Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier: 3o6/0zlQxq1X+3Yjwe0CFv388NAwicVn7GhEzvuiNVs=
Subject key identifier: 9B:4C:D6:89:CE:FE:98:32:7B:2E:6F:EB:CA:3F:E8:3E:81:4D:95:69
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 0196A240431E4615A19E70AFF14C79B180B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number: 0CB9
Signing time: Mon 05 May 2025 21:00:42 +0000
Manifest this update: Mon 05 May 2025 21:00:42 +0000
Manifest next update: Tue 06 May 2025 21:00:42 +0000
Files and hashes: 1: jjPkPnEOvwVnAAg20Sm72ha1828.roa (hash: qBKDLKoYMFIUxr740I0l1MbmN1H/LYeCtP9acHybLHY=)
2: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: zdMnPp8xmMyrPOmbdZH9Xaik53A9ewBxUHuO+5E59sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:43:1e:46:15:a1:9e:70:af:f1:4c:79:b1:80:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: May 5 21:00:42 2025 GMT
Not After : May 6 21:00:42 2025 GMT
Subject: CN=9b4cd689cefe98327b2e6febca3fe83e814d9569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:85:5e:c1:9a:34:61:b0:8c:f2:8a:76:e6:
5d:9a:e5:be:0f:9f:c1:2c:71:40:41:c2:76:9d:3f:
3a:73:e8:e4:4a:ae:09:7a:15:54:52:55:28:50:a3:
b6:be:52:13:b2:58:e1:4d:5d:3b:63:41:13:e2:db:
7a:43:5c:b6:8e:24:03:af:82:80:5e:20:59:e3:1e:
ed:34:6d:b8:26:00:d4:52:fe:a6:91:87:53:83:aa:
75:ab:7c:db:86:51:0a:3d:12:3f:d1:0a:95:6d:be:
c6:fb:c8:6c:dc:7d:4a:18:28:a2:92:17:c5:42:c3:
bc:6e:93:78:21:79:b9:4c:1d:41:bf:90:6f:70:7e:
07:8b:8c:54:4e:01:7a:8d:ad:46:8e:a0:04:ba:2a:
2f:92:72:c6:92:18:76:5e:8a:8f:4d:4f:5a:44:ae:
5c:90:d1:eb:54:90:9b:e5:46:f8:62:d0:4a:a1:91:
a1:11:e5:56:d2:7f:f3:28:98:00:e5:94:4e:13:1b:
87:8b:b6:78:a3:37:78:e1:52:96:29:4e:58:2c:c4:
69:2d:31:97:92:a2:d7:08:fa:28:dd:62:0d:19:de:
57:25:9b:23:49:70:c6:bf:8c:fd:be:a0:2f:c9:11:
d3:d2:9d:73:51:65:b4:c7:21:21:06:e5:35:22:f4:
f1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4C:D6:89:CE:FE:98:32:7B:2E:6F:EB:CA:3F:E8:3E:81:4D:95:69
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a5:03:8b:0b:d1:58:76:a9:84:1c:75:6a:60:27:df:83:32:
e1:e5:8f:eb:f7:1c:ab:8e:45:15:2d:a6:e5:2f:e0:dc:30:2f:
b5:64:b4:87:ee:e1:93:5a:ce:d5:d4:5f:9d:92:66:e0:dc:8b:
08:dc:88:1b:e1:1d:af:32:0c:b6:06:7f:4f:1f:2f:32:bd:66:
1c:19:e5:57:ae:25:a0:76:19:4a:2f:6c:ec:2e:43:56:5d:35:
22:ae:e4:db:aa:dc:e3:31:f4:28:06:3e:ec:4b:0f:ce:e3:07:
8d:8f:a4:f7:f9:14:5f:28:a3:90:3b:7f:be:c4:ce:26:fa:16:
58:c5:ab:13:4d:b0:3f:4a:4c:df:7c:9f:5f:c5:b5:a2:be:6a:
71:1c:1f:3d:32:a5:89:6a:05:db:8f:27:bd:5e:01:81:ca:c9:
00:38:4d:17:03:40:32:49:fc:ca:f9:35:10:ac:00:d4:1a:e1:
3f:f3:66:d3:13:0f:8f:a9:f4:81:38:58:d2:b5:e8:dc:de:0a:
21:4b:8b:f2:aa:9d:3a:6f:45:fd:38:0e:d1:76:dd:a3:bb:39:
b0:77:03:ce:a8:1f:cb:52:8d:a9:21:40:26:2b:0d:f1:17:ff:
33:5c:4f:9a:5c:16:80:a8:0d:67:9c:09:5c:3f:cf:ad:33:f0:
94:64:d6:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaiQEMeRhWhnnCv8Ux5sYC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTNlYjhhN2QxOWZmZDc4MDQ3NjVhY2ZkY2YyMjYwYzZj
MGQ2NTkwHhcNMjUwNTA1MjEwMDQyWhcNMjUwNTA2MjEwMDQyWjAzMTEwLwYDVQQD
Eyg5YjRjZDY4OWNlZmU5ODMyN2IyZTZmZWJjYTNmZTgzZTgxNGQ5NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0qFXsGaNGGwjPKKduZdmuW+D5/B
LHFAQcJ2nT86c+jkSq4JehVUUlUoUKO2vlITsljhTV07Y0ET4tt6Q1y2jiQDr4KA
XiBZ4x7tNG24JgDUUv6mkYdTg6p1q3zbhlEKPRI/0QqVbb7G+8hs3H1KGCiikhfF
QsO8bpN4IXm5TB1Bv5BvcH4Hi4xUTgF6ja1GjqAEuiovknLGkhh2XoqPTU9aRK5c
kNHrVJCb5Ub4YtBKoZGhEeVW0n/zKJgA5ZROExuHi7Z4ozd44VKWKU5YLMRpLTGX
kqLXCPoo3WINGd5XJZsjSXDGv4z9vqAvyRHT0p1zUWW0xyEhBuU1IvTxxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtM1onO/pgyey5v68o/6D6BTZVpMB8GA1UdIwQY
MBaAFJyT64p9Gf/XgEdlrP3PImDGwNZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jM2M0NWYtNWYxYy00N2YyLTkxMGQt
Mzk2YWQ3MDEyMzBlLzEvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jM2M0NWYtNWYxYy00N2YyLTkxMGQtMzk2YWQ3MDEyMzBl
LzEvbkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6UDiwvR
WHaphBx1amAn34My4eWP6/ccq45FFS2m5S/g3DAvtWS0h+7hk1rO1dRfnZJm4NyL
CNyIG+EdrzIMtgZ/Tx8vMr1mHBnlV64loHYZSi9s7C5DVl01Iq7k26rc4zH0KAY+
7EsPzuMHjY+k9/kUXyijkDt/vsTOJvoWWMWrE02wP0pM33yfX8W1or5qcRwfPTKl
iWoF248nvV4BgcrJADhNFwNAMkn8yvk1EKwA1BrhP/Nm0xMPj6n0gThY0rXo3N4K
IUuL8qqdOm9F/TgO0Xbdo7s5sHcDzqgfy1KNqSFAJisN8Rf/M1xPmlwWgKgNZ5wJ
XD/PrTPwlGTWBA==
-----END CERTIFICATE-----
Generated at Tue May 6 03:18:32 2025 by rpki-client