Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: iV8qEWhInr+GimiV5iez4/rw9Ulb/A9VA/2+zLzVgmI=
Subject key identifier: D6:38:95:91:1A:3A:0E:57:E0:B6:D5:15:94:65:2D:D3:8C:6C:21:06
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 0194C49A6FB58E16ECF0E9178AA75FC343CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 51
Signing time: Sun 02 Feb 2025 03:00:42 +0000
Manifest this update: Sun 02 Feb 2025 03:00:42 +0000
Manifest next update: Mon 03 Feb 2025 03:00:42 +0000
Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: ft0Bo9SwwWz1tNHAMIo+pn4/GDMu7IGjD8Vf4gMxss0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:6f:b5:8e:16:ec:f0:e9:17:8a:a7:5f:c3:43:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Feb 2 03:00:42 2025 GMT
Not After : Feb 3 03:00:42 2025 GMT
Subject: CN=d63895911a3a0e57e0b6d51594652dd38c6c2106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:92:4c:ab:b3:3f:8c:d2:34:19:e9:3e:85:
d0:4c:07:a4:eb:9b:fc:f6:1a:60:20:8d:01:92:7a:
66:16:77:da:34:0d:3c:01:83:62:4b:ea:ca:c9:41:
53:c3:a6:9e:60:57:48:86:02:51:42:81:0d:01:3c:
8f:6b:10:42:8c:f7:2f:b1:5f:98:0a:99:14:ee:92:
aa:be:41:da:67:72:7d:a1:1f:35:41:7c:18:d9:d9:
11:8c:8c:61:3d:a6:6c:2d:9c:66:2b:09:d9:d8:be:
22:d0:f8:5a:83:a3:dc:8c:cf:25:5a:7c:4f:66:5f:
3c:c8:13:17:6a:61:6b:d7:8d:28:23:91:2c:cf:dd:
f1:ab:0a:79:1b:9f:31:21:80:df:03:36:08:33:46:
1d:da:7a:b8:74:bc:28:2e:c0:0c:97:74:ec:bc:6e:
72:19:9d:3e:ee:c9:6b:04:73:47:10:f7:af:1b:9d:
01:c5:63:56:37:39:c6:87:b9:43:40:55:b2:8c:6d:
f4:a7:c5:c4:2d:19:ac:b8:f3:6a:7b:88:f2:d8:6a:
13:e8:cb:b9:94:5c:60:7c:48:01:50:ab:1e:cf:01:
cc:6d:97:32:2e:7c:c8:a4:ef:38:5d:76:ae:5b:63:
05:1f:2b:29:e8:ee:a2:c5:ca:f8:5b:00:0d:2e:62:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:38:95:91:1A:3A:0E:57:E0:B6:D5:15:94:65:2D:D3:8C:6C:21:06
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c0:b0:9c:42:d3:9c:03:6f:cb:ac:f5:dc:8e:59:ce:4a:e1:
3b:79:02:64:fe:45:6d:bb:8c:64:17:17:3a:70:43:81:2a:f8:
fb:0b:a8:7d:62:dc:17:40:8f:69:ad:42:d9:16:4b:fe:66:be:
24:30:0e:ec:df:69:c1:74:63:a0:37:dd:de:6e:be:f6:f6:a2:
82:c0:a8:55:ca:bb:16:c4:91:e0:eb:04:d4:55:67:7b:e8:c3:
98:d8:94:0c:d1:3f:48:20:72:34:ee:22:ec:28:da:9c:2f:cd:
f6:7f:93:93:67:47:fc:56:49:14:2b:4b:26:20:3b:9e:24:70:
f3:4e:54:e1:d3:09:a0:3e:f2:a6:27:6c:6a:14:19:8d:2f:30:
3f:ea:73:db:d3:f8:04:1e:c1:3f:02:49:40:f8:d9:45:06:60:
c2:27:bd:66:11:e5:30:1c:23:26:bf:ea:be:cf:64:cd:39:02:
7f:7d:cd:60:56:31:28:7d:4e:68:53:66:bd:64:a3:85:ac:fb:
f5:96:15:69:0b:0d:c5:b3:e4:15:2f:91:2b:7b:1f:49:53:9b:
97:0b:0a:e2:f4:d4:67:44:86:9b:0e:f2:a5:7e:d3:31:d0:94:
3d:09:e1:a9:75:50:70:19:37:31:9d:18:91:e7:a1:48:fd:dc:
b5:30:48:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEmm+1jhbs8OkXiqdfw0PNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl
M2U3MzMwHhcNMjUwMjAyMDMwMDQyWhcNMjUwMjAzMDMwMDQyWjAzMTEwLwYDVQQD
EyhkNjM4OTU5MTFhM2EwZTU3ZTBiNmQ1MTU5NDY1MmRkMzhjNmMyMTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEeSTKuzP4zSNBnpPoXQTAek65v8
9hpgII0BknpmFnfaNA08AYNiS+rKyUFTw6aeYFdIhgJRQoENATyPaxBCjPcvsV+Y
CpkU7pKqvkHaZ3J9oR81QXwY2dkRjIxhPaZsLZxmKwnZ2L4i0Phag6PcjM8lWnxP
Zl88yBMXamFr140oI5Esz93xqwp5G58xIYDfAzYIM0Yd2nq4dLwoLsAMl3TsvG5y
GZ0+7slrBHNHEPevG50BxWNWNznGh7lDQFWyjG30p8XELRmsuPNqe4jy2GoT6Mu5
lFxgfEgBUKsezwHMbZcyLnzIpO84XXauW2MFHysp6O6ixcr4WwANLmI8NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNY4lZEaOg5X4LbVFZRlLdOMbCEGMB8GA1UdIwQY
MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt
ZTg3NTEwM2ZhZjEyLzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy
LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcCwnELT
nANvy6z13I5ZzkrhO3kCZP5FbbuMZBcXOnBDgSr4+wuofWLcF0CPaa1C2RZL/ma+
JDAO7N9pwXRjoDfd3m6+9vaigsCoVcq7FsSR4OsE1FVne+jDmNiUDNE/SCByNO4i
7CjanC/N9n+Tk2dH/FZJFCtLJiA7niRw805U4dMJoD7ypidsahQZjS8wP+pz29P4
BB7BPwJJQPjZRQZgwie9ZhHlMBwjJr/qvs9kzTkCf33NYFYxKH1OaFNmvWSjhaz7
9ZYVaQsNxbPkFS+RK3sfSVOblwsK4vTUZ0SGmw7ypX7TMdCUPQnhqXVQcBk3MZ0Y
keehSP3ctTBIGw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:59 2025 by rpki-client