Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier: mXwEkVyIRw98vbdh1zhJYJYs+BY1DEsxNRATb20E7kc=
Subject key identifier: 32:EE:36:C2:AF:AB:4D:A0:9C:CA:17:38:FF:94:A0:88:17:86:AC:90
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial: 019656811936BE5E260B99ED1913BE31ED71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number: 06C6
Signing time: Mon 21 Apr 2025 04:00:23 +0000
Manifest this update: Mon 21 Apr 2025 04:00:23 +0000
Manifest next update: Tue 22 Apr 2025 04:00:23 +0000
Files and hashes: 1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=)
2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: EO67XYDHhi15J5LepT44zMEaaDDlo5X1zf3n/qTuphg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:19:36:be:5e:26:0b:99:ed:19:13:be:31:ed:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Validity
Not Before: Apr 21 04:00:23 2025 GMT
Not After : Apr 22 04:00:23 2025 GMT
Subject: CN=32ee36c2afab4da09cca1738ff94a0881786ac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a1:29:90:a6:59:59:96:2d:06:01:55:07:fe:
c6:68:e2:a7:6f:13:d4:6a:c9:c9:4d:d9:a8:bf:8a:
55:6f:9d:60:c0:9d:ac:76:6b:47:69:05:79:6b:51:
70:ae:78:ac:10:6b:f6:b0:5f:ce:58:90:af:3a:76:
21:7b:70:69:72:06:1c:97:d7:20:d0:eb:0d:0e:d8:
8f:ab:5f:53:e8:e7:8b:96:25:d6:42:9f:e7:ae:dd:
41:4b:8c:c9:89:c5:30:24:ad:51:21:1d:11:d6:f1:
fa:bf:1a:ef:e1:54:72:1a:f9:8c:b1:6a:e1:15:85:
4a:88:e7:fb:8a:f9:a8:17:f3:bb:a7:68:9e:c3:c1:
3b:eb:7a:3c:c9:23:08:7b:68:02:27:f4:a7:f1:39:
1a:61:fb:f8:09:af:c3:46:b4:21:4e:ec:66:46:60:
de:6a:05:83:73:cb:37:4b:de:8d:8f:01:01:d8:70:
62:01:52:4d:01:34:c6:28:d7:a5:6a:a0:00:22:40:
19:ad:79:84:b2:99:83:68:cf:f4:ae:0b:fb:b8:26:
96:5e:58:89:6d:ad:16:90:e6:e5:6b:50:35:e7:d7:
40:5e:1e:58:8c:70:4a:34:04:4f:a2:9e:0b:73:6a:
90:02:5a:82:40:fb:f2:48:14:e5:98:c6:b3:dd:59:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EE:36:C2:AF:AB:4D:A0:9C:CA:17:38:FF:94:A0:88:17:86:AC:90
X509v3 Authority Key Identifier:
keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4c:ad:08:32:4a:8d:af:b6:b9:c5:37:16:a7:32:2f:21:73:
11:24:7b:39:63:45:1a:e0:d5:36:4c:d8:b9:e9:41:dc:73:e1:
ac:77:3e:fe:1d:63:89:ef:5b:2b:6c:06:ef:ae:43:6f:9b:1f:
56:8e:59:c1:5d:d1:b1:d6:f8:8f:5c:17:5f:33:35:99:b5:5d:
be:9b:42:f7:9c:92:d9:04:0f:1e:cf:e5:ae:07:57:46:9e:3e:
95:ac:1e:7d:32:3a:5f:08:73:e6:fd:e6:ac:08:cf:20:2d:f3:
af:c5:95:19:3e:29:b9:31:a2:d6:ed:56:8a:13:d0:6f:e5:f0:
e7:3f:03:11:bd:48:d3:83:f1:32:df:5b:45:3f:4c:b7:ec:8f:
84:bf:b7:c2:ee:d3:1d:ea:a5:58:98:ac:a0:6e:f5:52:a1:af:
aa:51:ff:5f:ed:d7:5c:a3:62:ee:ad:cc:3a:cd:9a:ae:0e:53:
0d:d9:86:ff:55:c0:f0:85:6b:db:33:65:78:cb:1e:20:6a:2c:
6a:7e:57:18:4e:0d:bb:3c:b9:b6:af:18:03:b1:61:18:0d:c3:
eb:92:0f:cf:e9:64:c5:81:a1:e6:6f:41:31:54:96:c5:be:cb:
fc:b5:31:d8:a7:31:18:ff:1a:05:88:d5:ee:ff:ed:92:bd:b1:
b7:d3:71:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWgRk2vl4mC5ntGRO+Me1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzI2ZjE4Y2Y5NmI4NmE0NTA2YjNiODRjY2M0NGQzYjM1
MDZhMjAwHhcNMjUwNDIxMDQwMDIzWhcNMjUwNDIyMDQwMDIzWjAzMTEwLwYDVQQD
EygzMmVlMzZjMmFmYWI0ZGEwOWNjYTE3MzhmZjk0YTA4ODE3ODZhYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KEpkKZZWZYtBgFVB/7GaOKnbxPU
asnJTdmov4pVb51gwJ2sdmtHaQV5a1FwrnisEGv2sF/OWJCvOnYhe3BpcgYcl9cg
0OsNDtiPq19T6OeLliXWQp/nrt1BS4zJicUwJK1RIR0R1vH6vxrv4VRyGvmMsWrh
FYVKiOf7ivmoF/O7p2iew8E763o8ySMIe2gCJ/Sn8TkaYfv4Ca/DRrQhTuxmRmDe
agWDc8s3S96NjwEB2HBiAVJNATTGKNelaqAAIkAZrXmEspmDaM/0rgv7uCaWXliJ
ba0WkObla1A159dAXh5YjHBKNARPop4Lc2qQAlqCQPvySBTlmMaz3VnBUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLuNsKvq02gnMoXOP+UoIgXhqyQMB8GA1UdIwQY
MBaAFJzCbxjPlrhqRQazuEzMRNOzUGogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQt
MDEzOTg5NDJmYjVhLzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQtMDEzOTg5NDJmYjVh
LzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUytCDJK
ja+2ucU3FqcyLyFzESR7OWNFGuDVNkzYuelB3HPhrHc+/h1jie9bK2wG765Db5sf
Vo5ZwV3Rsdb4j1wXXzM1mbVdvptC95yS2QQPHs/lrgdXRp4+lawefTI6Xwhz5v3m
rAjPIC3zr8WVGT4puTGi1u1WihPQb+Xw5z8DEb1I04PxMt9bRT9Mt+yPhL+3wu7T
HeqlWJisoG71UqGvqlH/X+3XXKNi7q3MOs2arg5TDdmG/1XA8IVr2zNleMseIGos
an5XGE4Nuzy5tq8YA7FhGA3D65IPz+lkxYGh5m9BMVSWxb7L/LUx2KcxGP8aBYjV
7v/tkr2xt9NxWw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:25:51 2025 by rpki-client