Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File: NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier: L5epl66uKqkKYhWmCD2GbFR4UIjvf2YQQAPM3McfzTg=
Subject key identifier: 3A:CD:0C:C3:2B:9C:CD:1D:4E:05:B5:C7:96:25:28:8B:3E:8B:13:CE
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer: /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial: 01960309C6324CFBB0CFD0D4ED3A1F744EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number: 1290
Signing time: Fri 04 Apr 2025 23:01:34 +0000
Manifest this update: Fri 04 Apr 2025 23:01:34 +0000
Manifest next update: Sat 05 Apr 2025 23:01:34 +0000
Files and hashes: 1: 8GuN-54fOOWK-SbVRHbvHD1t258.roa (hash: +JAgmZYVHbTg/tn7L+SSKAVcpZBlqMe4rbmvvs3DmTY=)
2: KFmrVFMv5VvGN18H4jdGIeWGvn8.roa (hash: /z+1/Ei//uOKicmtTi2XHrdGdq2SuXHHljqI7g0rhfE=)
3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: hMNRG+g57mY4OiJCAmCSgmNtlKp0Clzy8fNgaWCUB00=)
4: gaApv-P3VWnlKNagOLOw5elCXUg.roa (hash: uJOMrg9lvM87wMjmTs9ZCZY0pZU1l+jJJKNSBI4+HgI=)
5: mldZ02SgByZkxb9-hN-tKmR0o0s.roa (hash: DrkW1wHvYpTjqDlBZkGq/sAaUPB7borOxMsYKMVFock=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:09:c6:32:4c:fb:b0:cf:d0:d4:ed:3a:1f:74:4e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Validity
Not Before: Apr 4 23:01:34 2025 GMT
Not After : Apr 5 23:01:34 2025 GMT
Subject: CN=3acd0cc32b9ccd1d4e05b5c79625288b3e8b13ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:e8:25:22:88:f9:64:46:bc:4b:d8:af:bf:
f5:9c:59:e4:7b:3b:0d:4c:e3:ae:81:28:e3:89:1e:
49:f7:97:58:a4:0d:9e:c6:68:67:eb:b3:eb:4c:38:
8a:26:7f:79:fc:00:ee:1b:bd:c6:df:3f:67:43:9a:
89:36:b1:60:a1:84:aa:7d:64:b5:eb:c5:e3:f3:8d:
bc:a5:25:f2:c6:76:94:48:a6:a0:33:00:bf:08:3d:
2d:aa:c1:7f:79:89:f4:78:94:05:4e:9a:9a:08:0d:
0b:41:16:c2:b4:1d:13:a7:78:bf:e6:eb:1c:15:b7:
4b:91:f7:a8:1d:04:41:7a:41:f9:b3:d5:a8:a8:1e:
a3:33:1c:3b:b6:87:d7:42:cf:70:b0:26:94:b8:a6:
ca:72:f3:b6:4c:53:38:7d:4a:e2:9e:b8:37:e2:2e:
47:8a:bd:ce:59:53:f9:7b:f3:49:1b:52:e5:97:e3:
cc:ab:35:a9:5b:e8:b2:21:ac:38:c4:3a:22:30:1b:
b5:aa:fc:0b:cd:4a:88:66:7f:04:a7:c7:69:c7:87:
5d:a8:51:27:aa:ed:83:6c:82:b5:9a:8c:d6:1f:56:
85:47:91:bd:d8:d9:34:ff:4f:0f:43:cd:1c:ea:05:
cb:52:e8:e0:21:fc:91:29:b7:6e:92:b7:19:cb:2c:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CD:0C:C3:2B:9C:CD:1D:4E:05:B5:C7:96:25:28:8B:3E:8B:13:CE
