Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File: N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier: hFlocz/lPaKEWA2xNoBNBdCuoLe9IMY3daQrdVqNn/4=
Subject key identifier: 72:AA:D1:41:4E:60:7B:CE:D8:E6:4B:C2:72:66:CF:3E:26:14:DC:41
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer: /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial: 019635E350069C319F1C0D0D1B0FD1E37FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number: 147F
Signing time: Mon 14 Apr 2025 20:00:11 +0000
Manifest this update: Mon 14 Apr 2025 20:00:11 +0000
Manifest next update: Tue 15 Apr 2025 20:00:11 +0000
Files and hashes: 1: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: yQ+SaohPdUf5suTLWqAx6BMtxFeQtxO+AtiwWNldhrw=)
2: UOgjlDZ-hlIE51uRVoyR7KP99NE.roa (hash: 1AY5DsB6GoL7krCLNb7v1DdRQDuAlUbr226PuiYccH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 14:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:e3:50:06:9c:31:9f:1c:0d:0d:1b:0f:d1:e3:7f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
Validity
Not Before: Apr 14 20:00:11 2025 GMT
Not After : Apr 15 20:00:11 2025 GMT
Subject: CN=72aad1414e607bced8e64bc27266cf3e2614dc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:85:21:a6:f7:fd:ef:3c:8f:61:71:89:6d:
b2:7b:8f:ab:1f:59:a2:71:ce:c0:f4:68:a3:74:ca:
0b:31:99:e9:65:f4:32:40:bb:6f:28:03:3c:11:b9:
61:14:7a:9b:59:b0:f2:21:16:56:20:d3:a8:2e:fe:
b0:4e:36:81:90:a8:b6:29:28:af:56:f0:c9:06:8f:
c6:30:b7:7c:5b:b2:f2:fd:e9:2f:0f:fa:35:18:f9:
ec:4f:7a:c3:de:c6:3e:38:fb:5d:38:28:4c:3b:c3:
b0:f9:d3:06:21:51:d9:8d:d6:22:88:f5:44:6b:9f:
8e:8c:63:83:c2:dc:2f:38:58:0a:af:68:7b:d1:0d:
d0:89:13:ed:06:d4:60:ba:07:29:84:35:83:60:f4:
6f:be:55:6e:1f:70:c8:cf:d8:ef:94:73:e5:f1:18:
ba:51:03:43:59:64:ff:d7:3f:ab:be:97:d3:86:d9:
2f:fa:96:b5:48:1e:d9:46:b1:ca:20:c1:11:fa:90:
50:30:9a:24:56:f2:a2:b8:2f:e1:97:7b:51:f9:4f:
7e:55:a9:6b:18:b8:d5:5a:a6:a6:00:0a:bb:2b:e1:
7c:93:5c:75:ca:0d:dd:9f:7e:30:be:2f:68:64:ce:
4b:d4:94:50:46:f1:86:0a:33:5e:33:31:32:0f:88:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AA:D1:41:4E:60:7B:CE:D8:E6:4B:C2:72:66:CF:3E:26:14:DC:41
X509v3 Authority Key Identifier:
keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cd:a6:a7:c9:56:05:39:2f:15:df:17:53:03:2f:a3:c9:6a:
8f:50:f1:d8:72:db:54:9b:38:ce:ac:eb:72:ae:44:32:35:fb:
a5:cb:4a:23:e9:23:97:0b:d9:d4:6e:b6:eb:4d:2f:9c:af:56:
2e:2d:48:35:30:46:95:be:fb:a7:ce:fb:ea:82:96:d1:81:ad:
49:d1:ae:d2:f4:15:82:ff:0e:71:e2:65:f1:42:62:a6:96:c6:
c5:d8:bf:d8:db:c1:22:74:3b:94:b2:0f:b8:11:58:c6:76:a7:
47:2b:2f:e7:82:f4:e6:54:56:a3:a5:ff:c3:12:20:b3:b3:d6:
ce:83:78:23:1a:68:ab:88:57:16:df:23:d8:d6:bf:20:49:3b:
b2:40:af:08:3f:c4:7b:98:62:c0:9c:e0:7d:34:22:95:25:30:
69:38:8e:0b:38:f9:0b:52:d1:93:67:dd:10:a0:15:06:ef:b9:
1a:96:11:e9:87:03:68:73:db:8b:7b:87:58:6a:d6:71:a7:0c:
22:45:5a:be:7d:ea:07:2b:97:00:3e:1a:4a:6d:29:fb:88:78:
11:a1:2e:2c:34:e5:42:87:6d:c2:1b:13:2d:7a:a7:1a:75:93:
90:a7:1d:3b:81:58:8a:7f:0d:1d:b7:5a:33:17:30:b1:11:ee:
11:60:48:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY141AGnDGfHA0NGw/R43/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmY1NWI5NTc0M2E5MTViNzkzZDcyZGU3MWFjOTZjZTYx
OThhOTcwHhcNMjUwNDE0MjAwMDExWhcNMjUwNDE1MjAwMDExWjAzMTEwLwYDVQQD
Eyg3MmFhZDE0MTRlNjA3YmNlZDhlNjRiYzI3MjY2Y2YzZTI2MTRkYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPWFIab3/e88j2FxiW2ye4+rH1mi
cc7A9GijdMoLMZnpZfQyQLtvKAM8EblhFHqbWbDyIRZWINOoLv6wTjaBkKi2KSiv
VvDJBo/GMLd8W7Ly/ekvD/o1GPnsT3rD3sY+OPtdOChMO8Ow+dMGIVHZjdYiiPVE
a5+OjGODwtwvOFgKr2h70Q3QiRPtBtRgugcphDWDYPRvvlVuH3DIz9jvlHPl8Ri6
UQNDWWT/1z+rvpfThtkv+pa1SB7ZRrHKIMER+pBQMJokVvKiuC/hl3tR+U9+Valr
GLjVWqamAAq7K+F8k1x1yg3dn34wvi9oZM5L1JRQRvGGCjNeMzEyD4giqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKq0UFOYHvO2OZLwnJmzz4mFNxBMB8GA1UdIwQY
MBaAFDf/VblXQ6kVt5PXLecayWzmGYqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lMDA1OWYtYjkxMC00YmI3LTkzNDEt
Nzc1MDk3MjI2NWFhLzEvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9lMDA1OWYtYjkxMC00YmI3LTkzNDEtNzc1MDk3MjI2NWFh
LzEvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHc2mp8lW
BTkvFd8XUwMvo8lqj1Dx2HLbVJs4zqzrcq5EMjX7pctKI+kjlwvZ1G62600vnK9W
Li1INTBGlb77p8776oKW0YGtSdGu0vQVgv8OceJl8UJippbGxdi/2NvBInQ7lLIP
uBFYxnanRysv54L05lRWo6X/wxIgs7PWzoN4Ixpoq4hXFt8j2Na/IEk7skCvCD/E
e5hiwJzgfTQilSUwaTiOCzj5C1LRk2fdEKAVBu+5GpYR6YcDaHPbi3uHWGrWcacM
IkVavn3qByuXAD4aSm0p+4h4EaEuLDTlQodtwhsTLXqnGnWTkKcdO4FYin8NHbda
MxcwsRHuEWBI6Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:59:17 2025 by rpki-client