Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
File: nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft (raw, json)
Hash identifier: yJ/LgaCu57YwEyZMN+TiCkIpyzcNbkc+X4XZmXC1Hm0=
Subject key identifier: 99:03:01:AE:6F:74:C3:F0:1C:CC:54:69:69:63:7A:E1:41:02:16:6D
Authority key identifier: 9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
Certificate issuer: /CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Certificate serial: 0197481E9ACC8FA45011838538D4C7C2B7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
Manifest number: 1472
Signing time: Sat 07 Jun 2025 02:00:54 +0000
Manifest this update: Sat 07 Jun 2025 02:00:54 +0000
Manifest next update: Sun 08 Jun 2025 02:00:54 +0000
Files and hashes: 1: D2puN1AdZ1JNvFyB30_yGN8jQe0.roa (hash: 2k+YekT8y6pWHIhQMm8Q342e5tW1eRByVypogLnX8G0=)
2: U_LNSvlDlkkr0YEu8loP_N3lVG8.roa (hash: sfDFxTDzQkmKbFdSJOmY1OQKmiVJ1hkpwWXjIhD3ogw=)
3: nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl (hash: 6HK8wBGUeau6KvI/hx4Q9KkH/wLHeMWXmUFaAtckXOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:9a:cc:8f:a4:50:11:83:85:38:d4:c7:c2:b7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c28a6ed0f5cfce772d5ce5b03bb42932c8a64d0
Validity
Not Before: Jun 7 02:00:54 2025 GMT
Not After : Jun 8 02:00:54 2025 GMT
Subject: CN=990301ae6f74c3f01ccc546969637ae14102166d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:a8:4d:ba:06:9d:21:0e:57:82:f3:3c:fe:
e4:fb:09:f8:4e:0f:05:30:b8:c7:c7:0d:68:69:be:
2d:65:2d:fa:68:20:5f:91:7e:94:83:75:93:19:26:
97:07:42:a2:65:2c:d7:63:a7:e6:dc:48:39:e6:70:
01:fd:45:98:f1:d7:45:38:66:54:6b:07:a8:f8:7f:
b4:1a:85:42:e2:e9:18:5a:36:ce:18:83:ea:fd:9e:
35:4c:dc:7a:bb:d0:af:e4:50:6c:67:5f:01:ed:bc:
2b:f9:f5:28:6a:a8:77:2a:bf:84:d0:c1:f9:38:b5:
d4:a7:6f:64:8f:29:13:f4:02:eb:94:80:d7:3f:4d:
79:06:ac:bd:20:b3:d5:97:6d:5f:1f:32:3b:9e:3f:
d9:e6:16:d2:46:40:92:c7:ce:4b:4e:5b:97:7e:2f:
c3:5e:5a:d8:c0:e6:c0:04:73:ab:53:8c:4a:a0:db:
9a:52:0c:d6:8f:a4:4c:e4:c2:79:e5:36:55:eb:2c:
aa:23:54:80:38:af:11:08:82:e5:e5:80:b7:aa:c3:
71:c3:3b:36:a0:0f:25:82:15:fb:2c:24:50:31:7e:
8e:a7:eb:04:41:cd:27:74:c2:7f:50:4f:6f:ee:37:
2e:f1:9a:02:95:01:c3:80:e6:fe:e6:33:2a:fb:80:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:01:AE:6F:74:C3:F0:1C:CC:54:69:69:63:7A:E1:41:02:16:6D
X509v3 Authority Key Identifier:
keyid:9C:28:A6:ED:0F:5C:FC:E7:72:D5:CE:5B:03:BB:42:93:2C:8A:64:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCim7Q9c_Ody1c5bA7tCkyyKZNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/73e52f-42e3-4a31-9736-a6b7600871a6/1/nCim7Q9c_Ody1c5bA7tCkyyKZNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:dd:4d:14:d4:da:f0:2a:52:d7:fb:c7:c2:1c:91:09:25:12:
