Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
File: nJ4hbtlwrbWem9SinbNcIj1ivJY.mft (raw, json)
Hash identifier: bdWWvpEvBeTKUmZ/t2Lw9KOXaQXusgLYmMeMzFK6pgc=
Subject key identifier: 3D:11:1E:B8:6D:ED:DD:4C:16:CD:BE:3C:4D:01:93:83:F4:06:C3:F4
Authority key identifier: 9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96
Certificate issuer: /CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
Certificate serial: 01965A95276F53960B61E6B8163EA1BC70F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
Manifest number: 0A1D
Signing time: Mon 21 Apr 2025 23:00:46 +0000
Manifest this update: Mon 21 Apr 2025 23:00:46 +0000
Manifest next update: Tue 22 Apr 2025 23:00:46 +0000
Files and hashes: 1: FjLc6iE1HCBUPWs6XDYXgHm0OF4.roa (hash: kIa9UaUqLSZ9J3sHBlTkTWhH3Zl6GZgevA7Dd1AIyEw=)
2: nJ4hbtlwrbWem9SinbNcIj1ivJY.crl (hash: UeE0/zBFMZAfDTtMP4v0qemZvkz20CQK/gC0f5rnXIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:95:27:6f:53:96:0b:61:e6:b8:16:3e:a1:bc:70:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
Validity
Not Before: Apr 21 23:00:46 2025 GMT
Not After : Apr 22 23:00:46 2025 GMT
Subject: CN=3d111eb86deddd4c16cdbe3c4d019383f406c3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:43:3a:d3:0c:d2:e3:22:3f:61:eb:f7:3a:
04:78:43:1f:59:cd:99:90:bb:a8:47:d2:23:e8:4f:
f1:6f:2f:ae:b1:62:19:6b:92:70:f6:59:56:1e:66:
47:bf:74:ed:32:13:12:b3:6b:43:6b:be:a0:62:3d:
74:05:53:f1:56:76:26:84:da:e8:c6:5b:56:c3:e3:
60:69:b2:a1:4c:1c:be:38:88:9e:97:bb:f0:4d:a5:
0c:9d:a2:d8:1c:56:64:55:2f:6a:26:52:4a:69:39:
e1:0d:4f:58:12:57:3c:49:04:a6:f0:d9:21:c5:3d:
b1:57:3a:49:87:57:a5:b1:4d:bd:8f:e0:bd:bf:10:
9c:3b:69:35:0c:56:a0:d2:50:88:19:e3:48:5b:55:
68:e3:fe:95:5a:b2:44:74:78:fd:8b:7f:4e:a8:42:
15:ae:d8:b5:6e:26:19:3a:fa:eb:dc:96:8b:0a:4d:
87:9d:9c:7a:e6:d2:7d:b0:20:8b:52:ea:55:46:0f:
03:18:89:7a:be:15:5e:9c:b5:26:50:3a:d3:c9:38:
00:a3:ed:1b:5f:f9:7b:8f:58:e3:64:9a:2f:8d:95:
f5:84:6e:a4:6d:e0:e7:5a:8d:80:ab:c2:ed:50:46:
ae:9d:2f:2e:bf:e9:03:80:c7:a8:c5:93:a8:64:26:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:11:1E:B8:6D:ED:DD:4C:16:CD:BE:3C:4D:01:93:83:F4:06:C3:F4
X509v3 Authority Key Identifier:
keyid:9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:87:cd:de:33:43:ad:20:46:d7:98:80:53:41:7c:a3:44:5c:
1d:a8:75:ba:60:30:0b:50:d6:ca:e4:e8:56:ca:62:3b:90:74:
