Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
File: NIWdiibI6Ih3f06AGyC3hd7mVM8.mft (raw, json)
Hash identifier: tYQL0G/4GJY1qomMfrRnMZHqQ19dH/CMkkOoAGfY8xc=
Subject key identifier: FE:E0:11:C7:64:AE:B7:ED:DB:50:42:A2:5A:9A:BE:EE:34:E2:54:5F
Authority key identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
Certificate issuer: /CN=34859d8a26c8e888777f4e801b20b785dee654cf
Certificate serial: 0196E1C420F110C867E347FD77B3FE2FDEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
Manifest number: 1255
Signing time: Sun 18 May 2025 05:00:49 +0000
Manifest this update: Sun 18 May 2025 05:00:49 +0000
Manifest next update: Mon 19 May 2025 05:00:49 +0000
Files and hashes: 1: KBPaX26T74rF_b98D5vbCS4Nuz0.roa (hash: nU2QowOmWztQQgJHXXYPFT8tIem+quPQmedvSFuZH+I=)
2: NIWdiibI6Ih3f06AGyC3hd7mVM8.crl (hash: lvTNN+T9t474Bi7foZsm1XZsQbOlXQOyKXZm3mzgKZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 21:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e1:c4:20:f1:10:c8:67:e3:47:fd:77:b3:fe:2f:de:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34859d8a26c8e888777f4e801b20b785dee654cf
Validity
Not Before: May 18 05:00:49 2025 GMT
Not After : May 19 05:00:49 2025 GMT
Subject: CN=fee011c764aeb7eddb5042a25a9abeee34e2545f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:ec:75:8c:c5:f7:79:ca:d8:86:eb:0a:a3:
36:aa:bc:4f:1d:80:23:b9:3d:e6:32:54:85:d1:86:
1e:a1:e5:dc:25:f8:1c:58:2b:75:5a:e0:3b:8b:06:
57:3d:4a:b9:6b:b9:b8:66:67:91:24:ce:d4:58:f7:
1c:e5:4c:24:af:b8:12:37:17:c7:cc:cd:39:5f:2c:
2b:5e:7e:fb:e8:40:e4:6b:69:c3:eb:9a:27:0f:d2:
82:7e:d8:ab:fa:8c:45:8c:92:d4:5e:ae:c8:5a:ef:
d1:b1:48:71:bd:06:3d:88:88:6c:bc:c7:7a:27:28:
6a:e3:a2:12:a2:ef:40:59:cf:3b:94:d8:85:31:7d:
7f:7f:d3:f8:f4:3b:c5:06:98:ab:a2:de:34:58:d0:
d1:08:3c:a8:2b:81:54:1c:c1:8c:ce:5c:bf:c1:c0:
f5:b0:fa:f1:a1:fd:ec:26:8d:f4:6a:38:f2:7f:42:
e1:64:52:9f:b2:ac:10:7e:de:1f:52:5e:79:08:08:
27:c5:fe:94:6d:b7:a7:b6:fa:ab:70:0c:0b:f4:8d:
28:62:1e:ac:12:c5:5c:a7:22:7d:58:95:b7:23:74:
5e:13:d0:ef:7a:df:5c:b3:d8:e3:0e:58:9d:49:2b:
28:2d:10:a9:90:82:8c:02:c8:5b:6b:3a:d7:4a:02:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:11:C7:64:AE:B7:ED:DB:50:42:A2:5A:9A:BE:EE:34:E2:54:5F
X509v3 Authority Key Identifier:
keyid:34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b4:c7:ba:02:bc:06:18:db:b4:25:47:65:91:2c:6e:57:3c:
