Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: 4/P32n0iIefLsJh49RCNqxdrIjtL7OSrRNaBlDaUVu0=
Subject key identifier: FA:FC:0A:BC:F4:12:CB:BA:33:54:2D:2B:02:49:DF:0F:88:93:62:EC
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 0196BF382A9CD4B91B975DA55787F85B7296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 067E
Signing time: Sun 11 May 2025 12:00:51 +0000
Manifest this update: Sun 11 May 2025 12:00:51 +0000
Manifest next update: Mon 12 May 2025 12:00:51 +0000
Files and hashes: 1: N2qV5YQb5W1epd7drhbbYWeDzW0.roa (hash: s6taKOmCqNjm3LC9TGmDbV/25/St/aCUYh2vIUbEIS0=)
2: PLSWkynWBozVrtkmXuniU53IS9U.roa (hash: Lsv4VTZqkFzdhWhhIHv70pB07NRxNMMpNt1Lwv3O/w4=)
3: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: XnxOVbQKk68ZwXZTjyO+wZo361PygZjINS4UEbim/5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:38:2a:9c:d4:b9:1b:97:5d:a5:57:87:f8:5b:72:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: May 11 12:00:51 2025 GMT
Not After : May 12 12:00:51 2025 GMT
Subject: CN=fafc0abcf412cbba33542d2b0249df0f889362ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:b3:65:b2:b9:46:c1:dc:9a:dd:f9:48:c5:
45:a8:cc:28:51:e6:b5:5b:fb:af:c2:16:86:10:9c:
02:9c:8c:11:bf:82:5d:1d:6e:7f:b0:18:3e:b5:19:
e7:e4:4b:ff:71:a7:a3:e0:05:b4:d3:f1:59:f3:e1:
5f:ea:fe:80:fc:6d:dc:b9:1c:e7:13:47:5e:a7:3a:
c5:79:4f:39:05:cd:6e:c4:00:af:14:96:d4:5c:02:
6e:0b:52:b3:f2:92:13:ef:3e:22:7e:af:3f:47:f0:
f1:15:2d:7b:e4:83:63:f5:27:45:f2:aa:58:b0:a4:
d9:89:59:3d:2a:cf:8c:7f:ca:dd:65:b8:df:ba:ea:
28:0e:ff:3e:c6:f2:aa:0f:c7:86:60:30:9f:80:18:
15:e8:a0:66:64:5d:5a:29:b5:e5:66:d0:b9:b6:66:
77:85:55:d6:1e:6d:62:70:fd:e1:21:e2:13:33:ba:
e8:57:14:5f:d4:1b:52:ed:84:e4:60:5d:ef:3d:0c:
ae:65:58:2e:61:78:3d:70:5f:92:55:ef:3d:8e:0f:
5f:1f:2d:54:2b:87:5c:31:9d:66:d8:29:ba:c4:10:
b1:5e:b2:bb:35:1b:94:52:c9:7d:d9:c7:0a:29:4f:
6f:87:28:52:58:11:94:0c:ee:7a:95:ee:aa:79:41:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FC:0A:BC:F4:12:CB:BA:33:54:2D:2B:02:49:DF:0F:88:93:62:EC
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3a:c1:60:cc:cb:85:00:c6:8a:bd:78:19:a0:3e:90:43:99:
f9:c5:9e:fc:5e:8d:e2:20:41:04:cd:a1:3c:c4:fb:5e:82:a3:
d4:9d:d1:ec:0b:2d:c0:a5:e8:ea:08:ae:52:09:03:a3:e6:8a:
69:1e:f8:6e:e1:d3:7c:b2:45:72:d5:be:20:1f:89:45:f6:6b:
