Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier: IajM/oR/3H9y+Yj/lMeJpw1ZjucDv+YmykmO+b2tm2Q=
Subject key identifier: DF:B1:54:B6:0F:6B:16:77:FD:C5:5B:57:98:72:0A:0A:11:A3:CF:38
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial: 0196A61CCEA74C7B36473BC3CE081D1D2597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number: 012B
Signing time: Tue 06 May 2025 15:00:27 +0000
Manifest this update: Tue 06 May 2025 15:00:27 +0000
Manifest next update: Wed 07 May 2025 15:00:27 +0000
Files and hashes: 1: TC7wZtb8eH22VqPATxdM0AYHsBI.roa (hash: WSEkQ29EN6gMplRxrm+JsVbPQFVHYc/Oyz8wGNQAkUY=)
2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: mJLik0MpJNDMdOD4gNmRW8T/4S0B3RB4mNH9SHGglUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:ce:a7:4c:7b:36:47:3b:c3:ce:08:1d:1d:25:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Validity
Not Before: May 6 15:00:27 2025 GMT
Not After : May 7 15:00:27 2025 GMT
Subject: CN=dfb154b60f6b1677fdc55b5798720a0a11a3cf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:44:76:c9:df:c8:a5:83:71:04:97:73:e3:
ab:80:eb:51:0f:a7:62:ab:f4:f2:a3:92:96:f0:44:
22:a0:45:fe:71:7b:31:40:95:e7:04:36:4c:56:b3:
01:36:43:fb:06:7f:c2:30:b6:90:48:46:16:32:62:
e7:a7:37:90:f2:6b:56:91:28:34:4f:91:23:07:3b:
00:9a:cb:cc:ca:87:bf:f1:27:f4:39:66:84:f7:a5:
fb:5a:e8:e2:31:7f:a0:af:20:e6:88:ff:6a:39:b8:
6a:e7:cd:ea:90:bc:4c:be:1e:bb:6e:52:d3:96:a2:
a8:43:df:e7:ff:34:4d:2a:58:9e:e1:17:57:5d:ce:
f4:ba:92:52:d3:f5:1e:8e:05:ed:22:28:e9:e4:2c:
87:2d:a3:0c:7e:cd:ad:24:eb:20:98:54:0f:6a:0b:
9e:47:44:e9:bd:54:a6:42:e1:60:25:9e:41:28:b6:
6d:ca:e6:94:fb:a8:65:fe:94:2e:3a:88:43:1a:da:
ed:aa:1f:70:e4:09:07:bd:1c:cd:e9:4e:4a:51:89:
63:86:0a:6d:84:7a:50:c8:ab:b3:9d:4f:88:93:ac:
15:1b:10:2e:7f:77:38:9d:89:8d:5d:c5:f3:a5:61:
04:ad:a1:c7:c9:ac:a9:bb:38:74:56:e4:8e:8a:67:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B1:54:B6:0F:6B:16:77:FD:C5:5B:57:98:72:0A:0A:11:A3:CF:38
X509v3 Authority Key Identifier:
keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:69:80:88:c1:b0:f8:34:3f:a3:7b:f0:12:54:c9:16:95:6c:
65:22:18:d7:68:60:4e:b8:31:a7:ca:98:b2:95:de:a4:71:e4:
1f:3d:df:cb:f9:56:df:9e:02:22:60:0e:33:ea:52:be:2c:69:
10:09:00:66:c0:df:6d:e6:6e:25:6a:02:ab:39:d1:d1:7c:fc:
ed:4b:87:c2:6b:c0:5f:28:45:23:03:cc:4a:02:9c:04:d0:64:
b5:77:cc:fb:3f:54:e0:9c:4a:2c:97:82:2a:b7:a6:b3:72:ad:
ad:6e:83:90:a1:70:04:ce:57:97:f0:6f:e4:7a:5f:bf:00:5a:
6c:04:7c:89:2b:29:d2:79:bb:c2:0a:44:cc:f6:a6:92:66:07:
30:61:d7:63:87:18:e8:72:7f:23:61:9a:ce:f8:22:cd:d4:fa:
1b:e5:e5:b6:35:51:91:d6:6d:9b:5a:be:ff:07:9d:42:ed:52:
f1:8a:d5:38:1c:1e:00:6b:3e:3b:c8:05:fa:94:e1:21:77:a3:
9e:4b:d9:65:f5:74:70:1a:d4:cd:51:30:5b:a6:12:81:52:c3:
01:c7:e4:7a:00:18:aa:9b:4a:43:36:d4:00:5c:40:e5:6f:98:
8b:29:48:82:65:bc:a2:e7:50:a7:64:46:3f:76:08:38:ec:e0:
82:bd:77:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamHM6nTHs2RzvDzggdHSWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljY2UxNjAwZjUwNzM1OTYwZjg2ZDYyMWNkNGY1ZjU5Zjg3
OWEwZTgwHhcNMjUwNTA2MTUwMDI3WhcNMjUwNTA3MTUwMDI3WjAzMTEwLwYDVQQD
EyhkZmIxNTRiNjBmNmIxNjc3ZmRjNTViNTc5ODcyMGEwYTExYTNjZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wJEdsnfyKWDcQSXc+OrgOtRD6di
q/Tyo5KW8EQioEX+cXsxQJXnBDZMVrMBNkP7Bn/CMLaQSEYWMmLnpzeQ8mtWkSg0
T5EjBzsAmsvMyoe/8Sf0OWaE96X7WujiMX+gryDmiP9qObhq583qkLxMvh67blLT
lqKoQ9/n/zRNKlie4RdXXc70upJS0/UejgXtIijp5CyHLaMMfs2tJOsgmFQPague
R0TpvVSmQuFgJZ5BKLZtyuaU+6hl/pQuOohDGtrtqh9w5AkHvRzN6U5KUYljhgpt
hHpQyKuznU+Ik6wVGxAuf3c4nYmNXcXzpWEEraHHyaypuzh0VuSOimcT8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+xVLYPaxZ3/cVbV5hyCgoRo884MB8GA1UdIwQY
MBaAFJzOFgD1BzWWD4bWIc1PX1n4eaDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTIt
ZGYzMmEyNWM1ZjJmLzEvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTItZGYzMmEyNWM1ZjJm
LzEvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2mAiMGw
+DQ/o3vwElTJFpVsZSIY12hgTrgxp8qYspXepHHkHz3fy/lW354CImAOM+pSvixp
EAkAZsDfbeZuJWoCqznR0Xz87UuHwmvAXyhFIwPMSgKcBNBktXfM+z9U4JxKLJeC
Krems3KtrW6DkKFwBM5Xl/Bv5HpfvwBabAR8iSsp0nm7wgpEzPamkmYHMGHXY4cY
6HJ/I2GazvgizdT6G+XltjVRkdZtm1q+/wedQu1S8YrVOBweAGs+O8gF+pThIXej
nkvZZfV0cBrUzVEwW6YSgVLDAcfkegAYqptKQzbUAFxA5W+YiylIgmW8oudQp2RG
P3YIOOzggr130g==
-----END CERTIFICATE-----
Generated at Tue May 6 18:45:45 2025 by rpki-client