Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: UoI0sErzvZGLjECQQvn5XyJ8poA2DGzEgGZ72z2rt4k=
Subject key identifier: BD:53:A1:43:F8:D3:99:26:B1:2D:E7:BB:DE:2D:9A:A6:AA:42:CC:00
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 01965801B09A99D85A63D2259C4022D8F051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 0CB7
Signing time: Mon 21 Apr 2025 11:00:27 +0000
Manifest this update: Mon 21 Apr 2025 11:00:27 +0000
Manifest next update: Tue 22 Apr 2025 11:00:27 +0000
Files and hashes: 1: 0MrgjigrDPt6rPegZME8cXiUORo.roa (hash: 7glCaQ9Yvpvmun3d90ogrApzDsZCqJLUsDw/+14dTgE=)
2: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: EtCHCSwkMsE7O9akH6puAD8rJTREWS+Xjsp2izhiOyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:b0:9a:99:d8:5a:63:d2:25:9c:40:22:d8:f0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Apr 21 11:00:27 2025 GMT
Not After : Apr 22 11:00:27 2025 GMT
Subject: CN=bd53a143f8d39926b12de7bbde2d9aa6aa42cc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:b0:02:f6:36:0f:27:18:cc:65:ef:6d:a6:
ad:b1:9d:57:ff:01:29:20:e0:52:d9:da:24:6e:54:
f3:70:8d:19:50:47:8d:fc:a9:37:6a:dc:69:09:97:
44:a8:5c:99:82:8b:cd:d6:4f:b2:96:66:dd:b2:ac:
74:ae:f4:62:d8:43:2c:0e:1f:54:e5:e4:f9:a7:7f:
6d:3d:d2:64:65:68:31:82:05:25:bf:a4:50:58:84:
c6:a6:f3:fd:c8:23:ef:e3:a0:7c:b2:37:be:9a:a2:
41:d8:02:b9:ea:c2:49:7f:05:0d:05:a5:94:da:0f:
15:bd:18:91:94:ad:8b:d4:06:d9:56:37:e4:91:c4:
33:80:fa:66:d3:6f:9a:ad:25:40:3b:30:ab:10:5a:
da:ca:69:1b:3c:6e:dd:f6:c9:60:5e:4b:66:e4:e7:
d5:eb:5a:c5:a9:4d:d1:6b:b2:1d:1c:13:b0:ee:e8:
ad:cd:0c:21:34:1f:53:32:b1:21:fe:31:4b:c3:bb:
83:4b:db:55:eb:f8:04:28:f1:de:cb:14:0d:ca:5a:
6f:8c:2a:41:3a:ca:49:ad:f6:7d:d7:f4:e6:80:2a:
43:58:da:a5:d6:f7:77:0b:67:ad:eb:93:83:b8:30:
57:af:89:d3:32:d4:8e:11:ec:8e:ee:85:a1:93:6f:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:53:A1:43:F8:D3:99:26:B1:2D:E7:BB:DE:2D:9A:A6:AA:42:CC:00
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c2:ee:05:c9:47:c2:8a:bc:1e:d2:66:ca:fd:70:01:7b:00:
fd:22:b9:de:e3:a6:ff:8e:08:ca:2e:bf:e5:10:e2:f4:8f:3a:
58:b2:41:f4:49:7c:19:73:f5:7a:e0:f8:ba:5c:0b:48:ae:25:
35:42:bc:9c:d7:ee:34:a9:10:4e:9d:38:e7:af:c2:52:da:c2:
66:ed:83:9e:5b:92:ca:c5:37:3b:b6:37:fe:aa:53:5f:75:79:
29:a9:b8:1e:84:5f:ac:da:ab:17:ce:83:51:bf:1c:26:80:ee:
b5:30:98:df:20:ed:34:d0:73:8b:80:1c:40:28:9a:cc:db:9e:
35:ad:7a:fa:e8:62:7d:fc:d1:90:5e:a2:be:d7:db:37:aa:69:
80:89:90:72:3e:15:e3:9d:e0:27:da:47:47:11:36:00:9d:e8:
2e:25:6c:05:26:a9:85:ec:a1:9e:ca:ca:15:25:88:5c:f8:98:
58:9f:26:70:bc:3d:55:ae:97:84:d5:13:27:de:63:e6:43:7a:
cd:ef:3d:68:b3:cf:e3:6b:08:e2:de:57:37:e4:46:5b:4e:b7:
c8:91:76:e1:30:62:42:78:14:28:0b:2c:d8:60:76:5b:18:01:
9c:a3:74:87:df:e7:26:4d:ca:18:7f:26:e4:44:6f:5d:5f:01:
b6:d1:40:fb
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZYAbCamdhaY9IlnEAi2PBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDcyMTNmMzU4NWI3MTEyZGZmMGNiNDNjMTkyYjFjYWYz
MDdkMTgwHhcNMjUwNDIxMTEwMDI3WhcNMjUwNDIyMTEwMDI3WjAzMTEwLwYDVQQD
EyhiZDUzYTE0M2Y4ZDM5OTI2YjEyZGU3YmJkZTJkOWFhNmFhNDJjYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkywAvY2DycYzGXvbaatsZ1X/wEp
IOBS2dokblTzcI0ZUEeN/Kk3atxpCZdEqFyZgovN1k+ylmbdsqx0rvRi2EMsDh9U
5eT5p39tPdJkZWgxggUlv6RQWITGpvP9yCPv46B8sje+mqJB2AK56sJJfwUNBaWU
2g8VvRiRlK2L1AbZVjfkkcQzgPpm02+arSVAOzCrEFraymkbPG7d9slgXktm5OfV
61rFqU3Ra7IdHBOw7uitzQwhNB9TMrEh/jFLw7uDS9tV6/gEKPHeyxQNylpvjCpB
OspJrfZ91/TmgCpDWNql1vd3C2et65ODuDBXr4nTMtSOEeyO7oWhk29H9QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFL1ToUP405kmsS3nu94tmqaqQswAMB8GA1UdIwQY
MBaAFPjXIT81hbcRLf8MtDwZKxyvMH0YMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OY2hQeldGdHhFdF93eTBQQmtySEs4d2ZSZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNDk1M2VlLTkxMGYtNGI4ZS1iNDY0
LTI2NTBlZGQzMDEzZi8xLzEtTmNoUHpXRnR4RXRfd3kwUEJrckhLOHdmUmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk5LzQ5NTNlZS05MTBmLTRiOGUtYjQ2NC0yNjUwZWRkMzAx
M2YvMS8xLU5jaFB6V0Z0eEV0X3d5MFBCa3JISzh3ZlJnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisLu
BclHwoq8HtJmyv1wAXsA/SK53uOm/44Iyi6/5RDi9I86WLJB9El8GXP1euD4ulwL
SK4lNUK8nNfuNKkQTp0456/CUtrCZu2DnluSysU3O7Y3/qpTX3V5Kam4HoRfrNqr
F86DUb8cJoDutTCY3yDtNNBzi4AcQCiazNueNa16+uhiffzRkF6ivtfbN6ppgImQ
cj4V453gJ9pHRxE2AJ3oLiVsBSapheyhnsrKFSWIXPiYWJ8mcLw9Va6XhNUTJ95j
5kN6ze89aLPP42sI4t5XN+RGW063yJF24TBiQngUKAss2GB2WxgBnKN0h9/nJk3K
GH8m5ERvXV8BttFA+w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:29:59 2025 by rpki-client