Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: h+65P50VO8ov6+vjiEQIQR59QLMUCQcXCvs7CoVju2E=
Subject key identifier: C5:A3:B8:79:20:58:57:EA:BE:90:DA:39:CB:70:CE:96:C3:07:37:DE
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 0196BC36FC4DCB31FB546596DA99B2518B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 0D67
Signing time: Sat 10 May 2025 22:00:42 +0000
Manifest this update: Sat 10 May 2025 22:00:42 +0000
Manifest next update: Sun 11 May 2025 22:00:42 +0000
Files and hashes: 1: 1wC6QLmrFyKOInRDcmow-XqW0-M.roa (hash: Ps6eQ5zeLE+JiNNmSXdT1CgRZlmqpZpw99jqTkN18/0=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: edEkYRAKccYPjI9+trlZGO6p/FyxptyYCtufU0cE1t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:36:fc:4d:cb:31:fb:54:65:96:da:99:b2:51:8b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: May 10 22:00:42 2025 GMT
Not After : May 11 22:00:42 2025 GMT
Subject: CN=c5a3b879205857eabe90da39cb70ce96c30737de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:7c:3f:af:ce:59:71:70:d5:99:11:30:98:
a2:95:8c:2c:9e:8c:f4:c6:83:75:59:e7:55:01:af:
ba:ba:54:6a:62:bd:fa:fe:d1:e9:a1:05:e2:67:73:
67:e1:21:70:f5:a3:44:07:14:33:6c:51:05:6b:bc:
fc:6d:e7:f6:46:e2:74:8d:4b:58:96:c3:38:dc:05:
c7:33:ef:02:f6:5b:21:41:db:e7:37:a5:d0:a5:ba:
93:8b:5c:1e:d9:73:b7:60:c9:57:80:06:d7:f8:6d:
ac:b1:fd:8b:7b:4d:57:2b:f7:1d:15:4c:1b:87:4b:
fd:ae:f5:2b:db:a0:2d:81:1e:22:aa:50:a5:24:d3:
2d:60:dd:d5:43:e5:98:5f:50:fe:76:79:0f:8d:83:
eb:0a:19:54:63:2c:c8:3d:1f:8a:24:5a:36:f6:22:
b5:b1:94:cf:49:e0:5b:98:ee:e4:cb:48:ca:7f:66:
8d:7c:37:cf:f7:4a:8c:60:0e:92:90:af:04:91:db:
a0:52:3c:25:45:d9:de:18:50:fe:b6:4c:ba:86:34:
5b:e2:1d:51:54:05:75:be:ee:61:86:62:98:5b:7d:
0f:86:91:43:3e:1c:10:9d:0f:51:a4:23:64:16:ca:
58:1f:1c:47:8c:77:47:fe:57:c0:54:ce:ac:64:3f:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A3:B8:79:20:58:57:EA:BE:90:DA:39:CB:70:CE:96:C3:07:37:DE
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6b:e9:0a:36:d8:5c:db:14:c1:bf:63:28:f2:67:86:2b:0b:
ac:a0:a8:d6:11:0b:16:69:c8:51:8a:43:76:85:2b:e8:ae:6e:
a5:d2:ed:97:80:88:28:75:3c:2a:77:b7:da:db:2f:0a:5c:26:
b3:6c:b0:14:e5:28:a7:12:6e:78:37:47:00:ca:d3:3a:e6:35:
de:2a:a6:2d:5a:48:46:6f:7d:a0:47:72:ec:fd:d9:f0:be:d5:
ba:4a:97:65:0a:9d:c4:e7:95:db:3b:57:be:86:c1:c2:f8:aa:
a6:8b:49:72:1c:6f:dd:bd:36:8f:4a:08:b1:3a:27:db:1e:f0:
8e:7b:85:10:e2:21:ac:d9:90:82:ea:20:cd:2b:70:5f:22:9d:
2f:6c:bc:c5:4f:8c:51:4f:f4:4f:45:e9:43:76:0d:45:30:ae:
8a:3f:1c:3f:12:37:9b:9c:4c:71:79:7f:e8:2c:4a:14:4b:73:
26:4f:d1:c2:a2:dc:26:d0:02:f0:2c:0b:ad:92:be:15:2f:3a:
b1:79:af:a3:04:1b:28:28:61:40:3d:9b:d0:8c:c3:dd:91:bd:
85:81:3f:5f:da:bc:be:80:c4:e6:b6:79:1e:37:d8:de:41:3e:
1e:20:96:32:45:44:8c:b5:23:1e:ff:9a:dd:fe:bd:b8:21:f9:
70:91:84:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8NvxNyzH7VGWW2pmyUYsbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWZjYjEyMDVlYjc5NTU0NzFlNWM4ZjU0MzRhOTIwNzJh
ZDNkZGQwHhcNMjUwNTEwMjIwMDQyWhcNMjUwNTExMjIwMDQyWjAzMTEwLwYDVQQD
EyhjNWEzYjg3OTIwNTg1N2VhYmU5MGRhMzljYjcwY2U5NmMzMDczN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp618P6/OWXFw1ZkRMJiilYwsnoz0
xoN1WedVAa+6ulRqYr36/tHpoQXiZ3Nn4SFw9aNEBxQzbFEFa7z8bef2RuJ0jUtY
lsM43AXHM+8C9lshQdvnN6XQpbqTi1we2XO3YMlXgAbX+G2ssf2Le01XK/cdFUwb
h0v9rvUr26AtgR4iqlClJNMtYN3VQ+WYX1D+dnkPjYPrChlUYyzIPR+KJFo29iK1
sZTPSeBbmO7ky0jKf2aNfDfP90qMYA6SkK8EkdugUjwlRdneGFD+tky6hjRb4h1R
VAV1vu5hhmKYW30PhpFDPhwQnQ9RpCNkFspYHxxHjHdH/lfAVM6sZD/2PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWjuHkgWFfqvpDaOctwzpbDBzfeMB8GA1UdIwQY
MBaAFJ7vyxIF63lVRx5cj1Q0qSByrT3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmIt
NGI3ZGNkODc3N2RlLzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmItNGI3ZGNkODc3N2Rl
LzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGvpCjbY
XNsUwb9jKPJnhisLrKCo1hELFmnIUYpDdoUr6K5updLtl4CIKHU8Kne32tsvClwm
s2ywFOUopxJueDdHAMrTOuY13iqmLVpIRm99oEdy7P3Z8L7VukqXZQqdxOeV2ztX
vobBwviqpotJchxv3b02j0oIsTon2x7wjnuFEOIhrNmQguogzStwXyKdL2y8xU+M
UU/0T0XpQ3YNRTCuij8cPxI3m5xMcXl/6CxKFEtzJk/RwqLcJtAC8CwLrZK+FS86
sXmvowQbKChhQD2b0IzD3ZG9hYE/X9q8voDE5rZ5HjfY3kE+HiCWMkVEjLUjHv+a
3f69uCH5cJGEfw==
-----END CERTIFICATE-----
Generated at Sun May 11 01:44:34 2025 by rpki-client