
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: EyA9gK3QL4o2aoqcVdyYdnQ+sOcsMcm7SsQpZ95TlMM=
Subject key identifier: 1D:2C:C6:85:4F:D6:B2:CE:82:12:C6:9D:96:52:B6:E2:20:92:84:09
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 0196CCF3CE20043E4DBDD8F789A336FCE949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 60
Signing time: Wed 14 May 2025 04:00:52 +0000
Manifest this update: Wed 14 May 2025 04:00:52 +0000
Manifest next update: Thu 15 May 2025 04:00:52 +0000
Files and hashes: 1: 5Be38N82i-kj4EuiNkalcK2iR3Q.roa (hash: J33WflhWlfLpbIfuokDfwd3Gd2ZFgGd5EDrdDXG7Eqc=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: FRq8laqs2og1zmvALlmr14VHIVY2iM76UqSKij6tCJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:ce:20:04:3e:4d:bd:d8:f7:89:a3:36:fc:e9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: May 14 04:00:52 2025 GMT
Not After : May 15 04:00:52 2025 GMT
Subject: CN=1d2cc6854fd6b2ce8212c69d9652b6e220928409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:69:64:e8:f0:dc:c8:b5:82:5c:7e:46:3e:ec:
0d:34:43:aa:78:17:90:99:e5:c9:79:b0:12:00:ce:
3f:16:c0:87:ef:98:cc:08:76:52:e6:74:a2:24:f4:
f1:e7:a3:24:fd:4b:9d:84:72:5a:37:7a:6b:00:b5:
94:90:d6:2c:e9:bb:ae:96:0e:98:b0:6f:de:dc:e8:
0e:db:d4:f1:26:c5:8b:98:e0:be:a6:a8:5c:89:b5:
69:7f:1d:a5:6c:e4:36:47:58:cf:b4:b2:ca:b8:f5:
3f:1a:2b:5d:86:d6:39:c0:c6:b1:c1:0c:4a:47:f9:
00:8b:ec:a2:e3:2b:2a:12:e7:ba:b3:a9:f9:bc:8a:
b1:d7:b9:32:2c:ab:9d:38:2b:fe:6f:9c:07:a5:a6:
dc:59:b1:cc:aa:8c:a4:f2:70:18:b6:97:21:b2:73:
6d:75:27:e9:63:f9:e7:50:4b:c6:13:79:bb:10:5d:
4b:bd:e2:74:6d:d2:cd:6f:97:79:49:88:9c:a1:10:
05:5b:5f:2d:25:71:5d:0f:8d:b9:7d:63:c8:64:24:
63:b3:8f:d2:6d:4a:7f:08:99:97:06:2f:c1:74:b9:
8d:bf:ed:3a:5f:a1:78:97:74:87:6e:81:06:df:0c:
b3:13:ae:c0:f0:69:ef:b2:e2:65:e0:dd:2c:87:d7:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2C:C6:85:4F:D6:B2:CE:82:12:C6:9D:96:52:B6:E2:20:92:84:09
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:97:6d:a9:e5:0a:ee:45:86:0a:0a:19:70:5b:2c:81:3e:17:
a8:33:fe:69:da:09:eb:57:67:4c:26:ce:19:8e:1f:30:ca:cf:
46:97:01:1f:4a:91:bf:f5:48:a9:a7:7c:dd:fa:8f:fb:0a:e8:
e8:f9:7a:61:11:ac:0a:e0:9a:e7:2c:7b:f1:eb:ee:8b:91:f2:
9d:e4:09:29:f5:f7:b0:e7:ca:16:f0:52:48:ac:a2:64:33:88:
bd:42:8f:ed:b8:26:44:c8:e4:5b:79:2a:0b:38:16:09:de:8b:
0b:31:28:45:6a:38:a2:03:2a:16:d2:6a:db:d7:cc:89:ab:d4:
94:77:96:b0:49:cc:36:71:d4:6a:e1:ab:fd:ad:39:ac:e8:0d:
4c:de:8d:0e:19:31:22:8b:03:fa:e4:fa:9e:d6:be:80:7b:c4:
a8:28:ac:3a:89:5e:30:2a:f8:4c:5a:7c:f8:a6:ba:dc:81:c3:
75:52:04:3b:ba:43:50:72:68:2c:eb:8c:d5:ab:90:ce:48:9e:
a9:ab:bd:59:36:4f:23:ce:67:68:9c:a2:b7:49:1f:2d:23:a1:
e9:db:71:e6:aa:aa:c5:b4:c4:9c:d3:8e:78:c7:a0:9b:f0:34:
62:9b:cb:bf:fc:5d:8f:bb:1a:ed:e2:e3:b7:67:91:aa:8f:33:
73:35:35:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbM884gBD5Nvdj3iaM2/OlJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNWVjY2U4Yzg3YzRmMGE3NWJhMjFlNWM4NGY2MjQxMjFl
MDhlMzIwHhcNMjUwNTE0MDQwMDUyWhcNMjUwNTE1MDQwMDUyWjAzMTEwLwYDVQQD
EygxZDJjYzY4NTRmZDZiMmNlODIxMmM2OWQ5NjUyYjZlMjIwOTI4NDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Glk6PDcyLWCXH5GPuwNNEOqeBeQ
meXJebASAM4/FsCH75jMCHZS5nSiJPTx56Mk/UudhHJaN3prALWUkNYs6buulg6Y
sG/e3OgO29TxJsWLmOC+pqhcibVpfx2lbOQ2R1jPtLLKuPU/GitdhtY5wMaxwQxK
R/kAi+yi4ysqEue6s6n5vIqx17kyLKudOCv+b5wHpabcWbHMqoyk8nAYtpchsnNt
dSfpY/nnUEvGE3m7EF1LveJ0bdLNb5d5SYicoRAFW18tJXFdD425fWPIZCRjs4/S
bUp/CJmXBi/BdLmNv+06X6F4l3SHboEG3wyzE67A8GnvsuJl4N0sh9fZzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0sxoVP1rLOghLGnZZStuIgkoQJMB8GA1UdIwQY
MBaAFJ1ezOjIfE8Kdboh5chPYkEh4I4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9iZWM3NTYtMWRmZS00Mzc0LTg2MDct
OWQ4ZjBlZjVjNTAzLzEvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9iZWM3NTYtMWRmZS00Mzc0LTg2MDctOWQ4ZjBlZjVjNTAz
LzEvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpdtqeUK
7kWGCgoZcFssgT4XqDP+adoJ61dnTCbOGY4fMMrPRpcBH0qRv/VIqad83fqP+wro
6Pl6YRGsCuCa5yx78evui5HyneQJKfX3sOfKFvBSSKyiZDOIvUKP7bgmRMjkW3kq
CzgWCd6LCzEoRWo4ogMqFtJq29fMiavUlHeWsEnMNnHUauGr/a05rOgNTN6NDhkx
IosD+uT6nta+gHvEqCisOoleMCr4TFp8+Ka63IHDdVIEO7pDUHJoLOuM1auQzkie
qau9WTZPI85naJyit0kfLSOh6dtx5qqqxbTEnNOOeMegm/A0YpvLv/xdj7sa7eLj
t2eRqo8zczU11A==
-----END CERTIFICATE-----
Generated at Wed May 14 14:15:39 2025 by rpki-client