Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier: PAqQo13rE3FbitE3gau3/VioeN2HGfslvyatZhEL4pM=
Subject key identifier: D6:FA:65:8D:32:D1:67:74:61:6A:8D:6A:6B:4B:4A:E0:D4:20:FA:59
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial: 0196CCBC5D4EA2EC084703CFDE67A8469B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number: 0224
Signing time: Wed 14 May 2025 03:00:18 +0000
Manifest this update: Wed 14 May 2025 03:00:18 +0000
Manifest next update: Thu 15 May 2025 03:00:18 +0000
Files and hashes: 1: If4EKlwd9K1sFMswbVmwiqIL9EU.roa (hash: Xi+2lm3juwWtv3l4CgI611xVpcAT1z+T6D2yne87CLU=)
2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: 7OMDhnQucddV3QgFkKt9TKZoXm9GxDiJcHmPmsCUD1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:bc:5d:4e:a2:ec:08:47:03:cf:de:67:a8:46:9b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Validity
Not Before: May 14 03:00:18 2025 GMT
Not After : May 15 03:00:18 2025 GMT
Subject: CN=d6fa658d32d16774616a8d6a6b4b4ae0d420fa59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:c1:42:57:25:d7:92:a0:04:84:ea:83:37:
02:1c:cb:4e:1a:cd:44:cf:8d:20:fc:f1:78:ea:e5:
37:03:18:87:8b:3e:77:98:5c:ff:38:ab:79:84:0a:
00:05:d0:ad:6b:ee:a6:26:47:39:17:9c:3f:61:f0:
eb:a8:dc:d9:53:eb:83:bd:c8:d8:f4:27:fd:b0:0f:
1e:a3:6b:6c:cd:4f:8c:bf:e9:2e:da:67:e4:d6:d9:
91:0d:78:2a:2e:7e:80:f4:2e:5b:8d:e1:e4:78:23:
c9:11:7b:d2:53:6f:a4:1c:03:b8:0e:4b:80:19:5e:
ee:53:2f:11:39:88:ff:f0:79:66:ec:4e:05:72:9a:
bc:64:7f:9d:51:5c:b9:32:28:ba:6e:6d:b3:11:b1:
eb:b6:58:80:60:83:2d:5f:e0:e0:3a:a7:39:9d:a1:
c6:5e:bc:80:d8:25:c3:a3:67:7b:0b:92:45:a0:24:
d3:78:58:df:09:11:aa:ed:45:da:da:86:aa:2e:c0:
d7:96:07:91:85:76:03:2d:95:15:f8:5e:d8:b8:cb:
13:b3:94:86:96:04:05:40:90:9d:10:d3:06:8d:b4:
02:9e:39:2f:c8:7b:52:bf:8e:80:83:ed:ba:7f:0a:
a1:22:ac:51:aa:a7:c2:1d:aa:5d:c5:fd:64:f7:2e:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FA:65:8D:32:D1:67:74:61:6A:8D:6A:6B:4B:4A:E0:D4:20:FA:59
X509v3 Authority Key Identifier:
keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e3:af:e5:ba:ca:21:35:1d:a9:70:24:0b:a0:07:d0:9a:67:
e2:cc:17:f9:2a:1c:52:ee:ef:8c:7f:6e:a1:d7:77:68:cf:1e:
91:a6:f7:3f:15:8b:8d:68:b5:60:12:52:9c:76:f6:80:41:55:
b3:9a:1a:51:1a:59:f9:6a:20:ca:e7:9b:fe:47:97:63:e5:75:
32:0c:96:7e:6b:d5:f2:66:d5:7c:7f:11:bb:c2:c1:f2:23:ce:
f4:1e:79:9f:db:d5:e5:0c:2e:1d:87:70:5e:05:b3:43:e5:68:
63:dc:1e:e0:cc:df:b5:29:8a:c9:ae:11:29:95:c0:65:3a:11:
81:19:2b:41:2d:2e:ae:1a:d2:e1:c4:da:a4:26:70:2f:ff:6d:
12:34:19:9d:f7:06:0e:3b:7a:5f:72:5a:8a:37:cb:30:c7:03:
b9:2e:d6:02:2b:6b:bc:ec:e3:9e:61:37:73:dc:1c:db:8a:d2:
21:6d:78:d7:9b:69:15:cc:95:68:1a:75:68:f7:ef:58:e8:87:
b5:8a:29:cf:50:0e:42:48:c5:9b:27:5a:33:92:63:ad:44:1d:
d6:19:8d:52:5a:5f:d7:fd:0f:3d:67:65:46:61:92:fb:40:58:
45:3f:a0:4c:7b:94:23:e1:d6:ff:a6:1d:20:fc:96:c5:93:6f:
fa:cb:3c:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbMvF1OouwIRwPP3meoRpsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTJhYTUzZDMyOTBhYTgwMzc5OTM1MzM1ZGI5ZmNjM2Zm
ZDI5YWEwHhcNMjUwNTE0MDMwMDE4WhcNMjUwNTE1MDMwMDE4WjAzMTEwLwYDVQQD
EyhkNmZhNjU4ZDMyZDE2Nzc0NjE2YThkNmE2YjRiNGFlMGQ0MjBmYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMPBQlcl15KgBITqgzcCHMtOGs1E
z40g/PF46uU3AxiHiz53mFz/OKt5hAoABdCta+6mJkc5F5w/YfDrqNzZU+uDvcjY
9Cf9sA8eo2tszU+Mv+ku2mfk1tmRDXgqLn6A9C5bjeHkeCPJEXvSU2+kHAO4DkuA
GV7uUy8ROYj/8Hlm7E4Fcpq8ZH+dUVy5Mii6bm2zEbHrtliAYIMtX+DgOqc5naHG
XryA2CXDo2d7C5JFoCTTeFjfCRGq7UXa2oaqLsDXlgeRhXYDLZUV+F7YuMsTs5SG
lgQFQJCdENMGjbQCnjkvyHtSv46Ag+26fwqhIqxRqqfCHapdxf1k9y4SzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNb6ZY0y0Wd0YWqNamtLSuDUIPpZMB8GA1UdIwQY
MBaAFJySqlPTKQqoA3mTUzXbn8w//SmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjIt
NDUwMzk1ZmI4OGZhLzEvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjItNDUwMzk1ZmI4OGZh
LzEvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuOv5brK
ITUdqXAkC6AH0Jpn4swX+SocUu7vjH9uodd3aM8ekab3PxWLjWi1YBJSnHb2gEFV
s5oaURpZ+Wogyueb/keXY+V1MgyWfmvV8mbVfH8Ru8LB8iPO9B55n9vV5QwuHYdw
XgWzQ+VoY9we4MzftSmKya4RKZXAZToRgRkrQS0urhrS4cTapCZwL/9tEjQZnfcG
Djt6X3JaijfLMMcDuS7WAitrvOzjnmE3c9wc24rSIW1415tpFcyVaBp1aPfvWOiH
tYopz1AOQkjFmydaM5JjrUQd1hmNUlpf1/0PPWdlRmGS+0BYRT+gTHuUI+HW/6Yd
IPyWxZNv+ss81A==
-----END CERTIFICATE-----
Generated at Wed May 14 07:52:59 2025 by rpki-client