Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json)
Hash identifier: +C/c5RzQIPK7KXBER0rESBNODDIzDCXmVIB8OLdJjM8=
Subject key identifier: 5A:52:82:B5:A2:54:3D:2A:D0:D2:6C:32:DD:C1:71:AC:0F:96:74:98
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 0194BB298793D23FFD49FCA75C3AFD6D09F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
Manifest number: 143C
Signing time: Fri 31 Jan 2025 07:00:48 +0000
Manifest this update: Fri 31 Jan 2025 07:00:48 +0000
Manifest next update: Sat 01 Feb 2025 07:00:48 +0000
Files and hashes: 1: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=)
2: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=)
3: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=)
4: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=)
5: XnV92qRpjzL9NiSlCAMAqCzTy7Q.roa (hash: x5JfgEIqPon//BPacVD49WbjKRdXkuNIT03yD4HKgM8=)
6: Zc78epUkS8U-1FtfX_63z7MoHBM.roa (hash: wP4gUHnjnAKGxxZilLo7m/NopoiQQ/4fltpez27ziD8=)
7: _GnprUL9RiOSINIgt8MCDfPJSj8.roa (hash: Yrrm+IlBuBC0Z/pDmaIlkiimbDJKKuFiMeYQ+bxwX6M=)
8: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=)
9: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: DEb/cT/C4HkAxG04WIIQm1d/6Lgj983/tBGyC9z33ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:87:93:d2:3f:fd:49:fc:a7:5c:3a:fd:6d:09:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 31 07:00:48 2025 GMT
Not After : Feb 1 07:00:48 2025 GMT
Subject: CN=5a5282b5a2543d2ad0d26c32ddc171ac0f967498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:0a:5d:07:76:47:44:9d:c9:53:61:4f:98:
2a:e0:c0:bf:36:78:cb:26:8f:aa:87:5b:b7:e4:c1:
b4:e9:59:6e:f8:a6:07:d8:45:88:6d:c6:b8:2e:72:
bb:4d:d7:36:77:f4:55:34:9f:b5:26:70:d1:da:56:
d5:e0:61:ed:f0:20:f1:8b:24:26:51:4c:db:13:72:
b8:e8:0e:33:4c:ff:cf:77:b9:54:31:a2:2a:88:66:
b5:d2:c2:ac:44:8b:07:b4:f0:f2:32:1a:47:3e:85:
7f:d9:37:98:21:8d:32:94:86:9f:89:d2:05:e0:5b:
76:d6:4b:49:b8:f6:2c:f6:b6:f1:ca:e9:52:7d:de:
89:a0:25:23:7b:ad:71:24:65:e3:f0:32:da:18:c1:
47:f4:93:17:68:07:90:a4:c0:c0:d8:78:f9:5c:4b:
5b:8e:9a:0a:7d:5e:46:28:00:c2:89:b3:a3:fe:5c:
83:44:e1:a9:3d:d8:a7:d5:85:05:19:e9:a4:88:4b:
29:0b:5b:dc:da:d4:f8:06:ed:0b:81:82:21:b9:bf:
fe:1f:6e:2c:3b:f5:b0:86:2f:99:f3:76:00:ac:fb:
6e:87:92:57:3c:7b:a2:38:46:a4:69:11:13:3e:7c:
24:62:af:58:33:b2:9b:e2:db:bf:83:00:d7:85:58:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:52:82:B5:A2:54:3D:2A:D0:D2:6C:32:DD:C1:71:AC:0F:96:74:98
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7c:1f:30:06:bf:45:5b:cb:da:e6:8e:97:15:c3:b3:63:a0:
e5:db:26:76:f5:ec:97:8c:0b:24:d8:3c:62:b5:d6:74:41:f6:
97:74:e7:ec:dd:f5:cb:dd:ef:cd:33:2a:42:b5:7c:d6:a8:e6:
aa:31:b3:cc:1d:58:63:48:b1:d9:54:94:d0:f4:a6:a6:74:8d:
b2:a3:8e:a0:2b:82:6a:d6:32:15:80:37:cc:d1:f0:5e:82:f9:
41:1e:4f:16:68:50:24:7d:b6:6b:ee:e4:e2:97:44:30:18:53:
b5:f8:78:f7:47:73:7b:fd:5f:b2:2a:3a:75:a6:3d:87:19:72:
07:66:b6:15:8c:1d:aa:e2:43:16:f3:f1:0e:57:b1:e9:fc:76:
40:c8:90:12:af:9e:83:7c:8c:29:19:42:72:61:40:ea:ce:59:
c4:5e:4e:9e:0e:67:91:a6:e5:12:30:9e:c9:b5:67:2c:b3:a2:
49:28:50:8d:53:db:3b:6b:6c:9b:45:74:11:2c:05:2b:ff:a5:
3b:c7:f9:9e:4f:94:13:6b:c0:d5:64:70:c6:c2:7e:47:e6:f8:
ef:b9:6b:61:65:e8:37:d6:fd:fc:e0:e8:90:d4:29:f4:76:f1:
cb:1d:46:82:e5:a2:64:21:99:70:89:ec:39:95:d4:55:59:7a:
16:13:ec:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KYeT0j/9SfynXDr9bQn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm
YzQ1ODIwHhcNMjUwMTMxMDcwMDQ4WhcNMjUwMjAxMDcwMDQ4WjAzMTEwLwYDVQQD
Eyg1YTUyODJiNWEyNTQzZDJhZDBkMjZjMzJkZGMxNzFhYzBmOTY3NDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBQKXQd2R0SdyVNhT5gq4MC/NnjL
Jo+qh1u35MG06Vlu+KYH2EWIbca4LnK7Tdc2d/RVNJ+1JnDR2lbV4GHt8CDxiyQm
UUzbE3K46A4zTP/Pd7lUMaIqiGa10sKsRIsHtPDyMhpHPoV/2TeYIY0ylIafidIF
4Ft21ktJuPYs9rbxyulSfd6JoCUje61xJGXj8DLaGMFH9JMXaAeQpMDA2Hj5XEtb
jpoKfV5GKADCibOj/lyDROGpPdin1YUFGemkiEspC1vc2tT4Bu0LgYIhub/+H24s
O/Wwhi+Z83YArPtuh5JXPHuiOEakaRETPnwkYq9YM7Kb4tu/gwDXhVjRQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpSgrWiVD0q0NJsMt3BcawPlnSYMB8GA1UdIwQY
MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt
MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk
LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHwfMAa/
RVvL2uaOlxXDs2Og5dsmdvXsl4wLJNg8YrXWdEH2l3Tn7N31y93vzTMqQrV81qjm
qjGzzB1YY0ix2VSU0PSmpnSNsqOOoCuCatYyFYA3zNHwXoL5QR5PFmhQJH22a+7k
4pdEMBhTtfh490dze/1fsio6daY9hxlyB2a2FYwdquJDFvPxDlex6fx2QMiQEq+e
g3yMKRlCcmFA6s5ZxF5Ong5nkablEjCeybVnLLOiSShQjVPbO2tsm0V0ESwFK/+l
O8f5nk+UE2vA1WRwxsJ+R+b477lrYWXoN9b9/ODokNQp9Hbxyx1GguWiZCGZcIns
OZXUVVl6FhPspg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:29 2025 by rpki-client on console-fra.rpki-client.org