6:ec:b8:c6:c4:f8:54:f9:17:f7:
53:82:51:2f:4c:99:fb:e0:9e:83:cc:b5:f2:6c:cd:
52:e5:1b:e8:8c:56:bd:d4:9c:30:21:e4:1e:ea:b9:
a7:74:ed:d5:25:ea:5a:e3:02:5a:b0:8c:65:01:34:
d0:5b:89:0c:16:89:e8:bc:a5:6d:f3:22:55:63:0e:
d0:b9:f9:44:af:a9:fa:59:41:1c:f5:9c:e1:db:ee:
86:44:d2:41:34:c9:26:f3:7c:30:e8:59:24:66:33:
ab:5b:92:90:68:32:0b:d1:d0:83:ec:8c:18:8b:18:
f4:5b:72:8a:a0:e1:ad:75:67:dd:6a:92:29:bd:4e:
f5:6f:42:3c:fb:78:44:f8:5a:5d:29:6f:1d:fe:6c:
f5:d4:6b:8f:48:3e:15:15:e9:04:ab:dc:12:57:9c:
10:cf:98:f1:68:4d:67:53:14:de:ab:be:1d:09:a7:
6e:69:71:6d:83:7e:0a:08:dd:89:a8:30:4d:8c:97:
d9:78:1a:1f:22:1d:df:5a:28:72:f5:1e:e5:54:e5:
09:d5:bd:ec:a1:9e:51:7b:88:b4:10:29:49:0d:17:
91:73:50:4d:58:29:7d:58:43:7e:40:db:ad:e5:d5:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8C:5E:97:E8:F4:8C:AF:01:BD:1B:7C:53:5D:57:36:EC:36:0A:9C
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:51:85:9a:e0:ef:d4:4e:cb:e5:5e:d8:6f:db:20:56:cb:de:
ac:74:d9:72:2c:1e:e1:82:fe:58:91:3e:a4:df:b4:9e:4b:de:
4f:f2:16:99:48:09:24:be:29:0a:a9:18:e6:c8:14:a7:0a:e2:
90:ea:92:32:24:87:29:36:e7:ec:b9:b9:b8:82:3d:04:c8:9e:
02:49:33:f2:bc:30:b0:95:7e:5e:b4:0c:e8:46:fe:fd:f1:5d:
80:7d:4f:43:d4:67:5b:28:46:30:45:83:b0:01:7b:44:0b:55:
28:8d:2d:31:a2:8b:99:1c:2c:10:49:38:e7:60:3a:5a:9f:ee:
0b:84:92:5b:f7:11:c0:3b:54:7b:cb:e3:cd:9b:3d:34:37:9a:
90:4d:f5:c1:af:1a:21:b7:2a:2b:a5:f9:23:37:34:44:f0:1e:
06:72:db:6b:05:78:d4:45:23:e0:ff:cd:b1:d3:ee:70:5b:8c:
76:7d:6c:db:ed:3f:20:32:f3:23:0e:09:eb:8e:e5:13:8a:b3:
c7:d8:31:b3:d0:ad:5a:b8:ff:7d:3b:92:7d:2e:c9:c0:06:77:
39:bb:46:38:f5:79:4b:53:cc:42:ef:05:af:f6:e3:c1:cb:aa:
f2:65:fe:8b:29:04:df:a5:60:0b:6d:cb:9c:78:64:70:e1:b7:
36:eb:40:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMzmrQ7qsaFBL2CoMkaF6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDc1YzkyMDI2MDZlNjY2N2U5NGE3NzllOTAzZGI2OTdh
NTkwMjUwHhcNMjUwMzEzMDAwMTMyWhcNMjUwMzE0MDAwMTMyWjAzMTEwLwYDVQQD
Eyg3ODhjNWU5N2U4ZjQ4Y2FmMDFiZDFiN2M1MzVkNTczNmVjMzYwYTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDFiMCG9J+NI4XhddEjK6Zuoiubs
uMbE+FT5F/dTglEvTJn74J6DzLXybM1S5RvojFa91JwwIeQe6rmndO3VJepa4wJa
sIxlATTQW4kMFonovKVt8yJVYw7QuflEr6n6WUEc9Zzh2+6GRNJBNMkm83ww6Fkk
ZjOrW5KQaDIL0dCD7IwYixj0W3KKoOGtdWfdapIpvU71b0I8+3hE+FpdKW8d/mz1
1GuPSD4VFekEq9wSV5wQz5jxaE1nUxTeq74dCaduaXFtg34KCN2JqDBNjJfZeBof
Ih3fWihy9R7lVOUJ1b3soZ5Re4i0EClJDReRc1BNWCl9WEN+QNut5dX7WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiMXpfo9IyvAb0bfFNdVzbsNgqcMB8GA1UdIwQY
MBaAFJ5HXJICYG5mZ+lKd56QPbaXpZAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAt
Y2NiYjZlOTBhMTliLzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAtY2NiYjZlOTBhMTli
LzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClGFmuDv
1E7L5V7Yb9sgVsverHTZciwe4YL+WJE+pN+0nkveT/IWmUgJJL4pCqkY5sgUpwri
kOqSMiSHKTbn7Lm5uII9BMieAkkz8rwwsJV+XrQM6Eb+/fFdgH1PQ9RnWyhGMEWD
sAF7RAtVKI0tMaKLmRwsEEk452A6Wp/uC4SSW/cRwDtUe8vjzZs9NDeakE31wa8a
IbcqK6X5Izc0RPAeBnLbawV41EUj4P/NsdPucFuMdn1s2+0/IDLzIw4J647lE4qz
x9gxs9CtWrj/fTuSfS7JwAZ3ObtGOPV5S1PMQu8Fr/bjwcuq8mX+iykE36VgC23L
nHhkcOG3NutAAw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:24 2025 by rpki-client