Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
File: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft (raw, json)
Hash identifier: 6HFn9gMmzFjK+tOBMBOExNY0YxLVdjx8Or1Lhz7+syY=
Subject key identifier: 8B:72:FF:29:63:E7:10:14:05:68:66:4A:81:72:E9:17:FB:F5:72:18
Authority key identifier: 9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
Certificate issuer: /CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Certificate serial: 0196C0B840FEF61A1E32C89D4B86A1BF67F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
Manifest number: 0C08
Signing time: Sun 11 May 2025 19:00:22 +0000
Manifest this update: Sun 11 May 2025 19:00:22 +0000
Manifest next update: Mon 12 May 2025 19:00:22 +0000
Files and hashes: 1: aRmXLbWgvqCrB_ieixDwg5bWHH4.roa (hash: NkuU0nUuwUULqqtGwJsRiK14f6VjdQm0HvAAtBo3GJQ=)
2: nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl (hash: IqIqr2s07l3pnu5/BG6+fd0GNyNxvJ4UGe8DQScOOUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:40:fe:f6:1a:1e:32:c8:9d:4b:86:a1:bf:67:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Validity
Not Before: May 11 19:00:22 2025 GMT
Not After : May 12 19:00:22 2025 GMT
Subject: CN=8b72ff2963e710140568664a8172e917fbf57218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:54:00:7a:34:d3:b9:8e:4f:98:b0:33:4a:
56:5b:e6:fe:15:bc:3a:a4:b4:49:71:83:9c:63:2a:
bc:34:4a:b8:ca:0e:65:29:d2:f7:b8:59:de:53:c8:
5b:8c:ff:be:47:15:1b:7e:14:8b:23:5e:d1:2f:5f:
31:2c:db:ab:5e:60:22:7c:dc:61:c3:ab:1a:6b:cf:
0a:30:97:f4:a5:a4:a8:a9:74:c1:9d:57:61:b1:13:
77:a8:14:c8:55:dd:05:d2:9b:d6:fe:57:8c:ef:3b:
10:b5:10:ad:0e:b4:4d:d9:7e:47:ba:47:44:a9:a6:
c7:9a:2f:a7:b5:f9:5b:15:e0:12:64:1f:53:d2:7c:
1c:95:95:31:04:5d:21:fd:42:3d:1f:9c:52:55:fc:
58:53:67:9e:b7:ef:a2:60:a3:1d:b6:76:9f:f0:95:
7d:b2:28:c1:75:88:ea:90:47:77:02:fc:7d:e8:4e:
d6:9e:2c:87:88:61:de:ab:0d:e7:15:c5:c4:00:3c:
4a:42:40:e1:56:94:b8:2e:61:63:25:88:fa:16:b1:
02:fb:c9:b2:ea:5a:86:2f:59:42:1d:4d:64:da:85:
1b:1a:d7:51:30:bf:bc:9b:9b:22:81:f0:19:6d:9f:
5e:43:4b:26:0c:d0:8d:c9:06:12:62:c5:5c:26:1d:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:72:FF:29:63:E7:10:14:05:68:66:4A:81:72:E9:17:FB:F5:72:18
X509v3 Authority Key Identifier:
keyid:9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c2:ec:a2:80:98:73:5f:a9:d5:4f:ed:f2:96:c0:ac:ca:fb:
7c:2d:e0:e8:5e:71:3a:fe:ab:ff:fd:2f:b8:9e:6a:d4:3f:c2:
14:d6:e9:35:47:9a:b1:69:34:f4:92:b7:1e:4d:e0:37:a1:5c:
05:a8:71:0d:dc:90:ef:7e:69:3c:d0:9c:c0:7e:1f:56:9e:f0:
36:1b:80:de:fd:66:66:e6:70:48:a4:b3:89:fa:b4:02:4a:fb:
7b:50:ed:c5:d2:dd:97:87:b1:be:d5:cf:59:ef:63:1e:9c:1c:
8a:85:ff:77:2d:00:b3:01:84:d4:48:d2:3c:0b:85:ca:7b:64:
35:23:2e:c4:59:2d:6e:87:dc:54:36:65:01:23:24:37:c8:7b:
91:22:ca:93:b3:0f:93:fd:b6:e3:2e:da:4a:a7:21:9e:b8:0f:
85:36:e8:27:79:1a:0d:2b:3f:4b:8a:6b:f0:9d:48:dd:b6:07:
bb:a3:dc:1d:08:ed:fd:be:95:a9:da:ec:32:7c:71:e2:04:da:
ba:5c:ae:ee:fa:dc:7b:e7:95:d6:d6:e0:5f:7a:37:89:11:2a:
c1:e2:dc:cb:a8:fa:46:13:ee:28:9e:44:60:f3:f4:b3:25:b3:
d3:d7:8e:dc:17:d6:ed:5b:e1:af:fa:bf:5e:22:e4:32:96:3e:
cd:be:24:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuED+9hoeMsidS4ahv2fxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMGUyYjllNjlmNTYyZGYxNGNmNzcyYmRlMDVmN2RhY2Rl
MjU5NjEwHhcNMjUwNTExMTkwMDIyWhcNMjUwNTEyMTkwMDIyWjAzMTEwLwYDVQQD
Eyg4YjcyZmYyOTYzZTcxMDE0MDU2ODY2NGE4MTcyZTkxN2ZiZjU3MjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwxUAHo007mOT5iwM0pWW+b+Fbw6
pLRJcYOcYyq8NEq4yg5lKdL3uFneU8hbjP++RxUbfhSLI17RL18xLNurXmAifNxh
w6saa88KMJf0paSoqXTBnVdhsRN3qBTIVd0F0pvW/leM7zsQtRCtDrRN2X5HukdE
qabHmi+ntflbFeASZB9T0nwclZUxBF0h/UI9H5xSVfxYU2eet++iYKMdtnaf8JV9
sijBdYjqkEd3Avx96E7WniyHiGHeqw3nFcXEADxKQkDhVpS4LmFjJYj6FrEC+8my
6lqGL1lCHU1k2oUbGtdRML+8m5sigfAZbZ9eQ0smDNCNyQYSYsVcJh0e2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIty/ylj5xAUBWhmSoFy6Rf79XIYMB8GA1UdIwQY
MBaAFJ0OK55p9WLfFM93K94F99rN4llhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yNWJlMmYtOTJlYi00Y2RlLWEyNDct
ZDhkYzM0MDM2Y2U3LzEvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yNWJlMmYtOTJlYi00Y2RlLWEyNDctZDhkYzM0MDM2Y2U3
LzEvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocLsooCY
c1+p1U/t8pbArMr7fC3g6F5xOv6r//0vuJ5q1D/CFNbpNUeasWk09JK3Hk3gN6Fc
BahxDdyQ735pPNCcwH4fVp7wNhuA3v1mZuZwSKSzifq0Akr7e1DtxdLdl4exvtXP
We9jHpwcioX/dy0AswGE1EjSPAuFyntkNSMuxFktbofcVDZlASMkN8h7kSLKk7MP
k/224y7aSqchnrgPhTboJ3kaDSs/S4pr8J1I3bYHu6PcHQjt/b6VqdrsMnxx4gTa
ulyu7vrce+eV1tbgX3o3iREqweLcy6j6RhPuKJ5EYPP0syWz09eO3BfW7Vvhr/q/
XiLkMpY+zb4kRQ==
-----END CERTIFICATE-----
Generated at Mon May 12 00:25:06 2025 by rpki-client