Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
File: 0NhScDKV7Pi5cgH5FjEPiPTAirc.mft (raw, json)
Hash identifier: 1WuBTmBT1gIBkBOkRevrEfB5fVDzOYHBOv10qunWuco=
Subject key identifier: F8:53:B6:52:B6:FF:38:11:90:C6:09:53:38:CE:45:6F:0E:80:DF:28
Authority key identifier: D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
Certificate issuer: /CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Certificate serial: 0196C6F1A556228D8D5EB483048B45F3F9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 00:00:47 +0000
Manifest this update: Tue 13 May 2025 00:00:47 +0000
Manifest next update: Wed 14 May 2025 00:00:47 +0000
Files and hashes: 1: 0NhScDKV7Pi5cgH5FjEPiPTAirc.crl (hash: nfJnJGLmKLqrCnB6/yxM8qO4M8VD08hdLOyxw8dOba4=)
2: YlrLpRr6jHVjZjhSp57OuuJNoDA.roa (hash: 3sLpE4GcZV46VhUEypK4IVzC6Mp0SDmiK7VScSwFOfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:a5:56:22:8d:8d:5e:b4:83:04:8b:45:f3:f9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d852703295ecf8b97201f916310f88f4c08ab7
Validity
Not Before: May 13 00:00:47 2025 GMT
Not After : May 14 00:00:47 2025 GMT
Subject: CN=f853b652b6ff381190c6095338ce456f0e80df28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:6f:0a:6f:03:86:7c:53:f1:4c:1c:b6:84:
38:1e:ee:39:27:cc:d9:cb:31:d3:ff:e1:7a:b0:26:
dc:4b:14:f3:80:55:83:19:41:db:2f:af:99:75:8b:
2e:aa:5c:bc:7a:9a:36:cb:0b:ee:5f:8a:e2:4b:de:
33:84:cd:f6:cf:fe:5d:85:1b:e0:f8:c4:e9:3e:f2:
f2:59:67:7b:eb:db:2c:30:06:fd:da:82:cc:bb:32:
e7:2f:14:2c:9c:54:67:ba:5e:7b:c9:3b:48:35:0c:
0a:1c:46:e0:cc:40:e4:64:00:5a:39:9c:83:55:7b:
26:af:84:bd:70:e2:92:2d:00:10:4b:04:17:bb:27:
6c:b9:5b:10:f0:33:e2:fe:66:62:f6:e5:3f:fb:05:
6f:d6:a5:a5:07:ec:c8:53:21:44:b9:35:16:70:41:
98:82:3e:26:16:31:85:0d:13:2e:43:85:fb:e6:bd:
2a:a8:28:10:fe:96:d7:88:0c:77:89:9d:f1:d4:82:
c3:30:a6:ca:b6:11:a8:46:64:03:a7:2e:54:71:a4:
85:91:7b:95:76:2d:fe:7a:bc:d4:64:a6:a7:43:ee:
79:87:27:c3:e2:da:f6:5c:25:26:c6:47:5c:0a:1b:
a3:dc:af:1f:7c:e1:6b:19:5a:d4:64:b7:aa:92:9b:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:B6:52:B6:FF:38:11:90:C6:09:53:38:CE:45:6F:0E:80:DF:28
X509v3 Authority Key Identifier:
keyid:D0:D8:52:70:32:95:EC:F8:B9:72:01:F9:16:31:0F:88:F4:C0:8A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NhScDKV7Pi5cgH5FjEPiPTAirc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/eaf974-6efd-4633-b84a-a8aaf886c820/1/0NhScDKV7Pi5cgH5FjEPiPTAirc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bd:c6:e5:e2:dc:5c:40:b1:a0:19:b3:b1:fa:c7:f9:65:e2:
