Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier: oSklGMs+4YiV+iMj5A7KlMbkZMR1TMrz05O10/lH0Vk=
Subject key identifier: 51:D7:10:66:EB:51:BF:FA:CD:33:CD:52:9D:77:6B:16:86:59:F6:05
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 01958BBB73BC1F5BFDCE359B58D577ACF904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number: 065D
Signing time: Wed 12 Mar 2025 19:01:12 +0000
Manifest this update: Wed 12 Mar 2025 19:01:12 +0000
Manifest next update: Thu 13 Mar 2025 19:01:12 +0000
Files and hashes: 1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=)
2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: +SwlQunKIMFA2nE4trqqfstJA1ykmf7G4CfiqtojePA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:73:bc:1f:5b:fd:ce:35:9b:58:d5:77:ac:f9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Mar 12 19:01:12 2025 GMT
Not After : Mar 13 19:01:12 2025 GMT
Subject: CN=51d71066eb51bffacd33cd529d776b168659f605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:ee:b8:06:3a:23:47:95:7e:58:fb:1e:44:
75:45:6d:db:f2:a6:8a:8d:41:2e:8a:29:13:0b:33:
9c:40:d4:2d:10:59:5e:24:ad:eb:ef:b2:7f:8e:eb:
c1:32:c0:86:99:76:38:e8:9c:e2:95:d4:44:05:1c:
49:70:8e:6f:d0:54:8b:20:0a:b4:1d:2f:1d:19:c4:
70:be:e9:25:0f:1b:5a:5e:10:7b:06:58:8a:73:45:
a2:11:79:1a:49:2e:6e:37:49:cd:79:e8:36:3e:96:
f4:ff:9d:d0:73:94:51:23:ca:21:f7:3e:6d:22:13:
e4:d1:d5:36:66:f7:48:8a:c0:44:b2:2b:e1:d5:41:
c8:95:0b:84:b9:e5:67:94:4c:0e:e2:78:63:d1:bf:
f3:5f:f4:3f:19:15:9f:81:e0:93:52:59:2c:8b:fa:
dc:30:d6:92:18:18:23:d9:b3:c4:a6:60:73:84:81:
04:db:56:a8:7b:ce:ef:61:c7:a4:11:8c:51:42:13:
bc:b0:01:26:e7:22:f9:7a:0a:57:f1:70:75:3f:0c:
cc:e9:2f:57:5c:0f:b4:14:6c:5a:05:a5:54:22:c7:
aa:b9:e1:c2:d1:21:a9:ec:cc:de:e6:3f:52:fe:8f:
9c:0c:f2:e1:68:4c:2e:68:71:5b:b9:f4:13:fa:ff:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D7:10:66:EB:51:BF:FA:CD:33:CD:52:9D:77:6B:16:86:59:F6:05
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3e:03:26:79:d8:ed:60:97:de:9b:78:34:56:40:26:70:98:
8a:cb:d1:9b:b7:5f:38:36:fd:18:dd:e0:88:7b:40:40:f2:09:
bd:be:f4:66:0e:7a:53:9f:f0:8e:3c:dd:2f:27:78:71:87:ac:
35:66:00:05:86:f5:ca:7d:0d:8c:43:af:94:5b:01:65:98:fe:
b6:1f:1f:bf:3c:2f:e3:0c:84:e1:17:07:08:29:91:cf:5c:51:
a2:1b:1a:b1:f5:d9:4c:18:73:f7:e7:cc:9e:c9:18:98:a9:62:
d2:0d:43:b5:90:4d:fd:88:80:e8:7b:58:56:f0:fa:68:05:e1:
fd:9b:36:b2:4a:3a:6d:e7:81:41:d1:90:0e:f8:47:c7:c0:22:
8a:7c:80:3b:ad:83:65:ab:e4:67:67:65:a7:ef:53:b7:c3:99:
dd:97:32:be:e1:24:ac:02:1e:2a:12:ee:95:8a:23:9e:ea:b6:
a8:1a:29:d1:34:40:bb:d5:bf:58:98:8f:76:57:e2:98:32:af:
92:f6:54:f2:7e:7d:08:ee:6e:ca:67:9a:07:47:9f:21:7b:04:
46:7a:cd:2a:ea:d0:1f:a0:d2:b6:f3:84:39:92:50:73:ab:75:
93:d6:7c:d4:6c:0e:12:0a:01:22:9f:fb:42:99:f2:e5:f4:a5:
1f:58:31:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLu3O8H1v9zjWbWNV3rPkEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzI2ZjE4Y2Y5NmI4NmE0NTA2YjNiODRjY2M0NGQzYjM1
MDZhMjAwHhcNMjUwMzEyMTkwMTEyWhcNMjUwMzEzMTkwMTEyWjAzMTEwLwYDVQQD
Eyg1MWQ3MTA2NmViNTFiZmZhY2QzM2NkNTI5ZDc3NmIxNjg2NTlmNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGnuuAY6I0eVflj7HkR1RW3b8qaK
jUEuiikTCzOcQNQtEFleJK3r77J/juvBMsCGmXY46JzildREBRxJcI5v0FSLIAq0
HS8dGcRwvuklDxtaXhB7BliKc0WiEXkaSS5uN0nNeeg2Ppb0/53Qc5RRI8oh9z5t
IhPk0dU2ZvdIisBEsivh1UHIlQuEueVnlEwO4nhj0b/zX/Q/GRWfgeCTUlksi/rc
MNaSGBgj2bPEpmBzhIEE21aoe87vYcekEYxRQhO8sAEm5yL5egpX8XB1PwzM6S9X
XA+0FGxaBaVUIsequeHC0SGp7Mze5j9S/o+cDPLhaEwuaHFbufQT+v/WDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHXEGbrUb/6zTPNUp13axaGWfYFMB8GA1UdIwQY
MBaAFJzCbxjPlrhqRQazuEzMRNOzUGogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQt
MDEzOTg5NDJmYjVhLzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQtMDEzOTg5NDJmYjVh
LzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtT4DJnnY
7WCX3pt4NFZAJnCYisvRm7dfODb9GN3giHtAQPIJvb70Zg56U5/wjjzdLyd4cYes
NWYABYb1yn0NjEOvlFsBZZj+th8fvzwv4wyE4RcHCCmRz1xRohsasfXZTBhz9+fM
nskYmKli0g1DtZBN/YiA6HtYVvD6aAXh/Zs2sko6beeBQdGQDvhHx8AiinyAO62D
ZavkZ2dlp+9Tt8OZ3ZcyvuEkrAIeKhLulYojnuq2qBop0TRAu9W/WJiPdlfimDKv
kvZU8n59CO5uymeaB0efIXsERnrNKurQH6DStvOEOZJQc6t1k9Z81GwOEgoBIp/7
Qpny5fSlH1gxpw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:37 2025 by rpki-client