Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json)
Hash identifier: 6TOk7mbl2mZlAcXUP+pgDQGnltDMgzUcSKXOcAgTm/8=
Subject key identifier: 2E:26:7E:AC:7D:63:A8:54:FA:20:85:95:E5:FD:35:F1:D4:98:77:B7
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial: 01969ED0F55D1613CC17266A8959437639A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
Manifest number: 08B0
Signing time: Mon 05 May 2025 05:00:16 +0000
Manifest this update: Mon 05 May 2025 05:00:16 +0000
Manifest next update: Tue 06 May 2025 05:00:16 +0000
Files and hashes: 1: EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa (hash: YaLUi/WCyF+z1PE1hT5J9Z4ZVraA/YT5/9yCeg4jCDs=)
2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: mizCyC6PZr7F0fIro8ILuKXK8pit6fZqGO5Q1s/Rd38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d0:f5:5d:16:13:cc:17:26:6a:89:59:43:76:39:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Validity
Not Before: May 5 05:00:16 2025 GMT
Not After : May 6 05:00:16 2025 GMT
Subject: CN=2e267eac7d63a854fa208595e5fd35f1d49877b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:06:69:11:6b:e9:37:00:d7:a8:d6:87:37:
83:0b:79:10:3e:a6:cd:1d:e0:1b:c0:92:f7:86:b4:
f6:0f:34:ab:91:c1:2c:5e:c2:f7:52:b6:b4:34:8e:
13:0f:23:11:80:33:0c:4f:36:1c:83:f1:96:62:c8:
02:ca:26:71:8a:32:ac:4f:d7:0d:80:74:95:c5:c1:
7f:4c:51:55:b6:ce:06:53:3e:e3:2c:c0:83:a4:03:
48:e6:6b:c5:51:11:f5:c0:3c:80:19:01:25:41:f0:
7f:77:73:cb:b9:92:b2:18:07:dc:ab:08:f4:a0:44:
cd:2c:9a:9b:9e:a4:5e:ac:1e:3d:79:85:6c:e5:16:
44:00:7d:66:12:1d:4a:c2:8d:49:67:1d:5a:b9:30:
bd:a5:0e:1f:1e:90:f6:f7:47:1f:a7:3f:ea:1f:62:
2c:d6:5b:9d:91:99:64:c7:c2:77:ec:a3:26:6f:d9:
51:12:77:d5:03:5e:8a:ea:3e:5f:09:39:50:5f:82:
61:2e:a7:e2:ac:8a:8d:80:ca:13:76:86:42:4f:a6:
4a:99:f9:cb:e0:88:59:e1:3d:f5:9f:28:ce:70:db:
c2:8b:22:35:0b:70:ec:77:df:64:07:c3:2e:95:b9:
c5:5b:aa:f5:20:62:e6:0b:89:e3:f4:2e:bd:49:e7:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:26:7E:AC:7D:63:A8:54:FA:20:85:95:E5:FD:35:F1:D4:98:77:B7
X509v3 Authority Key Identifier:
keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1f:5b:0d:58:e4:5c:c1:d4:86:f9:16:95:7d:cf:8e:5f:5d:
11:d0:d9:58:2b:e7:89:de:de:5e:15:08:92:18:24:d7:d8:fe:
ca:a1:5e:b6:bc:f2:26:2e:d4:70:b3:37:18:6e:b0:31:bc:be:
2f:0a:32:3d:4c:78:71:70:0a:53:b4:ad:d7:cc:48:dd:d2:7e:
77:e0:04:ed:15:02:4b:c1:f9:e1:73:ce:47:31:2d:7d:d2:90:
90:10:cd:15:df:44:ad:f4:8a:83:cc:33:46:52:0d:b7:90:f4:
ea:45:35:e7:a5:10:78:f6:10:60:eb:74:c1:b4:a7:ba:75:54:
d2:fd:5b:27:9f:b2:92:4d:03:94:2d:bf:e9:2f:1f:d9:0c:c7:
ae:27:3a:fd:cb:2e:36:8e:1d:4a:d6:35:cd:45:d0:66:57:32:
e4:ad:50:5b:63:d2:3c:ef:76:03:24:5e:42:b5:08:ee:22:43:
6b:9d:bf:b0:17:cc:95:4c:e5:b2:dc:fc:03:d7:48:47:85:98:
95:55:75:1d:3d:33:0a:84:bb:2c:2e:e0:58:06:0d:d9:c5:8b:
ec:bf:55:25:86:10:75:f1:07:77:a7:6c:ac:cc:36:b9:a5:a5:
3f:73:fa:a9:d4:0b:54:36:0f:34:26:29:a3:5a:62:43:e7:0f:
04:26:32:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZae0PVdFhPMFyZqiVlDdjmnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjM1ZTM4M2U5Y2Q0NGE3MjQ5YWM1ZDQxYjZkZmFkZjQz
NTdiNGYwHhcNMjUwNTA1MDUwMDE2WhcNMjUwNTA2MDUwMDE2WjAzMTEwLwYDVQQD
EygyZTI2N2VhYzdkNjNhODU0ZmEyMDg1OTVlNWZkMzVmMWQ0OTg3N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngMGaRFr6TcA16jWhzeDC3kQPqbN
HeAbwJL3hrT2DzSrkcEsXsL3Ura0NI4TDyMRgDMMTzYcg/GWYsgCyiZxijKsT9cN
gHSVxcF/TFFVts4GUz7jLMCDpANI5mvFURH1wDyAGQElQfB/d3PLuZKyGAfcqwj0
oETNLJqbnqRerB49eYVs5RZEAH1mEh1Kwo1JZx1auTC9pQ4fHpD290cfpz/qH2Is
1ludkZlkx8J37KMmb9lREnfVA16K6j5fCTlQX4JhLqfirIqNgMoTdoZCT6ZKmfnL
4IhZ4T31nyjOcNvCiyI1C3Dsd99kB8MulbnFW6r1IGLmC4nj9C69SefdwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4mfqx9Y6hU+iCFleX9NfHUmHe3MB8GA1UdIwQY
MBaAFK/zXjg+nNRKckmsXUG23630NXtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTIt
NTcwYWVkNThjMTk0LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTItNTcwYWVkNThjMTk0
LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfh9bDVjk
XMHUhvkWlX3Pjl9dEdDZWCvnid7eXhUIkhgk19j+yqFetrzyJi7UcLM3GG6wMby+
LwoyPUx4cXAKU7St18xI3dJ+d+AE7RUCS8H54XPORzEtfdKQkBDNFd9ErfSKg8wz
RlINt5D06kU156UQePYQYOt0wbSnunVU0v1bJ5+ykk0DlC2/6S8f2QzHric6/csu
No4dStY1zUXQZlcy5K1QW2PSPO92AyReQrUI7iJDa52/sBfMlUzlstz8A9dIR4WY
lVV1HT0zCoS7LC7gWAYN2cWL7L9VJYYQdfEHd6dsrMw2uaWlP3P6qdQLVDYPNCYp
o1piQ+cPBCYyoA==
-----END CERTIFICATE-----
Generated at Mon May 5 09:14:52 2025 by rpki-client