Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: f9Xn1uHt/kg+XU8pR6WuNnyXDviXJLnVeaiizk5JKZw=
Subject key identifier: E5:35:E9:30:5D:3F:42:51:4B:43:8C:40:18:BC:98:21:7B:28:FD:DD
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 0196B85A0DE1819854C63B0B4DB820D4190F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 148C
Signing time: Sat 10 May 2025 04:00:31 +0000
Manifest this update: Sat 10 May 2025 04:00:31 +0000
Manifest next update: Sun 11 May 2025 04:00:31 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: ka0igjBRd7+pzSn1cK/BGuV6v5qUCG1+LklZKTxFycQ=)
2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=)
3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:0d:e1:81:98:54:c6:3b:0b:4d:b8:20:d4:19:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: May 10 04:00:31 2025 GMT
Not After : May 11 04:00:31 2025 GMT
Subject: CN=e535e9305d3f42514b438c4018bc98217b28fddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:cd:60:bb:26:63:0d:36:82:bc:e4:25:38:
5f:2d:f8:72:1c:f0:18:c8:36:b2:cd:99:09:ed:b6:
3e:82:ad:86:47:9b:6f:bd:f4:3c:69:1a:be:2b:54:
12:27:04:e1:38:f0:a9:aa:23:df:24:d6:d3:e3:02:
b6:6f:7d:d1:93:34:fb:e0:81:9f:1e:66:a5:8f:92:
ba:73:f3:b3:dc:8e:cb:9e:77:db:42:bf:3a:1e:82:
cb:e1:64:10:5a:50:51:38:bd:c5:c1:40:ae:bb:19:
ac:1a:02:3e:0f:bb:74:1f:f6:17:7c:d2:fb:6a:c6:
21:d5:c0:66:f0:07:9b:0f:fe:65:77:1b:ed:90:0a:
0a:e8:3a:74:2f:17:02:5c:2f:f4:82:9a:bf:3f:4c:
53:95:5a:c9:4d:b1:f8:f4:54:30:f1:cb:3c:b8:51:
bb:cf:bf:06:71:71:06:6a:15:f3:a2:ed:d2:e8:1e:
45:10:ea:19:cb:f8:4d:78:e7:23:59:31:82:39:da:
39:35:e3:ff:45:4d:4c:b1:34:d8:e4:74:ab:b6:46:
14:b3:3b:82:d7:91:09:b3:d0:f2:56:6d:03:fb:66:
9b:5b:ec:1f:33:5c:76:1e:06:18:31:6a:46:ed:1a:
c1:10:c2:a0:b7:25:c4:2e:37:11:e6:36:0d:ee:75:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:35:E9:30:5D:3F:42:51:4B:43:8C:40:18:BC:98:21:7B:28:FD:DD
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:da:e5:4a:b6:a4:06:0f:b8:0d:30:ce:6c:76:07:75:94:2a:
e1:36:cb:22:b0:ce:49:68:d2:65:d0:7b:c4:b2:01:6f:b6:0b:
76:a3:e1:49:5a:4e:3f:bb:66:0f:3f:50:03:db:57:29:4c:96:
be:18:d6:8f:ec:23:24:d1:1a:f3:10:23:e5:81:00:c7:ea:8d:
c2:40:5f:c1:91:6b:ad:d1:75:e9:e1:9c:3e:f5:e9:66:87:47:
3e:f7:bc:ea:ee:f8:73:9c:6d:9d:ea:86:4d:44:cc:2e:6f:89:
8c:eb:e3:18:e7:a3:22:2b:48:2a:c7:39:c4:c3:c1:f2:b7:6c:
75:5f:78:3c:60:ea:3d:b0:05:37:72:2b:8b:59:99:30:65:4e:
92:71:5d:0e:d0:01:10:43:d3:6b:54:57:12:2e:dd:7a:7c:8c:
c0:95:30:e0:90:91:78:5d:14:90:bf:62:62:09:72:a2:f3:32:
0b:3f:ae:89:53:67:10:5f:ad:04:77:51:ce:98:f6:a9:5b:f4:
b7:60:95:2f:2b:ef:e0:2c:3d:25:6b:61:16:c3:9e:ee:20:ba:
98:26:1b:70:ce:b3:12:9e:1a:5c:7b:90:69:72:f3:6e:01:59:
37:14:97:07:b7:f9:9f:35:11:c8:4f:c2:a3:53:64:94:bc:c7:
19:ea:09:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4Wg3hgZhUxjsLTbgg1BkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Y2VhYTYyNmNiZDg5MDUyZjM1NDUzMzVkZmRiMzFhMTMz
ODMwMDQwHhcNMjUwNTEwMDQwMDMxWhcNMjUwNTExMDQwMDMxWjAzMTEwLwYDVQQD
EyhlNTM1ZTkzMDVkM2Y0MjUxNGI0MzhjNDAxOGJjOTgyMTdiMjhmZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UHNYLsmYw02grzkJThfLfhyHPAY
yDayzZkJ7bY+gq2GR5tvvfQ8aRq+K1QSJwThOPCpqiPfJNbT4wK2b33RkzT74IGf
Hmalj5K6c/Oz3I7LnnfbQr86HoLL4WQQWlBROL3FwUCuuxmsGgI+D7t0H/YXfNL7
asYh1cBm8AebD/5ldxvtkAoK6Dp0LxcCXC/0gpq/P0xTlVrJTbH49FQw8cs8uFG7
z78GcXEGahXzou3S6B5FEOoZy/hNeOcjWTGCOdo5NeP/RU1MsTTY5HSrtkYUszuC
15EJs9DyVm0D+2abW+wfM1x2HgYYMWpG7RrBEMKgtyXELjcR5jYN7nWqEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOU16TBdP0JRS0OMQBi8mCF7KP3dMB8GA1UdIwQY
MBaAFDfOqmJsvYkFLzVFM139sxoTODAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAt
ZTE1YThiNzBlOGQyLzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAtZTE1YThiNzBlOGQy
LzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotrlSrak
Bg+4DTDObHYHdZQq4TbLIrDOSWjSZdB7xLIBb7YLdqPhSVpOP7tmDz9QA9tXKUyW
vhjWj+wjJNEa8xAj5YEAx+qNwkBfwZFrrdF16eGcPvXpZodHPve86u74c5xtneqG
TUTMLm+JjOvjGOejIitIKsc5xMPB8rdsdV94PGDqPbAFN3Iri1mZMGVOknFdDtAB
EEPTa1RXEi7denyMwJUw4JCReF0UkL9iYglyovMyCz+uiVNnEF+tBHdRzpj2qVv0
t2CVLyvv4Cw9JWthFsOe7iC6mCYbcM6zEp4aXHuQaXLzbgFZNxSXB7f5nzURyE/C
o1NklLzHGeoJUQ==
-----END CERTIFICATE-----
Generated at Sat May 10 13:03:57 2025 by rpki-client