Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
File: n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft (raw, json)
Hash identifier: 3Nvmj5O/Ex/2tGEWmQ+eTcDzqQCd616C86HOMfmk0Xw=
Subject key identifier: 07:A6:00:DC:0A:6E:19:3B:86:52:1D:EB:2C:48:82:86:AB:95:AA:94
Authority key identifier: 9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
Certificate issuer: /CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Certificate serial: 0196545BDA76B6FC5B7C1BA3A2950E989B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 18:00:27 +0000
Manifest this update: Sun 20 Apr 2025 18:00:27 +0000
Manifest next update: Mon 21 Apr 2025 18:00:27 +0000
Files and hashes: 1: 1J8y1mQKbllZPdpNvAX7bscmWlI.roa (hash: jhx/+OmQQVqiCuyQX4gR49r4SoPl20ExxxakSlp8D6M=)
2: WBEZkdOtzqubY4jYGPTdt89fcs0.roa (hash: YzzD8M9BLKgLshmZ4kyXFcT1vvqCniPNKBqVVUae9sY=)
3: n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl (hash: 8GWN6Tm967EkYdqPFB+hdlvbPxsooI2zOKjtRK9ehwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:da:76:b6:fc:5b:7c:1b:a3:a2:95:0e:98:9b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Validity
Not Before: Apr 20 18:00:27 2025 GMT
Not After : Apr 21 18:00:27 2025 GMT
Subject: CN=07a600dc0a6e193b86521deb2c488286ab95aa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:3a:21:93:26:1b:06:45:97:09:f3:cb:e2:
e2:2c:74:5c:4c:9e:e7:00:88:ab:9c:89:0d:8c:13:
b4:5b:0e:3a:2b:49:75:95:93:0e:0f:db:bf:75:9e:
84:05:4d:13:f8:4d:b9:6a:26:6d:93:b2:20:7c:7d:
d8:c6:51:01:47:9b:9a:43:85:51:b5:b1:7f:9e:ba:
86:44:ee:75:23:5c:81:f5:b4:0d:7a:fe:0f:ee:e7:
e4:e6:0a:f3:1c:4f:a8:18:cb:52:01:bb:c8:f6:6b:
9d:96:97:4f:d9:4a:8d:52:f1:e2:53:e7:8a:17:a3:
5c:16:23:4a:1d:40:62:6d:df:ed:7c:86:77:21:02:
39:bb:0f:40:82:9f:bc:8a:95:c5:ce:e8:b1:39:52:
1f:bd:91:1d:17:5e:64:47:8d:48:f7:ee:2a:fc:06:
2e:e1:f6:55:6b:ef:93:85:84:97:e7:4c:9c:ec:d5:
21:7c:5a:53:9b:90:bf:03:04:ba:b4:89:dd:8e:a0:
2e:7d:bb:8d:5b:2e:a0:2b:46:f4:d3:46:ab:59:ff:
cf:92:f0:88:a3:b5:1e:be:7e:c6:ef:c9:47:76:ab:
6f:99:43:48:13:28:f2:56:fc:e6:51:14:f8:41:32:
70:5b:a5:48:5c:2d:16:0e:b1:d0:84:6c:33:43:e6:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A6:00:DC:0A:6E:19:3B:86:52:1D:EB:2C:48:82:86:AB:95:AA:94
X509v3 Authority Key Identifier:
keyid:9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:35:16:70:18:e9:1d:f7:52:02:23:a8:12:76:1a:7d:34:71:
