Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: M4aRfyg0pOHa5jKKMLNbjNPBUhQTQb971JuU/802Qcs=
Subject key identifier: 49:B0:BE:15:00:CB:AB:EA:40:90:9A:DB:A9:67:3C:3D:73:F3:CD:AC
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 0196CF50024A1E3133F16E361D79503C9D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 0420
Signing time: Wed 14 May 2025 15:00:49 +0000
Manifest this update: Wed 14 May 2025 15:00:49 +0000
Manifest next update: Thu 15 May 2025 15:00:49 +0000
Files and hashes: 1: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: 1pqRVOSSOjyllwF2lyEb/b9GZoxDydydft7GZsHObCU=)
2: nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa (hash: 8HytWsFdzKFviKTtfyGmrk77Cg5YhpoczU6o9u5sUno=)
3: qxkGe1Ztq8AC8Xy-vkslbb-4Yjc.roa (hash: Vk6as9yIInb4okYrwyyw/9HVRxpOcsbPGA6Y1uEJnuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:50:02:4a:1e:31:33:f1:6e:36:1d:79:50:3c:9d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: May 14 15:00:49 2025 GMT
Not After : May 15 15:00:49 2025 GMT
Subject: CN=49b0be1500cbabea40909adba9673c3d73f3cdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:f2:2e:b6:f3:7d:5e:cd:bb:5f:50:91:e5:
8c:93:bf:73:dc:b5:64:24:0e:53:6c:51:de:d0:c4:
33:aa:6f:0d:7f:70:5e:69:1e:ce:37:4f:51:cc:2d:
23:2f:ae:21:45:a5:f0:cf:d8:06:33:1a:b7:75:a1:
53:aa:9c:5c:c6:de:94:24:5c:fe:13:92:87:9f:d4:
45:f7:88:8a:1c:62:ee:1f:97:7a:0c:ac:03:a4:cc:
52:33:d9:6c:41:fb:18:ef:80:5c:4b:3f:b7:65:49:
49:82:33:eb:0f:96:94:f5:dc:ff:0c:df:58:53:9d:
94:4d:f6:15:a7:92:d3:ef:a4:77:fc:ea:89:1f:fd:
ec:5e:b5:eb:c3:fb:e2:8a:12:57:f6:2e:cd:b2:89:
12:e7:10:39:ea:3e:26:eb:c1:37:cf:ba:8d:83:8b:
e4:7c:59:72:b8:9f:20:f8:e4:c8:68:5d:6d:01:f3:
4d:af:3a:85:74:4e:d7:1b:02:91:d0:d2:51:f5:2f:
9f:f1:b3:7b:1b:04:96:ec:45:ed:a6:e1:f7:17:05:
e6:b3:2a:50:d4:2a:a6:ad:00:c8:18:1e:13:d9:9d:
fa:06:4b:e0:4f:0c:fe:38:a8:e7:5b:4c:82:18:22:
18:08:9f:37:1c:0e:7f:07:e8:8f:06:93:a2:de:3e:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B0:BE:15:00:CB:AB:EA:40:90:9A:DB:A9:67:3C:3D:73:F3:CD:AC
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:94:ae:7b:55:e8:10:97:00:d7:2a:fc:fb:68:12:10:f0:05:
9c:66:44:20:47:3d:ea:2b:33:41:9f:8a:a2:e3:a9:8c:ee:95:
cd:58:eb:57:9a:b5:fb:e8:9d:ef:06:f3:c9:bb:0b:09:98:bd:
21:4e:e1:21:dc:b5:2c:77:3f:2b:9d:8d:5d:7e:d5:1c:33:3a:
8f:30:14:29:dd:53:a1:49:93:e8:d8:77:01:5d:f5:97:2e:ca:
f1:79:51:57:05:a9:86:5f:eb:62:b8:30:3e:26:c3:d1:85:99:
e8:1d:d6:d5:cd:a0:f1:9d:f3:9f:d4:45:8d:7b:da:4b:d4:c3:
99:76:2b:40:02:56:b1:9c:8b:af:00:88:5b:64:ac:40:ed:f9:
d7:ee:ba:a8:7f:b3:cd:d3:c6:29:ba:4b:e8:53:2f:3c:10:7e:
ff:8a:e0:db:02:5c:e0:14:f9:7e:22:63:18:e8:77:10:29:a5:
f5:a5:36:65:14:af:13:1a:eb:02:ea:54:f8:1f:c4:dc:c5:79:
8a:c2:32:a8:d5:75:a8:ec:56:20:f3:dd:8e:6f:9e:c6:00:5c:
a9:22:61:01:ad:83:08:1a:60:86:e7:db:4f:60:ca:3f:8b:91:
c9:d7:9e:3e:80:2b:83:58:df:37:48:fb:fb:7a:9d:7e:59:ff:
c4:2f:52:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbPUAJKHjEz8W42HXlQPJ06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDc1YzkyMDI2MDZlNjY2N2U5NGE3NzllOTAzZGI2OTdh
NTkwMjUwHhcNMjUwNTE0MTUwMDQ5WhcNMjUwNTE1MTUwMDQ5WjAzMTEwLwYDVQQD
Eyg0OWIwYmUxNTAwY2JhYmVhNDA5MDlhZGJhOTY3M2MzZDczZjNjZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvofyLrbzfV7Nu19QkeWMk79z3LVk
JA5TbFHe0MQzqm8Nf3BeaR7ON09RzC0jL64hRaXwz9gGMxq3daFTqpxcxt6UJFz+
E5KHn9RF94iKHGLuH5d6DKwDpMxSM9lsQfsY74BcSz+3ZUlJgjPrD5aU9dz/DN9Y
U52UTfYVp5LT76R3/OqJH/3sXrXrw/viihJX9i7NsokS5xA56j4m68E3z7qNg4vk
fFlyuJ8g+OTIaF1tAfNNrzqFdE7XGwKR0NJR9S+f8bN7GwSW7EXtpuH3FwXmsypQ
1CqmrQDIGB4T2Z36BkvgTwz+OKjnW0yCGCIYCJ83HA5/B+iPBpOi3j45cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmwvhUAy6vqQJCa26lnPD1z882sMB8GA1UdIwQY
MBaAFJ5HXJICYG5mZ+lKd56QPbaXpZAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAt
Y2NiYjZlOTBhMTliLzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAtY2NiYjZlOTBhMTli
LzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZSue1Xo
EJcA1yr8+2gSEPAFnGZEIEc96iszQZ+KouOpjO6VzVjrV5q1++id7wbzybsLCZi9
IU7hIdy1LHc/K52NXX7VHDM6jzAUKd1ToUmT6Nh3AV31ly7K8XlRVwWphl/rYrgw
PibD0YWZ6B3W1c2g8Z3zn9RFjXvaS9TDmXYrQAJWsZyLrwCIW2SsQO351+66qH+z
zdPGKbpL6FMvPBB+/4rg2wJc4BT5fiJjGOh3ECml9aU2ZRSvExrrAupU+B/E3MV5
isIyqNV1qOxWIPPdjm+exgBcqSJhAa2DCBpghufbT2DKP4uRydeePoArg1jfN0j7
+3qdfln/xC9Syg==
-----END CERTIFICATE-----
Generated at Wed May 14 22:21:16 2025 by rpki-client