Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File: nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier: iHJGSp5Xc6KEnX0oZimTEdBvqrKXLVHT0gTeDVIasVI=
Subject key identifier: 6A:CE:68:87:2E:B1:D1:B8:2B:FA:C9:F4:60:D1:BD:FC:CB:42:5B:C1
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial: 0196C49581A1E7158E9E60A84AF2DC91E441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number: 04F3
Signing time: Mon 12 May 2025 13:00:54 +0000
Manifest this update: Mon 12 May 2025 13:00:54 +0000
Manifest next update: Tue 13 May 2025 13:00:54 +0000
Files and hashes: 1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: tzf3v+1ilUzExFgT9zxb7l0CoRnhWAeuObx0FXy538Y=)
2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:81:a1:e7:15:8e:9e:60:a8:4a:f2:dc:91:e4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Validity
Not Before: May 12 13:00:54 2025 GMT
Not After : May 13 13:00:54 2025 GMT
Subject: CN=6ace68872eb1d1b82bfac9f460d1bdfccb425bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:69:e0:48:30:8e:86:53:b8:91:02:07:d9:
5f:aa:69:1e:a7:8b:d9:87:d3:c1:ec:06:d2:2e:0b:
70:ef:71:5c:ca:80:64:d4:01:49:7a:a3:ed:4a:78:
df:1e:68:ac:cd:f4:8a:46:63:8b:db:c0:1d:7d:89:
17:89:a1:1c:b3:e9:bb:05:e6:e4:4a:9a:a8:76:bd:
fd:81:e6:bb:f0:99:30:42:fa:e3:c6:85:20:89:a7:
e6:86:47:71:12:19:d7:b6:33:b5:7b:5c:81:5c:38:
c7:31:52:a6:f3:cc:2f:3d:4c:10:18:de:90:27:e8:
72:e9:e8:a1:57:ff:4f:e0:1e:e5:3e:19:38:b4:ea:
5c:f7:6e:ca:ea:34:a9:14:aa:cf:69:77:6f:91:57:
45:53:df:60:a9:66:60:22:fa:b9:33:3b:10:ca:99:
b1:64:90:c2:0e:7f:8f:6c:c9:08:aa:74:18:ff:a4:
10:df:56:f7:28:38:57:d5:a8:7e:ff:91:02:b6:05:
65:50:88:8e:52:83:ea:5b:08:01:34:5c:fe:93:33:
c6:6d:77:09:33:12:00:4f:5e:23:96:51:55:c7:aa:
d0:18:45:f7:5b:4d:f8:b1:99:37:a0:38:9a:b7:64:
71:12:1d:24:83:68:f2:ab:f0:32:2c:ca:5c:c8:35:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CE:68:87:2E:B1:D1:B8:2B:FA:C9:F4:60:D1:BD:FC:CB:42:5B:C1
X509v3 Authority Key Identifier:
keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fa:80:d3:e8:c5:74:2d:8b:e0:00:0d:48:5a:e4:6d:87:66:
55:cb:a5:53:89:f8:1e:ca:31:b9:a5:37:57:10:3d:9b:e5:c1:
20:be:32:1e:3b:82:29:44:43:6d:5e:ad:3b:b6:00:8e:73:fe:
8e:4b:74:ae:6c:18:10:c8:fb:13:f9:df:d2:65:5a:45:98:58:
fa:ef:fa:2f:f8:8f:11:d5:ea:a3:3a:59:98:7d:cf:44:ee:40:
00:cd:fe:fb:fb:3f:b3:e4:a4:70:81:56:48:c8:49:16:4b:5c:
71:d2:82:71:97:c1:22:1d:0a:7b:85:9e:04:bb:95:48:97:21:
0f:30:3c:1d:0c:0a:45:cc:e4:5b:3c:0f:ca:5b:bb:9e:15:ca:
e0:ca:dc:d9:9a:3b:69:6e:1b:80:e7:22:0c:67:52:2b:b7:38:
a3:46:e9:dc:4a:bd:2b:eb:33:69:c9:85:aa:c0:5b:e2:1a:cf:
7e:e2:de:8d:c6:a6:1a:e9:6d:47:3b:32:22:d5:52:8d:74:aa:
d9:ab:f3:4a:b7:1a:a4:b3:6f:cb:6b:64:ad:a1:47:b5:09:5f:
58:2a:7d:b9:74:6b:52:6a:73:7c:43:c2:06:0e:20:77:13:30:
ea:2c:05:5a:07:72:db:9d:e7:cd:d4:0d:15:b7:8d:6f:9f:03:
88:6e:38:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbElYGh5xWOnmCoSvLckeRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljY2Y1M2YxZTBhZTZmNWYzM2RiY2Y4MGVhOGM3NDFmNjgy
NDg1ZmUwHhcNMjUwNTEyMTMwMDU0WhcNMjUwNTEzMTMwMDU0WjAzMTEwLwYDVQQD
Eyg2YWNlNjg4NzJlYjFkMWI4MmJmYWM5ZjQ2MGQxYmRmY2NiNDI1YmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHxp4EgwjoZTuJECB9lfqmkep4vZ
h9PB7AbSLgtw73FcyoBk1AFJeqPtSnjfHmiszfSKRmOL28AdfYkXiaEcs+m7Bebk
Spqodr39gea78JkwQvrjxoUgiafmhkdxEhnXtjO1e1yBXDjHMVKm88wvPUwQGN6Q
J+hy6eihV/9P4B7lPhk4tOpc927K6jSpFKrPaXdvkVdFU99gqWZgIvq5MzsQypmx
ZJDCDn+PbMkIqnQY/6QQ31b3KDhX1ah+/5ECtgVlUIiOUoPqWwgBNFz+kzPGbXcJ
MxIAT14jllFVx6rQGEX3W034sZk3oDiat2RxEh0kg2jyq/AyLMpcyDUskQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrOaIcusdG4K/rJ9GDRvfzLQlvBMB8GA1UdIwQY
MBaAFJzPU/Hgrm9fM9vPgOqMdB9oJIX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi84ZDY2NmQtMDZhYi00NGQyLWE2YTUt
YWY2MzVkODc1NTc1LzEvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi84ZDY2NmQtMDZhYi00NGQyLWE2YTUtYWY2MzVkODc1NTc1
LzEvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfqA0+jF
dC2L4AANSFrkbYdmVculU4n4HsoxuaU3VxA9m+XBIL4yHjuCKURDbV6tO7YAjnP+
jkt0rmwYEMj7E/nf0mVaRZhY+u/6L/iPEdXqozpZmH3PRO5AAM3++/s/s+SkcIFW
SMhJFktccdKCcZfBIh0Ke4WeBLuVSJchDzA8HQwKRczkWzwPylu7nhXK4Mrc2Zo7
aW4bgOciDGdSK7c4o0bp3Eq9K+szacmFqsBb4hrPfuLejcamGultRzsyItVSjXSq
2avzSrcapLNvy2tkraFHtQlfWCp9uXRrUmpzfEPCBg4gdxMw6iwFWgdy253nzdQN
FbeNb58DiG44bQ==
-----END CERTIFICATE-----
Generated at Mon May 12 15:43:52 2025 by rpki-client