X509v3 Authority Key Identifier:
keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c4:f5:1e:b6:21:fa:6b:7b:d9:e7:7d:0d:aa:e5:85:6c:81:
34:a7:12:1d:98:73:a7:12:09:ff:21:b9:a7:3f:ee:da:5a:9e:
11:48:b5:44:a8:ec:6b:c9:e9:6a:c5:88:57:39:fa:cf:80:0b:
93:62:34:48:b7:89:d1:34:ea:d4:5d:92:70:2b:2e:cf:7b:15:
b1:c0:4a:66:10:28:ac:d1:06:8d:e5:40:18:49:23:59:63:f3:
b3:15:67:43:ab:61:84:15:23:0d:6f:af:0c:5b:b6:68:e0:1f:
4a:ed:0e:37:99:b5:d6:aa:5d:69:db:c7:29:e7:f4:11:b6:5c:
b6:5c:3c:94:e4:60:39:f4:c4:69:ab:61:9d:f4:10:d3:8d:cd:
4d:a2:b7:30:e4:ba:77:fe:cd:d9:2e:f6:dd:87:a0:4f:a5:be:
0a:3b:b8:ca:3e:92:3a:ec:66:e8:cc:58:94:c0:91:f0:88:68:
64:5b:35:84:6b:f8:df:1e:3b:e3:87:82:e3:d3:2c:b5:81:4b:
c1:f4:94:27:c6:fc:2a:eb:ad:2e:24:f4:79:69:91:21:80:13:
3a:e4:ea:ac:4d:7e:dc:84:f4:5a:4e:3a:50:2a:20:cd:50:6d:
41:c5:4c:c9:07:a2:7e:db:db:cb:20:c8:0c:d9:87:0b:17:ff:
0b:df:b0:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYDCcYyTPuwz9DU7TofdE7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MWFkZjU3YzhkY2I3YmZkMzRlOWFlY2Q4M2UzNjM0MmVj
M2EzYzkwHhcNMjUwNDA0MjMwMTM0WhcNMjUwNDA1MjMwMTM0WjAzMTEwLwYDVQQD
EygzYWNkMGNjMzJiOWNjZDFkNGUwNWI1Yzc5NjI1Mjg4YjNlOGIxM2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0DoJSKI+WRGvEvYr7/1nFnkezsN
TOOugSjjiR5J95dYpA2exmhn67PrTDiKJn95/ADuG73G3z9nQ5qJNrFgoYSqfWS1
68Xj8428pSXyxnaUSKagMwC/CD0tqsF/eYn0eJQFTpqaCA0LQRbCtB0Tp3i/5usc
FbdLkfeoHQRBekH5s9WoqB6jMxw7tofXQs9wsCaUuKbKcvO2TFM4fUrinrg34i5H
ir3OWVP5e/NJG1Lll+PMqzWpW+iyIaw4xDoiMBu1qvwLzUqIZn8Ep8dpx4ddqFEn
qu2DbIK1mozWH1aFR5G92Nk0/08PQ80c6gXLUujgIfyRKbdukrcZyywPlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrNDMMrnM0dTgW1x5YlKIs+ixPOMB8GA1UdIwQY
MBaAFDYa31fI3Le/006a7Ng+NjQuw6PJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmIt
MWExODczOGI0NzQxLzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmItMWExODczOGI0NzQx
LzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8T1HrYh
+mt72ed9DarlhWyBNKcSHZhzpxIJ/yG5pz/u2lqeEUi1RKjsa8npasWIVzn6z4AL
k2I0SLeJ0TTq1F2ScCsuz3sVscBKZhAorNEGjeVAGEkjWWPzsxVnQ6thhBUjDW+v
DFu2aOAfSu0ON5m11qpdadvHKef0EbZctlw8lORgOfTEaathnfQQ043NTaK3MOS6
d/7N2S723YegT6W+Cju4yj6SOuxm6MxYlMCR8IhoZFs1hGv43x4744eC49MstYFL
wfSUJ8b8KuutLiT0eWmRIYATOuTqrE1+3IT0Wk46UCogzVBtQcVMyQeiftvbyyDI
DNmHCxf/C9+wxQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:39 2025 by rpki-client