Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: IKkpHpmahbb/MUeA16V9eGCV4MPd4SQNyCUH9PJTOvA=
Subject key identifier: 62:27:04:B7:51:65:12:C2:8D:09:4E:68:FC:34:B2:9C:E3:39:29:7E
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 0196CEE2EFA54CF48C7C64CE5B8843A3E09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 050B
Signing time: Wed 14 May 2025 13:01:41 +0000
Manifest this update: Wed 14 May 2025 13:01:41 +0000
Manifest next update: Thu 15 May 2025 13:01:41 +0000
Files and hashes: 1: _ySRDLzQdwiGbOJn6VG0WghGnvs.roa (hash: iftvJSfyvy0E59eeWCgB+fQqIp2vGxrZU/nTeE6jx9c=)
2: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: GyBVOhcawIsBCnqMIxONMIWOvlfiXLVFuS1Md1EXpag=)
3: rj7cMvisc5sEsNUl1EQ8tKzz6C8.roa (hash: 6mpsbNewWQwOLcJiFmFyeCARGSCjU8+BOm6oNSA/kho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e2:ef:a5:4c:f4:8c:7c:64:ce:5b:88:43:a3:e0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: May 14 13:01:41 2025 GMT
Not After : May 15 13:01:41 2025 GMT
Subject: CN=622704b7516512c28d094e68fc34b29ce339297e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:4d:6e:ca:d8:1b:bf:f6:08:70:b6:81:6e:
22:7f:31:ac:31:c6:a5:87:c2:5a:ab:39:4a:05:86:
ab:cc:ab:4e:b3:8e:a5:b8:b7:48:87:d4:35:50:ec:
9d:5b:a4:f6:c9:59:4f:4b:51:54:ae:21:81:af:dc:
bf:c5:94:3d:85:f4:cc:c4:27:ba:bd:d6:8a:02:fb:
53:bd:ee:7a:1a:64:a3:15:1d:e2:a9:a0:15:78:06:
9a:84:33:17:77:ad:10:8b:a4:37:59:59:60:a5:a9:
d7:fb:10:33:94:e4:30:44:5f:68:c4:7d:f4:24:0e:
81:eb:4c:f3:0d:27:13:4e:6d:6d:18:c6:9b:fb:7b:
35:14:00:9d:1b:36:ff:ba:74:b6:86:7c:79:df:48:
4d:17:18:ae:94:0b:fc:bb:80:f5:07:a3:4a:ac:ad:
1d:51:3f:c7:75:29:d9:84:86:75:c7:ac:16:03:e0:
00:95:b0:4e:54:15:4b:81:0a:44:e4:7b:51:d3:e1:
de:9d:01:90:3b:77:82:ae:ef:9e:d5:1e:21:5e:08:
e1:0b:78:18:0e:98:ba:48:88:da:f2:f8:ea:68:34:
df:be:c8:9f:35:58:d9:dd:e6:0d:91:af:18:bf:aa:
6b:e1:cf:2c:82:75:09:12:11:5c:94:89:96:5f:3a:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:27:04:B7:51:65:12:C2:8D:09:4E:68:FC:34:B2:9C:E3:39:29:7E
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:15:49:3d:ca:cd:58:bf:27:76:0a:2b:f3:58:ac:54:8c:91:
5a:68:1e:3f:6f:90:fc:6f:70:7d:b6:7b:ec:4b:1a:73:1e:1d:
b2:fa:22:4d:5a:d1:43:53:5f:c0:49:7d:75:5d:23:c3:97:82:
7d:6a:bb:ad:d8:b7:a2:8c:e4:3e:5e:ba:a3:ef:06:d7:9f:2d:
cf:50:39:39:c3:7e:32:dd:2f:45:74:35:76:80:f9:6e:5a:bd:
f3:7c:e7:24:87:f6:19:18:a2:02:9d:29:3e:c8:e3:2a:b1:19:
b5:02:30:a6:d7:8d:6e:cb:a7:82:d5:5c:6e:af:7c:7a:ee:16:
9b:6d:0d:b1:7f:25:b2:17:2c:ce:2f:c9:fd:5d:38:40:cd:81:
78:d5:14:2a:16:b8:ec:7a:69:77:00:da:df:36:44:37:5f:a3:
6c:cc:fc:17:66:9f:86:ee:97:6f:93:95:74:30:af:31:16:b7:
ec:f5:3c:94:2d:55:5c:23:f0:83:25:6c:7c:65:1d:a6:ee:a8:
2c:50:6b:45:d8:89:39:f9:52:66:44:8f:95:7e:93:9e:47:2e:
5f:d2:2c:7e:18:35:32:4b:6e:b1:1f:cc:42:88:8d:43:44:9f:
00:96:92:e5:d8:cf:70:e6:49:4a:49:55:31:97:34:b3:13:4d:
91:8b:d9:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbO4u+lTPSMfGTOW4hDo+CdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmM2VjMjFlMTBmMzY0NmU0ZGMwZTIzZjVmN2VjNDQ1MDE1
NjBkZTMwHhcNMjUwNTE0MTMwMTQxWhcNMjUwNTE1MTMwMTQxWjAzMTEwLwYDVQQD
Eyg2MjI3MDRiNzUxNjUxMmMyOGQwOTRlNjhmYzM0YjI5Y2UzMzkyOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveJNbsrYG7/2CHC2gW4ifzGsMcal
h8JaqzlKBYarzKtOs46luLdIh9Q1UOydW6T2yVlPS1FUriGBr9y/xZQ9hfTMxCe6
vdaKAvtTve56GmSjFR3iqaAVeAaahDMXd60Qi6Q3WVlgpanX+xAzlOQwRF9oxH30
JA6B60zzDScTTm1tGMab+3s1FACdGzb/unS2hnx530hNFxiulAv8u4D1B6NKrK0d
UT/HdSnZhIZ1x6wWA+AAlbBOVBVLgQpE5HtR0+HenQGQO3eCru+e1R4hXgjhC3gY
Dpi6SIja8vjqaDTfvsifNVjZ3eYNka8Yv6pr4c8sgnUJEhFclImWXzpQdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGInBLdRZRLCjQlOaPw0spzjOSl+MB8GA1UdIwQY
MBaAFJ8+wh4Q82RuTcDiP19+xEUBVg3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUt
N2JhMjVkNTU5NWZhLzEvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUtN2JhMjVkNTU5NWZh
LzEvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxVJPcrN
WL8ndgor81isVIyRWmgeP2+Q/G9wfbZ77Esacx4dsvoiTVrRQ1NfwEl9dV0jw5eC
fWq7rdi3oozkPl66o+8G158tz1A5OcN+Mt0vRXQ1doD5blq983znJIf2GRiiAp0p
PsjjKrEZtQIwpteNbsungtVcbq98eu4Wm20NsX8lshcszi/J/V04QM2BeNUUKha4
7HppdwDa3zZEN1+jbMz8F2afhu6Xb5OVdDCvMRa37PU8lC1VXCPwgyVsfGUdpu6o
LFBrRdiJOflSZkSPlX6TnkcuX9Isfhg1MktusR/MQoiNQ0SfAJaS5djPcOZJSklV
MZc0sxNNkYvZ0Q==
-----END CERTIFICATE-----
Generated at Wed May 14 17:22:34 2025 by rpki-client