7a:27:34:f9:75:84:b1:3c:e5:f2:b7:63:96:f6:fe:a2:f7:3e:
03:3b:b0:f2:e1:fe:ab:70:ea:6e:29:f7:29:c7:4b:48:9e:1a:
29:6c:4b:9b:ba:18:03:f1:1b:c5:6a:fe:88:dd:37:8f:78:83:
a5:4e:a4:ec:c0:1e:fb:fc:83:01:cf:cd:54:41:ff:79:30:84:
ec:35:00:56:a3:a1:3e:d3:20:56:e0:f3:2c:06:df:24:16:0b:
a1:43:66:9a:04:06:6a:a7:95:56:68:96:6d:ce:c9:00:fc:1a:
d0:b8:0e:bf:a0:f2:50:35:46:eb:34:cd:67:85:33:9e:88:0d:
5f:c2:b1:3e:db:d4:fe:c2:c1:64:46:c5:36:13:42:2c:1d:a3:
1f:8a:18:05:96:66:54:d2:a2:61:ce:34:21:32:45:e0:68:13:
e0:d8:60:f6:0f:47:c4:a4:37:d6:06:23:2e:8b:d6:1b:bf:cc:
78:56:c6:a9:8d:c3:44:aa:d5:5d:dc:55:ee:9e:1e:c4:4a:22:
62:27:5b:76:8d:df:d5:81:f5:29:3a:10:3e:1b:f4:a0:6e:7d:
fe:37:27:0d:8a:56:4e:b6:2a:43:ea:f3:63:eb:40:29:cd:94:
75:bf:72:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUW9p2tvxbfBujopUOmJtjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNWQ1YjdmNzkyNjQ0ZmY3MDcyYTQzYWNjOWM4NjUxOTRi
ZTRhZGMwHhcNMjUwNDIwMTgwMDI3WhcNMjUwNDIxMTgwMDI3WjAzMTEwLwYDVQQD
EygwN2E2MDBkYzBhNmUxOTNiODY1MjFkZWIyYzQ4ODI4NmFiOTVhYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6I6IZMmGwZFlwnzy+LiLHRcTJ7n
AIirnIkNjBO0Ww46K0l1lZMOD9u/dZ6EBU0T+E25aiZtk7IgfH3YxlEBR5uaQ4VR
tbF/nrqGRO51I1yB9bQNev4P7ufk5grzHE+oGMtSAbvI9mudlpdP2UqNUvHiU+eK
F6NcFiNKHUBibd/tfIZ3IQI5uw9Agp+8ipXFzuixOVIfvZEdF15kR41I9+4q/AYu
4fZVa++ThYSX50yc7NUhfFpTm5C/AwS6tIndjqAufbuNWy6gK0b000arWf/PkvCI
o7Uevn7G78lHdqtvmUNIEyjyVvzmURT4QTJwW6VIXC0WDrHQhGwzQ+ZGjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAemANwKbhk7hlId6yxIgoarlaqUMB8GA1UdIwQY
MBaAFJ9dW395JkT/cHKkOsychlGUvkrcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjExYmYza21SUDl3Y3FRNnpKeUdVWlMtU3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YTc5MDEtODVkOC00M2VhLWFkYjIt
Nzk5OTEwYzE1NDVmLzEvbjExYmYza21SUDl3Y3FRNnpKeUdVWlMtU3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80YTc5MDEtODVkOC00M2VhLWFkYjItNzk5OTEwYzE1NDVm
LzEvbjExYmYza21SUDl3Y3FRNnpKeUdVWlMtU3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzUWcBjp
HfdSAiOoEnYafTRxeic0+XWEsTzl8rdjlvb+ovc+Azuw8uH+q3Dqbin3KcdLSJ4a
KWxLm7oYA/EbxWr+iN03j3iDpU6k7MAe+/yDAc/NVEH/eTCE7DUAVqOhPtMgVuDz
LAbfJBYLoUNmmgQGaqeVVmiWbc7JAPwa0LgOv6DyUDVG6zTNZ4UznogNX8KxPtvU
/sLBZEbFNhNCLB2jH4oYBZZmVNKiYc40ITJF4GgT4Nhg9g9HxKQ31gYjLovWG7/M
eFbGqY3DRKrVXdxV7p4exEoiYidbdo3f1YH1KToQPhv0oG59/jcnDYpWTrYqQ+rz
Y+tAKc2Udb9y/Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:46:58 2025 by rpki-client