Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: JPMwOIk9sERoDiFE/w6ISjgHA1Zs/wynB4GUbuV/Hak=
Subject key identifier: C3:21:AE:57:0B:C3:6F:29:B6:BB:9E:68:84:2F:8C:BA:B2:D3:7A:90
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 019579109D3E0AA882B8FE105AAA33FB9A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 0E4D
Signing time: Sun 09 Mar 2025 04:01:26 +0000
Manifest this update: Sun 09 Mar 2025 04:01:26 +0000
Manifest next update: Mon 10 Mar 2025 04:01:26 +0000
Files and hashes: 1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: MU/k5RWOeIvvCdWE6Sx6V292hkNy9l4L7qsRRcEmD58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:10:9d:3e:0a:a8:82:b8:fe:10:5a:aa:33:fb:9a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Mar 9 04:01:26 2025 GMT
Not After : Mar 10 04:01:26 2025 GMT
Subject: CN=c321ae570bc36f29b6bb9e68842f8cbab2d37a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:0b:0a:26:da:d9:a4:85:9b:ac:fe:94:6e:
af:5d:47:81:44:41:5d:d3:38:d3:26:21:fa:22:43:
7c:73:c8:eb:c6:9d:1d:b1:1b:a7:0b:5d:f1:61:02:
0c:e5:64:e5:8a:1a:e6:74:ad:e6:6c:a5:ad:bd:9f:
19:3e:b7:0f:95:f2:bc:8b:0a:81:f2:8a:b9:bb:ef:
66:aa:d9:7a:aa:9a:a0:4d:1f:03:d4:0f:08:54:f2:
fe:85:22:90:69:47:0d:73:21:2e:36:f0:e1:bd:e2:
9c:37:4e:bb:66:62:49:6e:a9:d0:5f:b0:cb:8d:48:
68:50:e9:92:18:a8:48:00:48:03:c1:f9:94:cd:d5:
06:24:66:6f:f0:1d:41:bd:11:5c:48:b3:71:84:41:
02:ad:c1:a0:69:9b:b7:71:e7:b7:cd:fb:59:67:69:
29:3f:e5:6b:f6:40:6f:9b:ea:a4:5d:b8:ce:8f:fb:
7a:44:1d:23:9e:f0:89:a0:56:4f:7c:ac:a2:77:76:
f6:b1:e8:13:f8:c1:24:5f:b4:55:1f:62:aa:cf:d3:
77:1b:b4:61:c9:90:f1:01:da:01:cb:1e:4c:eb:32:
ed:bf:08:e9:86:32:4e:ca:21:3a:e5:19:a5:49:69:
0c:09:17:47:42:f4:ff:a4:0b:77:73:15:0d:57:7f:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:21:AE:57:0B:C3:6F:29:B6:BB:9E:68:84:2F:8C:BA:B2:D3:7A:90
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:87:39:51:14:c8:56:52:a1:ec:86:de:c9:0e:45:b4:e1:e9:
e2:96:22:73:aa:b3:8f:db:22:84:57:c9:70:6d:d4:0d:50:bd:
a7:74:c5:08:4a:5a:19:26:7f:63:fa:a8:37:a2:15:5a:63:87:
52:7a:2b:e3:e0:55:39:81:35:40:d3:c8:12:e0:e8:ed:31:56:
21:c9:f8:84:c8:5c:78:4b:f7:30:95:d9:2d:11:8e:4e:08:69:
75:b6:6c:60:2a:57:ba:ed:ee:bd:8d:bb:4f:2d:86:01:dd:a5:
80:a4:cf:fd:b9:95:f8:a8:aa:18:a4:90:dc:0b:71:82:08:10:
a7:b8:6d:12:ce:7d:c6:73:b7:b4:27:d6:d1:a6:68:91:93:9d:
82:f5:87:a6:80:c9:c7:be:c9:3e:8d:96:36:02:bf:91:5e:e8:
d5:f8:74:ef:5e:4d:b2:22:ee:13:c3:f9:d0:0c:bc:db:6e:40:
19:82:f5:92:6f:e2:00:57:62:a8:91:1b:44:84:34:32:69:6d:
1a:24:41:be:19:3f:ae:35:79:40:e1:e0:d5:f5:54:d3:89:20:
f1:fd:2e:b3:09:54:b7:fd:58:fb:81:5f:63:20:ca:b9:1d:9d:
c4:76:a1:6a:13:28:33:4a:09:d1:3d:85:a4:dd:dc:8a:02:98:
a4:f7:95:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV5EJ0+CqiCuP4QWqoz+5o5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDgyZjJlZmVmYjkyN2EzY2FmZmVhMWQ5MWYyNDE3ZjNk
MmU3ZDcwHhcNMjUwMzA5MDQwMTI2WhcNMjUwMzEwMDQwMTI2WjAzMTEwLwYDVQQD
EyhjMzIxYWU1NzBiYzM2ZjI5YjZiYjllNjg4NDJmOGNiYWIyZDM3YTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7ULCiba2aSFm6z+lG6vXUeBREFd
0zjTJiH6IkN8c8jrxp0dsRunC13xYQIM5WTlihrmdK3mbKWtvZ8ZPrcPlfK8iwqB
8oq5u+9mqtl6qpqgTR8D1A8IVPL+hSKQaUcNcyEuNvDhveKcN067ZmJJbqnQX7DL
jUhoUOmSGKhIAEgDwfmUzdUGJGZv8B1BvRFcSLNxhEECrcGgaZu3cee3zftZZ2kp
P+Vr9kBvm+qkXbjOj/t6RB0jnvCJoFZPfKyid3b2segT+MEkX7RVH2Kqz9N3G7Rh
yZDxAdoByx5M6zLtvwjphjJOyiE65RmlSWkMCRdHQvT/pAt3cxUNV385zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMhrlcLw28ptrueaIQvjLqy03qQMB8GA1UdIwQY
MBaAFDZILy7++5J6PK/+odkfJBfz0ufXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgt
NzY4ODczMWJlZDlkLzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgtNzY4ODczMWJlZDlk
LzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYc5URTI
VlKh7IbeyQ5FtOHp4pYic6qzj9sihFfJcG3UDVC9p3TFCEpaGSZ/Y/qoN6IVWmOH
Unor4+BVOYE1QNPIEuDo7TFWIcn4hMhceEv3MJXZLRGOTghpdbZsYCpXuu3uvY27
Ty2GAd2lgKTP/bmV+KiqGKSQ3AtxgggQp7htEs59xnO3tCfW0aZokZOdgvWHpoDJ
x77JPo2WNgK/kV7o1fh0715NsiLuE8P50Ay8225AGYL1km/iAFdiqJEbRIQ0Mmlt
GiRBvhk/rjV5QOHg1fVU04kg8f0uswlUt/1Y+4FfYyDKuR2dxHahahMoM0oJ0T2F
pN3cigKYpPeVKg==
-----END CERTIFICATE-----
Generated at Sun Mar 9 10:13:44 2025 by rpki-client