1a:f7:d7:b7:b6:9a:b3:4a:79:c0:16:92:7a:73:45:35:4f:b7:
e2:e2:8a:17:5d:ab:70:56:b1:28:5f:ce:56:8d:1f:66:9d:d2:
29:28:39:ed:3b:9a:79:d8:1f:af:4b:37:9b:66:12:f2:fe:7e:
c4:2d:85:5e:de:22:3f:44:cf:7a:f1:6e:76:33:f6:b9:97:f2:
a2:74:89:82:4f:bc:da:28:2c:67:9d:73:19:d4:6a:53:f3:ae:
3b:6b:b9:8a:27:a3:d4:ad:44:e7:21:b5:1e:38:af:09:54:d9:
fb:b1:9f:c7:6d:16:39:5d:8e:f1:f3:e9:c8:fa:a7:83:92:ba:
3d:5c:c0:6b:a4:6c:00:d6:57:ed:67:83:1f:c9:b3:d9:bb:1a:
f1:57:39:8b:03:46:83:a4:4a:80:8f:80:74:57:76:ab:6a:f1:
05:04:6d:80:42:08:c6:cc:4b:2a:df:c5:1e:9b:4b:55:d6:9a:
e1:d2:f3:07:a8:bd:94:94:f9:ba:f0:20:bd:f9:02:64:9d:85:
f1:5f:bf:90:08:33:a5:d7:3f:3a:18:22:15:e9:fa:13:23:71:
0f:49:c5:46:88:d4:2b:e0:ea:ef:af:08:ca:a5:b8:1f:82:cb:
3c:ba:32:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbhxCDxEMhn40f9d7P+L974MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ODU5ZDhhMjZjOGU4ODg3NzdmNGU4MDFiMjBiNzg1ZGVl
NjU0Y2YwHhcNMjUwNTE4MDUwMDQ5WhcNMjUwNTE5MDUwMDQ5WjAzMTEwLwYDVQQD
EyhmZWUwMTFjNzY0YWViN2VkZGI1MDQyYTI1YTlhYmVlZTM0ZTI1NDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O7sdYzF93nK2IbrCqM2qrxPHYAj
uT3mMlSF0YYeoeXcJfgcWCt1WuA7iwZXPUq5a7m4ZmeRJM7UWPcc5Uwkr7gSNxfH
zM05XywrXn776EDka2nD65onD9KCftir+oxFjJLUXq7IWu/RsUhxvQY9iIhsvMd6
Jyhq46ISou9AWc87lNiFMX1/f9P49DvFBpirot40WNDRCDyoK4FUHMGMzly/wcD1
sPrxof3sJo30ajjyf0LhZFKfsqwQft4fUl55CAgnxf6UbbentvqrcAwL9I0oYh6s
EsVcpyJ9WJW3I3ReE9Dvet9cs9jjDlidSSsoLRCpkIKMAshbazrXSgKXJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7gEcdkrrft21BColqavu404lRfMB8GA1UdIwQY
MBaAFDSFnYomyOiId39OgBsgt4Xe5lTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83OGZlZmMtZTljNS00YzZiLTllY2Qt
MTg3MjNjODQxMTIxLzEvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83OGZlZmMtZTljNS00YzZiLTllY2QtMTg3MjNjODQxMTIx
LzEvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx7THugK8
BhjbtCVHZZEsblc8GvfXt7aas0p5wBaSenNFNU+34uKKF12rcFaxKF/OVo0fZp3S
KSg57Tuaedgfr0s3m2YS8v5+xC2FXt4iP0TPevFudjP2uZfyonSJgk+82igsZ51z
GdRqU/OuO2u5iiej1K1E5yG1HjivCVTZ+7Gfx20WOV2O8fPpyPqng5K6PVzAa6Rs
ANZX7WeDH8mz2bsa8Vc5iwNGg6RKgI+AdFd2q2rxBQRtgEIIxsxLKt/FHptLVdaa
4dLzB6i9lJT5uvAgvfkCZJ2F8V+/kAgzpdc/OhgiFen6EyNxD0nFRojUK+Dq768I
yqW4H4LLPLoy4Q==
-----END CERTIFICATE-----
Generated at Sun May 18 07:48:30 2025 by rpki-client