Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: 94qMYeXMRp94kP0CQLgILVuFuTkSktvjebiMBAeTz5g=
Subject key identifier: AC:32:93:A6:B9:6C:74:DE:86:40:1A:5C:06:41:BD:7C:54:FC:5C:DA
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 0196606005541548715912675F5604699929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 0555
Signing time: Wed 23 Apr 2025 02:00:27 +0000
Manifest this update: Wed 23 Apr 2025 02:00:27 +0000
Manifest next update: Thu 24 Apr 2025 02:00:27 +0000
Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=)
2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: jT+pwknKVCFfElNRHlkArs1QIfvYqmHYL9WhJsuTLw4=)
3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:60:05:54:15:48:71:59:12:67:5f:56:04:69:99:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Apr 23 02:00:27 2025 GMT
Not After : Apr 24 02:00:27 2025 GMT
Subject: CN=ac3293a6b96c74de86401a5c0641bd7c54fc5cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d2:d1:b8:47:28:3d:11:35:7b:ff:01:75:bd:
50:f2:66:b8:62:c9:c4:45:73:13:8a:56:87:71:b9:
e0:fe:83:4f:c0:d5:23:35:c4:00:74:a9:41:24:71:
45:61:7d:c6:e7:88:d3:70:60:3b:5a:f5:c7:17:fd:
c0:4e:ef:98:44:74:46:e4:1a:fe:fe:c1:c7:56:e9:
2f:59:0f:bb:31:52:ee:c4:71:fb:71:a1:ab:ed:96:
92:31:bd:ec:50:ed:f2:b4:f4:db:d8:70:c8:b8:38:
4b:da:30:51:1a:b5:41:74:48:8e:e5:a7:12:b0:32:
06:70:37:6f:e3:46:e8:33:78:89:d4:ed:38:3b:d6:
21:d8:4e:6d:d0:b3:25:52:2c:10:39:71:d0:a8:2a:
60:a1:ed:68:14:e1:72:34:3b:69:e1:e5:17:ae:ca:
19:45:7a:7f:12:e9:e0:34:cf:2a:c2:20:28:2e:26:
c2:e8:4d:56:64:77:3f:45:0d:1f:b6:10:0a:05:d8:
50:06:3a:78:c4:8d:8b:7a:98:91:99:c3:d5:86:67:
ab:9b:ac:18:10:0f:2c:ab:2b:d2:ec:92:cc:0d:13:
59:14:d9:a8:96:58:a3:2d:87:4f:ad:56:cf:fc:bd:
87:57:26:c6:c9:cb:21:b5:e4:4c:d6:14:2d:cf:8a:
74:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:32:93:A6:B9:6C:74:DE:86:40:1A:5C:06:41:BD:7C:54:FC:5C:DA
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3f:33:42:79:49:81:c6:32:6c:97:f0:6a:28:3a:71:86:eb:
52:97:7a:ea:cc:37:1c:c6:c7:91:ee:9d:46:ce:2a:e0:d6:19:
1a:c1:c0:a8:64:80:5e:66:7d:d4:d6:a1:80:fa:7a:65:02:8b:
4c:57:64:ff:d8:e0:9c:6b:05:9e:2a:61:15:bf:4a:b2:b4:e7:
99:7a:f4:da:2a:19:20:24:be:4e:ba:0e:21:f1:c1:1d:90:ce:
68:67:84:6f:8a:76:28:d2:4d:21:8b:0e:3a:2d:90:21:ff:48:
b6:93:f6:15:de:da:22:f7:0b:91:34:39:8a:e3:23:61:70:71:
49:2e:1f:4b:fe:ca:54:fc:b0:c2:4d:ec:6e:90:ab:cf:b3:d0:
2d:55:5f:ca:cb:1b:5f:81:3b:24:5b:c2:db:15:b0:ef:67:06:
70:29:1f:ac:82:a8:05:c3:25:0f:dc:a9:6e:dc:55:78:08:35:
78:22:cf:97:f2:06:70:53:60:16:ad:35:ee:2e:14:2b:17:b6:
60:c6:28:21:d7:1e:14:3c:ae:f3:bc:37:fc:a7:5c:bf:06:57:
4a:01:23:cf:cf:fd:40:e0:2d:41:be:7f:8b:c2:44:0a:ca:97:
d5:e5:28:76:69:07:0e:0e:65:2c:7c:40:a3:7e:ef:29:bd:26:
2e:46:65:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZgYAVUFUhxWRJnX1YEaZkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjMxNDNhMmU3M2YyMDllNjlkOTdjNGI4Zjc4Y2RhNWY0
MzcwMDUwHhcNMjUwNDIzMDIwMDI3WhcNMjUwNDI0MDIwMDI3WjAzMTEwLwYDVQQD
EyhhYzMyOTNhNmI5NmM3NGRlODY0MDFhNWMwNjQxYmQ3YzU0ZmM1Y2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dLRuEcoPRE1e/8Bdb1Q8ma4YsnE
RXMTilaHcbng/oNPwNUjNcQAdKlBJHFFYX3G54jTcGA7WvXHF/3ATu+YRHRG5Br+
/sHHVukvWQ+7MVLuxHH7caGr7ZaSMb3sUO3ytPTb2HDIuDhL2jBRGrVBdEiO5acS
sDIGcDdv40boM3iJ1O04O9Yh2E5t0LMlUiwQOXHQqCpgoe1oFOFyNDtp4eUXrsoZ
RXp/EungNM8qwiAoLibC6E1WZHc/RQ0fthAKBdhQBjp4xI2LepiRmcPVhmerm6wY
EA8sqyvS7JLMDRNZFNmollijLYdPrVbP/L2HVybGycshteRM1hQtz4p05QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwyk6a5bHTehkAaXAZBvXxU/FzaMB8GA1UdIwQY
MBaAFJ6zFDouc/IJ5p2XxLj3jNpfQ3AFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYt
NTAxNjE4NDExYzc2LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYtNTAxNjE4NDExYzc2
LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvT8zQnlJ
gcYybJfwaig6cYbrUpd66sw3HMbHke6dRs4q4NYZGsHAqGSAXmZ91NahgPp6ZQKL
TFdk/9jgnGsFniphFb9KsrTnmXr02ioZICS+TroOIfHBHZDOaGeEb4p2KNJNIYsO
Oi2QIf9ItpP2Fd7aIvcLkTQ5iuMjYXBxSS4fS/7KVPywwk3sbpCrz7PQLVVfyssb
X4E7JFvC2xWw72cGcCkfrIKoBcMlD9ypbtxVeAg1eCLPl/IGcFNgFq017i4UKxe2
YMYoIdceFDyu87w3/KdcvwZXSgEjz8/9QOAtQb5/i8JECsqX1eUodmkHDg5lLHxA
o37vKb0mLkZl5w==
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:20:16 2025 by rpki-client