79:2d:5d:d0:58:82:46:5c:a7:41:7c:57:ba:87:7b:5f:1a:3c:
45:60:56:57:68:e6:2f:58:f2:83:3f:c1:e4:2d:9a:af:0f:a1:
19:9f:b4:d1:11:4c:1c:bf:b2:1b:28:55:34:dd:1e:89:09:2d:
36:16:3a:b5:71:c8:57:de:f4:fd:39:d6:77:75:a0:b2:19:39:
3b:ea:d1:9b:2e:fd:7e:32:3b:ae:12:b7:86:b5:ff:5c:1e:11:
59:64:f5:9f:55:4b:3e:a4:41:51:97:2c:ac:f2:2c:66:b6:54:
d3:21:2c:5e:08:26:31:68:f1:ac:ba:dc:90:8b:4d:bc:96:9d:
ee:02:69:f7:3e:e2:9e:85:0a:5c:25:6b:83:9d:98:c2:22:a6:
83:8a:3e:a2:fe:8d:88:18:92:81:1e:98:c4:50:ae:14:d5:6e:
0f:5f:46:cf:83:f8:df:fd:73:5d:ae:85:d4:9b:37:14:2c:aa:
fa:85:37:72:3c:09:71:94:bc:34:f3:9d:15:f7:da:2d:96:2a:
69:06:cd:a4:45:e3:3e:44:fa:ce:b2:e0:46:7d:e5:ef:d0:e7:
66:2b:f7:7c:0d:d4:05:52:8b:35:77:20:ed:5c:c0:11:57:13:
b2:61:48:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHprMj6RQEYOFONTHwrfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMjhhNmVkMGY1Y2ZjZTc3MmQ1Y2U1YjAzYmI0MjkzMmM4
YTY0ZDAwHhcNMjUwNjA3MDIwMDU0WhcNMjUwNjA4MDIwMDU0WjAzMTEwLwYDVQQD
Eyg5OTAzMDFhZTZmNzRjM2YwMWNjYzU0Njk2OTYzN2FlMTQxMDIxNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5ioTboGnSEOV4LzPP7k+wn4Tg8F
MLjHxw1oab4tZS36aCBfkX6Ug3WTGSaXB0KiZSzXY6fm3Eg55nAB/UWY8ddFOGZU
aweo+H+0GoVC4ukYWjbOGIPq/Z41TNx6u9Cv5FBsZ18B7bwr+fUoaqh3Kr+E0MH5
OLXUp29kjykT9ALrlIDXP015Bqy9ILPVl21fHzI7nj/Z5hbSRkCSx85LTluXfi/D
XlrYwObABHOrU4xKoNuaUgzWj6RM5MJ55TZV6yyqI1SAOK8RCILl5YC3qsNxwzs2
oA8lghX7LCRQMX6Op+sEQc0ndMJ/UE9v7jcu8ZoClQHDgOb+5jMq+4A1/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkDAa5vdMPwHMxUaWljeuFBAhZtMB8GA1UdIwQY
MBaAFJwopu0PXPznctXOWwO7QpMsimTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkNpbTdROWNfT2R5MWM1YkE3dENreXlLWk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83M2U1MmYtNDJlMy00YTMxLTk3MzYt
YTZiNzYwMDg3MWE2LzEvbkNpbTdROWNfT2R5MWM1YkE3dENreXlLWk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83M2U1MmYtNDJlMy00YTMxLTk3MzYtYTZiNzYwMDg3MWE2
LzEvbkNpbTdROWNfT2R5MWM1YkE3dENreXlLWk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKd1NFNTa
8CpS1/vHwhyRCSUSeS1d0FiCRlynQXxXuod7Xxo8RWBWV2jmL1jygz/B5C2arw+h
GZ+00RFMHL+yGyhVNN0eiQktNhY6tXHIV970/TnWd3Wgshk5O+rRmy79fjI7rhK3
hrX/XB4RWWT1n1VLPqRBUZcsrPIsZrZU0yEsXggmMWjxrLrckItNvJad7gJp9z7i
noUKXCVrg52YwiKmg4o+ov6NiBiSgR6YxFCuFNVuD19Gz4P43/1zXa6F1Js3FCyq
+oU3cjwJcZS8NPOdFffaLZYqaQbNpEXjPkT6zrLgRn3l79DnZiv3fA3UBVKLNXcg
7VzAEVcTsmFI7w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:16 2025 by rpki-client