Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: 3pB6CZkH3qRVDBTA6bAaZFqAj+GPKb7rcnOjl5pDZBM=
Subject key identifier: 83:84:F8:37:B9:81:CA:4E:40:C7:20:BD:D3:FC:0A:BB:D2:EC:67:98
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 0196AEB20FFE87D4F5B83681C46F6C9B3B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 089F
Signing time: Thu 08 May 2025 07:00:27 +0000
Manifest this update: Thu 08 May 2025 07:00:27 +0000
Manifest next update: Fri 09 May 2025 07:00:27 +0000
Files and hashes: 1: Vsn3jYRWMir2G2-W8jrydR_iJwk.roa (hash: +JLCfjRT9K7qAkhsFi/9o8pUTPcML+dFZemwYUpHZ7U=)
2: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: gP/WAd/Niwd6a05PpzU8NqOIKxiliosM3ucr/9CeLm8=)
3: zVbtVTb6VEP2n5e5elBZRVf7PBc.roa (hash: VV/l24AMORfvu1S58DBbEXwpnZJ00Cz7FHLsGnZlDXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:0f:fe:87:d4:f5:b8:36:81:c4:6f:6c:9b:3b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: May 8 07:00:27 2025 GMT
Not After : May 9 07:00:27 2025 GMT
Subject: CN=8384f837b981ca4e40c720bdd3fc0abbd2ec6798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:8c:c8:03:c2:95:ca:31:c5:32:5a:86:80:
99:13:f0:8b:f7:ce:88:f4:8a:b9:08:fe:f3:a5:ab:
b2:82:2a:35:60:be:d3:92:e4:49:8c:01:61:ad:53:
09:a4:7a:6f:66:e6:24:ce:80:1f:1c:47:ce:ae:1e:
c3:de:38:8c:1f:1b:a6:cf:b5:2c:db:7c:e1:cb:60:
0c:55:51:ff:44:e0:01:62:45:ac:cd:17:83:e7:7c:
7c:bf:86:49:12:aa:92:55:8c:3c:b1:e3:85:57:7d:
34:eb:c3:6e:d4:76:21:f9:a9:08:b0:3f:b6:d4:ad:
96:23:c9:dc:5a:f7:e4:ca:d9:84:b4:c6:51:90:7c:
72:40:c6:fc:40:23:0d:12:13:13:78:80:e7:dc:e0:
b3:20:5f:f8:0a:f5:4a:d7:6b:d4:94:8a:7f:0d:47:
76:7e:a4:84:10:01:1b:36:f5:89:68:25:f8:4d:eb:
00:2e:ae:6b:82:4f:6c:ac:72:32:d5:16:4a:b7:08:
7b:5f:c7:1b:06:23:af:53:ed:5b:57:aa:89:e7:4e:
4a:8c:d6:1c:94:03:24:75:63:15:8f:7d:48:cd:af:
b8:43:c8:0b:ec:bc:47:76:6b:b0:a5:b8:f4:83:f3:
f8:ba:22:5c:c0:cc:06:d7:99:ed:83:e3:cd:a7:4e:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:84:F8:37:B9:81:CA:4E:40:C7:20:BD:D3:FC:0A:BB:D2:EC:67:98
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:70:7e:59:91:25:cc:e9:8b:c5:36:98:95:22:1f:00:76:0e:
91:77:17:27:0b:eb:59:07:43:7c:86:40:3f:54:b9:90:ea:03:
7c:ae:96:2c:20:c5:b8:83:78:16:ef:61:85:2b:39:ac:3c:84:
76:57:7f:00:4a:0f:5b:14:af:74:ea:b4:81:39:01:52:83:f0:
0c:97:f9:3e:4a:33:4a:f8:02:63:e1:a1:b7:99:2d:2e:c9:c5:
9b:2c:c0:66:c0:6e:86:05:d8:de:0e:ac:2a:a8:06:75:4a:1f:
88:47:b1:97:ca:29:61:7d:a3:ed:4b:76:6c:49:a9:e3:5c:de:
0d:ff:05:86:88:6b:8c:83:ba:cc:2f:f4:10:9c:6d:72:eb:97:
4e:56:76:47:f7:70:ae:9a:e4:8b:f2:f8:d4:66:14:87:fa:11:
cd:ea:29:77:85:58:98:f4:ef:f8:df:5a:01:51:fc:ee:b7:79:
36:eb:e3:94:41:f5:a3:36:10:0f:94:25:18:e7:6e:3b:c0:53:
a3:27:db:d4:28:58:f8:3c:0f:6e:90:2b:60:96:24:8d:7c:56:
6a:df:93:78:13:08:18:af:00:dc:f0:5e:7b:f0:a9:e8:db:5a:
b4:5e:b1:a1:c3:52:36:48:89:1d:25:0c:98:62:0b:8b:a8:e6:
05:9e:0e:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZausg/+h9T1uDaBxG9smzsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMTM5NDc2OGM5YTM5YTYxMTI2NzRkNzM3NTk3MmE2Njk2
YjQ2ODAwHhcNMjUwNTA4MDcwMDI3WhcNMjUwNTA5MDcwMDI3WjAzMTEwLwYDVQQD
Eyg4Mzg0ZjgzN2I5ODFjYTRlNDBjNzIwYmRkM2ZjMGFiYmQyZWM2Nzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvauMyAPClcoxxTJahoCZE/CL986I
9Iq5CP7zpauygio1YL7TkuRJjAFhrVMJpHpvZuYkzoAfHEfOrh7D3jiMHxumz7Us
23zhy2AMVVH/ROABYkWszReD53x8v4ZJEqqSVYw8seOFV30068Nu1HYh+akIsD+2
1K2WI8ncWvfkytmEtMZRkHxyQMb8QCMNEhMTeIDn3OCzIF/4CvVK12vUlIp/DUd2
fqSEEAEbNvWJaCX4TesALq5rgk9srHIy1RZKtwh7X8cbBiOvU+1bV6qJ505KjNYc
lAMkdWMVj31Iza+4Q8gL7LxHdmuwpbj0g/P4uiJcwMwG15ntg+PNp04j0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOE+De5gcpOQMcgvdP8CrvS7GeYMB8GA1UdIwQY
MBaAFJwTlHaMmjmmESZ01zdZcqZpa0aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUt
YTcxM2ExOTE1YzkwLzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUtYTcxM2ExOTE1Yzkw
LzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnB+WZEl
zOmLxTaYlSIfAHYOkXcXJwvrWQdDfIZAP1S5kOoDfK6WLCDFuIN4Fu9hhSs5rDyE
dld/AEoPWxSvdOq0gTkBUoPwDJf5PkozSvgCY+Ght5ktLsnFmyzAZsBuhgXY3g6s
KqgGdUofiEexl8opYX2j7Ut2bEmp41zeDf8FhohrjIO6zC/0EJxtcuuXTlZ2R/dw
rprki/L41GYUh/oRzeopd4VYmPTv+N9aAVH87rd5NuvjlEH1ozYQD5QlGOduO8BT
oyfb1ChY+DwPbpArYJYkjXxWat+TeBMIGK8A3PBee/Cp6NtatF6xocNSNkiJHSUM
mGILi6jmBZ4OQA==
-----END CERTIFICATE-----
Generated at Thu May 8 14:46:05 2025 by rpki-client