74:22:e9:59:a2:1b:8b:65:9c:22:a9:ef:d5:fe:e7:c2:81:fd:
92:5a:13:87:f5:13:f3:46:eb:46:13:04:c0:19:13:af:cf:68:
b7:db:f3:a6:d7:a0:a8:6e:c7:c2:aa:48:66:c3:81:77:bd:50:
84:69:02:a0:ec:a1:67:84:66:c5:61:82:8c:28:87:9c:83:54:
2a:0c:e0:e9:59:09:af:37:60:ab:0f:7d:1d:be:0b:60:95:4d:
29:4f:0d:c3:f9:d3:ec:6d:19:29:9f:f5:03:aa:a9:f0:c8:87:
9f:00:51:e7:08:0a:8f:98:9e:0f:47:71:94:3e:1d:0e:0b:f2:
e3:65:e7:38:19:c6:c5:72:02:61:3c:2f:ac:67:d0:cd:a3:42:
45:f3:39:1f:75:2d:17:7e:b9:ee:67:f4:5e:82:a4:3a:cc:db:
45:34:4a:b8:ab:c8:00:3c:80:69:83:10:9e:47:13:2d:21:22:
0b:b1:69:90:d6:c9:b0:60:9f:13:ed:86:27:e7:d5:b1:cb:99:
91:b8:cd:1a:56:c0:ed:91:d8:ec:be:3a:3a:0e:f6:87:d0:8a:
cc:7f:d1:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZalSdvU5YLYea4Fj6hvHD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOWUyMTZlZDk3MGFkYjU5ZTliZDRhMjlkYjM1YzIyM2Q2
MmJjOTYwHhcNMjUwNDIxMjMwMDQ2WhcNMjUwNDIyMjMwMDQ2WjAzMTEwLwYDVQQD
EygzZDExMWViODZkZWRkZDRjMTZjZGJlM2M0ZDAxOTM4M2Y0MDZjM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3RDOtMM0uMiP2Hr9zoEeEMfWc2Z
kLuoR9Ij6E/xby+usWIZa5Jw9llWHmZHv3TtMhMSs2tDa76gYj10BVPxVnYmhNro
xltWw+NgabKhTBy+OIiel7vwTaUMnaLYHFZkVS9qJlJKaTnhDU9YElc8SQSm8Nkh
xT2xVzpJh1elsU29j+C9vxCcO2k1DFag0lCIGeNIW1Vo4/6VWrJEdHj9i39OqEIV
rti1biYZOvrr3JaLCk2HnZx65tJ9sCCLUupVRg8DGIl6vhVenLUmUDrTyTgAo+0b
X/l7j1jjZJovjZX1hG6kbeDnWo2Aq8LtUEaunS8uv+kDgMeoxZOoZCYHRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0RHrht7d1MFs2+PE0Bk4P0BsP0MB8GA1UdIwQY
MBaAFJyeIW7ZcK21npvUop2zXCI9YryWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbko0aGJ0bHdyYldlbTlTaW5iTmNJajFpdkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNjNmMjgtZTAyOS00NmM4LTgxNWIt
ZWEyNmM1NjQ0NjQwLzEvbko0aGJ0bHdyYldlbTlTaW5iTmNJajFpdkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNjNmMjgtZTAyOS00NmM4LTgxNWItZWEyNmM1NjQ0NjQw
LzEvbko0aGJ0bHdyYldlbTlTaW5iTmNJajFpdkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYfN3jND
rSBG15iAU0F8o0RcHah1umAwC1DWyuToVspiO5B0dCLpWaIbi2WcIqnv1f7nwoH9
kloTh/UT80brRhMEwBkTr89ot9vzptegqG7HwqpIZsOBd71QhGkCoOyhZ4RmxWGC
jCiHnINUKgzg6VkJrzdgqw99Hb4LYJVNKU8Nw/nT7G0ZKZ/1A6qp8MiHnwBR5wgK
j5ieD0dxlD4dDgvy42XnOBnGxXICYTwvrGfQzaNCRfM5H3UtF3657mf0XoKkOszb
RTRKuKvIADyAaYMQnkcTLSEiC7FpkNbJsGCfE+2GJ+fVscuZkbjNGlbA7ZHY7L46
Og72h9CKzH/R1Q==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:21 2025 by rpki-client