Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
File: nurBz77ElK6UV8hm5jYYZcTzAEg.mft (raw, json)
Hash identifier: 6ZbhELmzLIIbm6W5u9QzHGoYs+qWrqFl8Pvz1mwM5EQ=
Subject key identifier: 04:0F:22:89:A8:BF:F7:83:AE:5B:D2:D6:FB:60:F8:C9:D3:5A:9F:94
Authority key identifier: 9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
Certificate issuer: /CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Certificate serial: 0196B747B2BB349643FC4FCB6B14300ADB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
Manifest number: 0B2C
Signing time: Fri 09 May 2025 23:00:51 +0000
Manifest this update: Fri 09 May 2025 23:00:51 +0000
Manifest next update: Sat 10 May 2025 23:00:51 +0000
Files and hashes: 1: mmnZOOh4xZoAyB6ozP7dMz0vpOQ.roa (hash: MPgwr3P3oOg7+ut0sMgX1kiy6aK0r7pykdMfFbGH85I=)
2: nurBz77ElK6UV8hm5jYYZcTzAEg.crl (hash: nmat9F3Ch5NyQ0PfqQp9g6zfJigvhJg+/BEjI0cNlfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:b2:bb:34:96:43:fc:4f:cb:6b:14:30:0a:db:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Validity
Not Before: May 9 23:00:51 2025 GMT
Not After : May 10 23:00:51 2025 GMT
Subject: CN=040f2289a8bff783ae5bd2d6fb60f8c9d35a9f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:69:31:a6:8c:2b:0b:03:87:f1:be:f0:e9:1f:
b3:b9:43:e8:bb:15:62:c2:ce:dd:65:15:8b:4e:fe:
e0:eb:97:85:88:6b:c0:4b:2b:d1:b0:dc:04:55:a8:
5b:0d:43:5d:f7:f9:9f:09:fd:fb:4a:78:d3:81:e2:
a4:07:30:f3:df:f4:74:e9:6f:8a:d7:f0:c2:9b:93:
d4:4c:11:38:79:6e:d6:42:01:97:37:e6:1d:3f:d0:
ca:05:ac:79:cc:55:64:a6:4f:f9:56:50:42:9c:df:
11:56:8a:87:0c:63:81:60:64:f4:7d:a8:ba:5b:aa:
1a:6a:3a:26:96:3f:4d:94:67:57:64:89:c7:76:2f:
39:5a:bb:ee:1c:95:40:cf:51:20:df:30:f4:2f:91:
b2:84:53:c9:62:93:50:91:9f:c7:83:ff:10:65:e6:
ec:80:d0:38:14:d0:f3:3b:7d:6d:d1:ac:bc:2a:5c:
59:31:22:ca:18:a1:ab:9d:09:d1:85:72:b1:f5:b2:
0e:63:3b:bd:32:4b:84:b0:de:7a:9b:2e:53:63:8e:
69:15:4a:29:41:64:a3:e6:c0:85:9f:b2:c7:37:56:
be:f7:04:aa:5b:05:cc:b6:9b:9a:1b:76:22:46:94:
3b:66:4f:24:e2:84:6f:30:46:c3:af:99:c1:a8:51:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0F:22:89:A8:BF:F7:83:AE:5B:D2:D6:FB:60:F8:C9:D3:5A:9F:94
X509v3 Authority Key Identifier:
keyid:9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:92:bf:09:28:35:b7:0c:1b:73:9f:8f:eb:f4:eb:21:59:0d:
89:76:7b:a3:e6:6b:b8:53:76:df:3d:2e:dc:a5:d7:cc:4d:da:
d9:88:5d:53:e5:76:11:50:96:31:94:52:92:44:1a:7a:91:42:
e6:e4:9e:ff:fc:c7:39:5e:5d:9b:99:78:0e:9f:a9:cd:c7:76:
ef:ec:63:b4:c4:76:51:0f:a3:28:5c:36:01:b2:6b:af:11:25:
bb:81:7f:de:f4:8c:82:54:b9:31:61:18:27:88:da:1c:f9:38:
78:dc:48:3e:b9:00:68:01:a6:fe:04:66:80:fd:b6:f7:bd:d4:
bf:1b:f3:df:6d:37:c0:1f:11:71:bc:0c:f4:f7:6a:08:67:ef:
d3:ce:dc:09:57:f0:d9:6a:7e:b4:c1:76:91:43:a9:29:36:74:
71:a3:4a:9d:f9:a5:de:ee:65:c8:62:7c:a0:04:05:2f:a7:99:
c2:06:fc:1b:d4:e9:bc:19:b6:6d:43:b6:ef:66:e5:bb:a0:f7:
85:47:51:c2:72:11:aa:55:58:4f:ac:b3:5d:29:3d:2c:cd:df:
06:3c:ef:a7:ce:dd:c1:ec:6b:5c:44:26:c0:c0:21:7c:56:92:
30:4e:25:5a:d1:ed:ab:0a:c3:16:16:fd:12:ba:80:d4:8f:be:
99:aa:9f:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3R7K7NJZD/E/LaxQwCtuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWFjMWNmYmVjNDk0YWU5NDU3Yzg2NmU2MzYxODY1YzRm
MzAwNDgwHhcNMjUwNTA5MjMwMDUxWhcNMjUwNTEwMjMwMDUxWjAzMTEwLwYDVQQD
EygwNDBmMjI4OWE4YmZmNzgzYWU1YmQyZDZmYjYwZjhjOWQzNWE5Zjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WkxpowrCwOH8b7w6R+zuUPouxVi
ws7dZRWLTv7g65eFiGvASyvRsNwEVahbDUNd9/mfCf37SnjTgeKkBzDz3/R06W+K
1/DCm5PUTBE4eW7WQgGXN+YdP9DKBax5zFVkpk/5VlBCnN8RVoqHDGOBYGT0fai6
W6oaajomlj9NlGdXZInHdi85WrvuHJVAz1Eg3zD0L5GyhFPJYpNQkZ/Hg/8QZebs
gNA4FNDzO31t0ay8KlxZMSLKGKGrnQnRhXKx9bIOYzu9MkuEsN56my5TY45pFUop
QWSj5sCFn7LHN1a+9wSqWwXMtpuaG3YiRpQ7Zk8k4oRvMEbDr5nBqFE6ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQPIomov/eDrlvS1vtg+MnTWp+UMB8GA1UdIwQY
MBaAFJ7qwc++xJSulFfIZuY2GGXE8wBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQt
ZTI4NWNkOGNhZDEyLzEvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQtZTI4NWNkOGNhZDEy
LzEvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtpK/CSg1
twwbc5+P6/TrIVkNiXZ7o+ZruFN23z0u3KXXzE3a2YhdU+V2EVCWMZRSkkQaepFC
5uSe//zHOV5dm5l4Dp+pzcd27+xjtMR2UQ+jKFw2AbJrrxElu4F/3vSMglS5MWEY
J4jaHPk4eNxIPrkAaAGm/gRmgP22973Uvxvz3203wB8RcbwM9PdqCGfv087cCVfw
2Wp+tMF2kUOpKTZ0caNKnfml3u5lyGJ8oAQFL6eZwgb8G9TpvBm2bUO272blu6D3
hUdRwnIRqlVYT6yzXSk9LM3fBjzvp87dwexrXEQmwMAhfFaSME4lWtHtqwrDFhb9
ErqA1I++maqfzA==
-----END CERTIFICATE-----
Generated at Sat May 10 06:57:16 2025 by rpki-client