Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: L0gQiftwDiZ2JdoU99zHVYJHavX0e5Q0R8lZ5afGR3M=
Subject key identifier: D2:E8:21:63:3B:AD:C3:BC:C1:0D:78:2D:D9:48:F6:FE:C9:C0:88:EE
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 0195786AEF368AD42F73A7834AA6889D9CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 0376
Signing time: Sun 09 Mar 2025 01:00:28 +0000
Manifest this update: Sun 09 Mar 2025 01:00:28 +0000
Manifest next update: Mon 10 Mar 2025 01:00:28 +0000
Files and hashes: 1: 6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa (hash: cToJ6urjtRkBvRK35UPrzOd0uWCJVgb7/Yiw0ySoKxo=)
2: fHXFtYnbSLZ1gn7isNOv-X6g-Vc.roa (hash: oCDSfP23EAfcpuHp3yCgmbR/p7P3oSuSoD6KDdGkf7Q=)
3: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: 4lnctDxpqFmh7Ok7WK0dL+YVM2plP7mNZqLXw1NV94Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:6a:ef:36:8a:d4:2f:73:a7:83:4a:a6:88:9d:9c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Mar 9 01:00:28 2025 GMT
Not After : Mar 10 01:00:28 2025 GMT
Subject: CN=d2e821633badc3bcc10d782dd948f6fec9c088ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:cf:32:ea:28:aa:0e:c2:4b:79:3d:d9:b0:
59:71:4d:3b:0e:7b:59:9b:51:61:b7:88:1f:06:27:
da:48:ed:44:8b:1b:ed:c3:6a:bd:17:9e:29:0b:04:
40:8f:8b:bb:03:51:b6:bb:3b:2b:d4:7a:ba:ad:0c:
da:a0:3c:80:96:89:91:cb:fb:bc:20:6f:77:dd:97:
02:bd:84:d2:72:84:be:a9:40:0a:92:2a:56:cd:2e:
fc:07:c0:8f:b7:5a:1a:36:fb:c0:c9:ca:ac:e9:89:
4d:ec:df:12:1d:4c:54:87:b3:bd:3e:9f:9a:dd:44:
f0:89:07:0c:ce:6c:5c:99:e3:68:7f:87:18:ee:78:
85:ea:b8:0e:86:bd:b4:ca:6d:ef:b2:61:c0:77:9f:
78:7b:4b:48:0b:27:30:a8:43:41:32:4e:ea:80:1b:
03:e7:db:04:6d:bd:8e:c6:43:af:3a:fd:12:91:3a:
5f:d8:ed:dd:5e:83:03:07:76:61:28:5d:5d:ad:b4:
3f:ac:e8:7c:6d:c7:67:27:8d:90:85:6c:ce:43:a9:
bc:14:21:91:96:ac:ed:ca:6d:37:bb:ca:96:d1:9f:
51:84:cc:ef:ed:0c:f2:ca:e5:2a:2e:73:3e:2d:bf:
a3:ae:04:57:5d:e1:65:42:eb:d6:11:bd:89:68:aa:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E8:21:63:3B:AD:C3:BC:C1:0D:78:2D:D9:48:F6:FE:C9:C0:88:EE
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9a:f1:a2:be:d6:fc:16:d0:1d:55:80:10:a4:7b:40:5a:7c:
18:91:f5:aa:9c:96:f4:ec:cb:d8:88:da:51:41:78:12:29:6a:
3d:5e:71:20:7b:b7:fb:77:45:53:8b:98:ef:80:04:ec:04:f3:
a1:e6:26:f4:e9:0f:fc:eb:b9:88:28:4a:c4:35:6d:2a:8b:c9:
ca:ba:29:5a:44:ca:bf:b3:7c:a3:92:58:f6:f0:37:61:fa:cc:
77:32:82:61:e8:ed:cc:95:c4:fb:bc:c6:72:12:d6:3d:b8:d1:
e0:b1:b5:f6:1d:50:15:76:e9:7e:4b:39:cb:a3:49:2c:5e:94:
52:96:bb:79:88:0a:49:e9:16:65:40:c5:10:6f:54:28:9d:28:
76:47:85:15:c7:69:71:4b:8c:d8:e1:35:c5:56:39:92:6a:32:
c1:c1:a5:4d:98:c8:35:52:da:08:a8:b4:1e:0d:96:c1:03:11:
17:dc:4d:6b:8a:3f:0f:00:5e:9a:ba:f3:7e:ff:a2:6a:91:d0:
3c:40:1d:5b:15:11:22:7d:74:ef:e2:c5:74:bc:e4:b6:c3:34:
1a:60:21:15:36:84:cd:38:60:bd:d2:36:97:2c:6c:ef:36:da:
90:1a:56:3c:37:cd:86:f6:ae:19:3d:3e:32:6b:c4:d3:c2:0f:
d9:5d:20:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV4au82itQvc6eDSqaInZzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTk0ZDJlZWRjZDgyNGFjMWRlNzRhZGUzNmMxZjlkNjlk
NDk2Y2EwHhcNMjUwMzA5MDEwMDI4WhcNMjUwMzEwMDEwMDI4WjAzMTEwLwYDVQQD
EyhkMmU4MjE2MzNiYWRjM2JjYzEwZDc4MmRkOTQ4ZjZmZWM5YzA4OGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphjPMuooqg7CS3k92bBZcU07DntZ
m1Fht4gfBifaSO1Eixvtw2q9F54pCwRAj4u7A1G2uzsr1Hq6rQzaoDyAlomRy/u8
IG933ZcCvYTScoS+qUAKkipWzS78B8CPt1oaNvvAycqs6YlN7N8SHUxUh7O9Pp+a
3UTwiQcMzmxcmeNof4cY7niF6rgOhr20ym3vsmHAd594e0tICycwqENBMk7qgBsD
59sEbb2OxkOvOv0SkTpf2O3dXoMDB3ZhKF1drbQ/rOh8bcdnJ42QhWzOQ6m8FCGR
lqztym03u8qW0Z9RhMzv7QzyyuUqLnM+Lb+jrgRXXeFlQuvWEb2JaKocqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLoIWM7rcO8wQ14LdlI9v7JwIjuMB8GA1UdIwQY
MBaAFJ/pTS7tzYJKwd50reNsH51p1JbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEt
N2NhMTFkYzNhZTgyLzEvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEtN2NhMTFkYzNhZTgy
LzEvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5rxor7W
/BbQHVWAEKR7QFp8GJH1qpyW9OzL2IjaUUF4EilqPV5xIHu3+3dFU4uY74AE7ATz
oeYm9OkP/Ou5iChKxDVtKovJyropWkTKv7N8o5JY9vA3YfrMdzKCYejtzJXE+7zG
chLWPbjR4LG19h1QFXbpfks5y6NJLF6UUpa7eYgKSekWZUDFEG9UKJ0odkeFFcdp
cUuM2OE1xVY5kmoywcGlTZjINVLaCKi0Hg2WwQMRF9xNa4o/DwBemrrzfv+iapHQ
PEAdWxURIn107+LFdLzktsM0GmAhFTaEzThgvdI2lyxs7zbakBpWPDfNhvauGT0+
MmvE08IP2V0g5g==
-----END CERTIFICATE-----
Generated at Sun Mar 9 10:13:42 2025 by rpki-client