Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File: n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier: l2PHMfPkvlA+xQB/nx3FcZO6Brjribi7DZFaEXraXrQ=
Subject key identifier: 8E:A3:A1:9E:A9:D2:9D:A7:3F:1C:45:60:DF:A4:16:8C:B0:50:E6:DE
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial: 019510C7999A29F010B5573ACF6DBD972137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number: 0894
Signing time: Sun 16 Feb 2025 22:01:11 +0000
Manifest this update: Sun 16 Feb 2025 22:01:11 +0000
Manifest next update: Mon 17 Feb 2025 22:01:11 +0000
Files and hashes: 1: D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa (hash: zDBANuUPdW/jRqqSGkjw8mcyfQtAQBZkgjZavcu4Hqg=)
2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: m1+mmFycI4Ae9N7fNBt929Q+fg0ZkdjGiqMO+Ng/BPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:99:9a:29:f0:10:b5:57:3a:cf:6d:bd:97:21:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Validity
Not Before: Feb 16 22:01:11 2025 GMT
Not After : Feb 17 22:01:11 2025 GMT
Subject: CN=8ea3a19ea9d29da73f1c4560dfa4168cb050e6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:cd:95:f1:a6:e8:69:59:3e:f9:e9:8d:71:
d5:5d:30:dc:44:60:29:8a:07:a1:12:7e:8f:73:ae:
0c:03:41:0a:5e:23:09:5c:f4:b3:6b:6a:21:41:08:
73:95:bd:4c:39:1a:d2:b5:54:bd:ee:4f:74:a3:98:
69:ef:52:77:1f:0b:99:a5:12:e3:65:c3:0b:47:91:
7c:c1:d2:4f:4d:4a:57:7b:79:bc:16:d4:b2:31:01:
0d:d3:78:7d:8a:56:35:d4:b9:3f:54:60:b7:b5:2c:
e8:e6:fb:a4:36:81:9e:8a:5a:08:ca:91:13:45:be:
12:a9:2d:18:82:0f:ec:c8:32:4b:49:ee:fc:58:6a:
69:4e:3d:0b:b4:db:a3:f5:12:a8:35:0f:3b:47:2f:
81:79:5f:75:d1:37:39:90:b8:58:9d:cd:78:41:7b:
c9:b6:9d:e1:f7:4e:28:7d:e8:67:91:44:a4:fb:5c:
d4:d6:c9:5d:d0:2a:4e:b2:a1:be:02:95:f9:c4:d0:
37:db:37:38:34:f7:42:80:71:40:1b:e0:b3:9e:72:
b4:9c:24:9a:5d:f0:0a:6f:d0:91:20:77:bc:c8:58:
bc:a5:3c:69:a7:c6:a6:15:a3:cc:b4:e8:16:04:c3:
3e:a6:76:82:14:72:0a:db:f5:53:cc:b2:e5:f6:9f:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A3:A1:9E:A9:D2:9D:A7:3F:1C:45:60:DF:A4:16:8C:B0:50:E6:DE
X509v3 Authority Key Identifier:
keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:39:54:22:3f:c0:84:e4:6b:a3:60:d4:63:97:cc:ed:3b:06:
db:29:2b:e3:fd:f7:52:a3:8e:55:12:fa:a7:99:c7:d6:8f:3f:
ab:72:e2:a6:96:5d:95:1d:42:00:31:7e:ad:a8:c7:ca:82:36:
df:1b:13:1d:0b:6a:6a:af:17:af:21:89:5d:63:6b:43:e5:3a:
c2:4e:e5:68:57:e9:d1:b8:03:7b:70:43:21:be:45:3c:cd:13:
9b:9f:fc:72:bb:c1:09:df:ee:ad:6a:68:2d:19:20:2d:43:25:
86:fc:40:69:cd:8f:55:8d:55:a5:ef:72:c2:8f:e9:85:9c:ee:
36:37:b6:e9:1c:bf:b3:29:7a:fb:5f:ee:64:fa:16:20:9e:84:
6e:23:08:e1:ef:3b:4c:ad:40:98:28:0f:88:c0:65:00:fc:7f:
cd:60:b1:b4:d2:36:5d:4d:c8:1e:a1:d6:8b:8e:e2:08:45:e1:
93:d2:ac:a7:d2:6c:91:c1:9b:58:b5:1f:d6:e5:4b:b0:f2:17:
5a:cc:0e:99:af:37:7a:26:70:da:64:a7:41:74:2f:c5:13:e3:
c5:da:a9:79:c0:11:20:1a:7e:f2:7c:dc:a3:dd:5d:9d:3b:88:
67:a0:d8:6c:3d:11:a7:67:74:c3:d7:2c:49:34:c7:b2:8d:aa:
04:79:63:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx5maKfAQtVc6z229lyE3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODkxZmYzNDc3ZWQ3ZmRhYWNmYWUyZTNmMGRmYTY0ZmQ5
MmFjMGMwHhcNMjUwMjE2MjIwMTExWhcNMjUwMjE3MjIwMTExWjAzMTEwLwYDVQQD
Eyg4ZWEzYTE5ZWE5ZDI5ZGE3M2YxYzQ1NjBkZmE0MTY4Y2IwNTBlNmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsnNlfGm6GlZPvnpjXHVXTDcRGAp
igehEn6Pc64MA0EKXiMJXPSza2ohQQhzlb1MORrStVS97k90o5hp71J3HwuZpRLj
ZcMLR5F8wdJPTUpXe3m8FtSyMQEN03h9ilY11Lk/VGC3tSzo5vukNoGeiloIypET
Rb4SqS0Ygg/syDJLSe78WGppTj0LtNuj9RKoNQ87Ry+BeV910Tc5kLhYnc14QXvJ
tp3h904ofehnkUSk+1zU1sld0CpOsqG+ApX5xNA32zc4NPdCgHFAG+CznnK0nCSa
XfAKb9CRIHe8yFi8pTxpp8amFaPMtOgWBMM+pnaCFHIK2/VTzLLl9p+8/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6joZ6p0p2nPxxFYN+kFoywUObeMB8GA1UdIwQY
MBaAFJ+JH/NHftf9qs+uLj8N+mT9kqwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jNzc4MzMtMzFhZS00NDEyLWIwNDkt
NzBhNGE4ZDdjNDNmLzEvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jNzc4MzMtMzFhZS00NDEyLWIwNDktNzBhNGE4ZDdjNDNm
LzEvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDlUIj/A
hORro2DUY5fM7TsG2ykr4/33UqOOVRL6p5nH1o8/q3LippZdlR1CADF+rajHyoI2
3xsTHQtqaq8XryGJXWNrQ+U6wk7laFfp0bgDe3BDIb5FPM0Tm5/8crvBCd/urWpo
LRkgLUMlhvxAac2PVY1Vpe9ywo/phZzuNje26Ry/syl6+1/uZPoWIJ6EbiMI4e87
TK1AmCgPiMBlAPx/zWCxtNI2XU3IHqHWi47iCEXhk9Ksp9JskcGbWLUf1uVLsPIX
WswOma83eiZw2mSnQXQvxRPjxdqpecARIBp+8nzco91dnTuIZ6DYbD0Rp2d0w9cs
STTHso2qBHlj2g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:21 2025 by rpki-client