71:44:7f:a6:b3:d6:64:87:b6:2f:f7:04:c6:70:03:0c:c9:77:
76:69:d6:52:a4:f0:14:d4:46:01:fc:ff:2f:0e:c1:98:80:b0:
b2:04:5b:2e:7b:9a:ab:3b:71:04:0d:4b:67:92:55:aa:06:7e:
d4:8b:59:d6:f7:59:fb:d1:bd:04:38:8e:27:dd:ed:81:00:a5:
af:6e:89:e5:60:2a:d2:22:6e:f0:5d:d4:94:59:6b:b1:d6:93:
aa:c8:47:fc:9f:38:72:b2:13:36:23:e5:e6:b2:ef:82:44:35:
fb:d0:32:f6:4e:8f:80:0d:80:c7:0d:03:4e:54:64:c7:66:e5:
53:28:ba:e6:5f:95:dd:3a:80:ab:3e:6f:6a:88:e5:7e:31:59:
14:17:84:e1:c9:c1:b2:62:70:52:62:7d:ac:af:c0:8f:ca:a7:
73:71:e7:61:59:76:7b:2e:fd:02:74:f8:67:a5:59:cf:8e:0c:
67:21:31:77:da:8a:98:01:5e:d9:7a:2c:9e:e9:f6:dd:76:8c:
30:b5:3b:0f:be:df:4c:84:b2:16:1c:7e:84:3c:d3:80:9f:d4:
3c:ec:ce:8a:85:b8:61:20:d1:ff:cd:52:ce:8b:ea:79:a4:ef:
f5:d8:b3:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbG8aVWIo2NXrSDBItF8/mhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZDg1MjcwMzI5NWVjZjhiOTcyMDFmOTE2MzEwZjg4ZjRj
MDhhYjcwHhcNMjUwNTEzMDAwMDQ3WhcNMjUwNTE0MDAwMDQ3WjAzMTEwLwYDVQQD
EyhmODUzYjY1MmI2ZmYzODExOTBjNjA5NTMzOGNlNDU2ZjBlODBkZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusNvCm8DhnxT8UwctoQ4Hu45J8zZ
yzHT/+F6sCbcSxTzgFWDGUHbL6+ZdYsuqly8epo2ywvuX4riS94zhM32z/5dhRvg
+MTpPvLyWWd769ssMAb92oLMuzLnLxQsnFRnul57yTtINQwKHEbgzEDkZABaOZyD
VXsmr4S9cOKSLQAQSwQXuydsuVsQ8DPi/mZi9uU/+wVv1qWlB+zIUyFEuTUWcEGY
gj4mFjGFDRMuQ4X75r0qqCgQ/pbXiAx3iZ3x1ILDMKbKthGoRmQDpy5UcaSFkXuV
di3+erzUZKanQ+55hyfD4tr2XCUmxkdcChuj3K8ffOFrGVrUZLeqkptLewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhTtlK2/zgRkMYJUzjORW8OgN8oMB8GA1UdIwQY
MBaAFNDYUnAylez4uXIB+RYxD4j0wIq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEt
YThhYWY4ODZjODIwLzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lYWY5NzQtNmVmZC00NjMzLWI4NGEtYThhYWY4ODZjODIw
LzEvME5oU2NES1Y3UGk1Y2dINUZqRVBpUFRBaXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWb3G5eLc
XECxoBmzsfrH+WXicUR/prPWZIe2L/cExnADDMl3dmnWUqTwFNRGAfz/Lw7BmICw
sgRbLnuaqztxBA1LZ5JVqgZ+1ItZ1vdZ+9G9BDiOJ93tgQClr26J5WAq0iJu8F3U
lFlrsdaTqshH/J84crITNiPl5rLvgkQ1+9Ay9k6PgA2Axw0DTlRkx2blUyi65l+V
3TqAqz5vaojlfjFZFBeE4cnBsmJwUmJ9rK/Aj8qnc3HnYVl2ey79AnT4Z6VZz44M
ZyExd9qKmAFe2Xosnun23XaMMLU7D77fTISyFhx+hDzTgJ/UPOzOioW4YSDR/81S
zovqeaTv9dizww==
-----END CERTIFICATE-----
Generated at Tue May 13 09:50:55 2025 by rpki-client