f6:5c:78:0b:5f:f6:28:ed:c7:f0:64:62:fa:20:e9:40:c3:d1:
30:b7:e9:d5:4a:e3:3f:65:47:a4:49:3b:6b:2f:fa:e9:0d:83:
e5:00:dc:62:1e:06:93:49:48:00:d1:49:85:69:5c:5e:a5:cf:
68:00:bc:da:ea:51:cd:df:6f:bc:c5:98:fc:93:6c:71:46:2a:
e3:f9:b3:5b:41:d4:c8:1c:0c:bb:90:db:20:4b:7f:57:62:b4:
60:7a:23:ad:7d:fc:d9:d3:df:81:0e:c0:ec:a5:23:35:d4:a5:
62:a8:8b:58:32:b2:b3:b7:60:2a:03:ac:e5:a8:82:0d:17:a0:
28:40:ba:b9:84:93:76:78:06:d8:20:88:09:20:ca:4f:2f:75:
20:c1:ad:1f:0f:15:82:22:06:01:ea:84:6d:0e:ab:40:4a:5b:
01:eb:52:76:df:c1:6e:a8:06:18:85:b8:f1:b0:2f:1a:98:fd:
e2:69:a5:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/OCqc1Lkbl12lV4f4W3KWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMWFjYTM0MTYzNTE2NmY4MDJmOThhOTdlMDAyODBjY2Vl
NjRjZTIwHhcNMjUwNTExMTIwMDUxWhcNMjUwNTEyMTIwMDUxWjAzMTEwLwYDVQQD
EyhmYWZjMGFiY2Y0MTJjYmJhMzM1NDJkMmIwMjQ5ZGYwZjg4OTM2MmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKKzZbK5RsHcmt35SMVFqMwoUea1
W/uvwhaGEJwCnIwRv4JdHW5/sBg+tRnn5Ev/caej4AW00/FZ8+Ff6v6A/G3cuRzn
E0depzrFeU85Bc1uxACvFJbUXAJuC1Kz8pIT7z4ifq8/R/DxFS175INj9SdF8qpY
sKTZiVk9Ks+Mf8rdZbjfuuooDv8+xvKqD8eGYDCfgBgV6KBmZF1aKbXlZtC5tmZ3
hVXWHm1icP3hIeITM7roVxRf1BtS7YTkYF3vPQyuZVguYXg9cF+SVe89jg9fHy1U
K4dcMZ1m2Cm6xBCxXrK7NRuUUsl92ccKKU9vhyhSWBGUDO56le6qeUF7NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPr8Crz0Esu6M1QtKwJJ3w+Ik2LsMB8GA1UdIwQY
MBaAFJ4ayjQWNRZvgC+YqX4AKAzO5kziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmhyS05CWTFGbS1BTDVpcGZnQW9ETTdtVE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83OWZiYzAtMzM1MS00ZmZmLWI5ZDUt
NzU1NjFjYmYxMDRkLzEvbmhyS05CWTFGbS1BTDVpcGZnQW9ETTdtVE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS83OWZiYzAtMzM1MS00ZmZmLWI5ZDUtNzU1NjFjYmYxMDRk
LzEvbmhyS05CWTFGbS1BTDVpcGZnQW9ETTdtVE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTrBYMzL
hQDGir14GaA+kEOZ+cWe/F6N4iBBBM2hPMT7XoKj1J3R7AstwKXo6giuUgkDo+aK
aR74buHTfLJFctW+IB+JRfZr9lx4C1/2KO3H8GRi+iDpQMPRMLfp1UrjP2VHpEk7
ay/66Q2D5QDcYh4Gk0lIANFJhWlcXqXPaAC82upRzd9vvMWY/JNscUYq4/mzW0HU
yBwMu5DbIEt/V2K0YHojrX382dPfgQ7A7KUjNdSlYqiLWDKys7dgKgOs5aiCDReg
KEC6uYSTdngG2CCICSDKTy91IMGtHw8VgiIGAeqEbQ6rQEpbAetSdt/BbqgGGIW4
8bAvGpj94mmlqQ==
-----END CERTIFICATE-----
Generated at Sun May 11 15:28:54 2025 by rpki-client