Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json)
Hash identifier: s9JxoJTucQ9fS0kNbv/8LGrPzwUf2Y6x6tDMp6FDR3A=
Subject key identifier: 2E:B0:FF:AB:F7:A3:A1:5E:52:3B:9A:31:B2:11:21:C6:99:F6:CA:2D
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 0196B935F2A5517089A9A9415EC92C25DF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
Manifest number: 1545
Signing time: Sat 10 May 2025 08:00:42 +0000
Manifest this update: Sat 10 May 2025 08:00:42 +0000
Manifest next update: Sun 11 May 2025 08:00:42 +0000
Files and hashes: 1: 1ZViwBwJWukG7x8H8vOJHhjrl20.roa (hash: +aEN4SwtP07CGGNGf2sl0Ng37swdYqF9I3PWCaVNvKY=)
2: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=)
3: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=)
4: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=)
5: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=)
6: _GnprUL9RiOSINIgt8MCDfPJSj8.roa (hash: Yrrm+IlBuBC0Z/pDmaIlkiimbDJKKuFiMeYQ+bxwX6M=)
7: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=)
8: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: 7CJfo6BgNXtApHfxT7ONOTYOM98pabCZEJMGA1WEY0w=)
9: wRQWlx5VTlfOioAPy2QXY4Uk2Xg.roa (hash: rPHBxj4mRhTnPsN1GhR6ZZjmr/wkKhGGUErpiW2+PN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:f2:a5:51:70:89:a9:a9:41:5e:c9:2c:25:df:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: May 10 08:00:42 2025 GMT
Not After : May 11 08:00:42 2025 GMT
Subject: CN=2eb0ffabf7a3a15e523b9a31b21121c699f6ca2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:1d:62:da:70:dc:c4:0f:86:8b:c1:09:8a:
fe:c5:b0:1a:f2:90:a3:9c:cc:e1:46:aa:91:57:fb:
5e:9b:5d:c9:ee:79:25:9f:ab:96:90:b1:d8:79:b2:
fe:5c:8c:68:6f:ce:55:7f:f5:e4:d0:9f:96:98:a4:
d9:c9:87:da:b9:ed:5e:0c:f2:56:1e:f1:88:f7:3d:
29:5c:e4:1b:39:a1:a9:06:d5:9b:11:b0:36:15:e8:
d5:58:78:35:2b:a7:93:00:0b:7e:40:fe:a4:e2:1e:
33:b7:89:a9:f2:2f:f6:04:07:f6:99:3f:d5:f5:dc:
72:59:91:28:6a:ae:a6:af:94:a0:f2:55:0c:b0:f6:
60:8e:eb:ec:5e:ab:97:25:d9:24:97:1d:21:4e:4e:
c3:aa:bf:99:5a:a5:8d:e4:ed:b3:58:2f:c7:ca:71:
6c:4f:77:12:11:b9:fc:48:d7:49:37:3a:ce:d4:bc:
f4:b4:d0:9b:31:e0:83:2d:ce:48:27:5b:dc:fc:36:
37:11:36:51:7d:12:12:91:9d:ca:ee:17:4c:d0:cc:
df:61:53:c8:34:2e:f5:6e:56:82:51:c7:a9:c0:ef:
b0:b8:b9:9b:3d:80:94:8b:7e:42:39:36:8b:0c:c2:
6a:cf:b6:41:ab:88:04:59:43:b8:9a:b1:f4:d9:c7:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B0:FF:AB:F7:A3:A1:5E:52:3B:9A:31:B2:11:21:C6:99:F6:CA:2D
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e2:53:26:bc:93:84:8f:b4:85:a8:b3:97:a0:a9:09:ff:e6:
17:4f:04:05:54:2f:2f:e3:38:17:ea:99:6c:6e:ab:08:a5:8e:
ca:6f:86:c8:9a:4e:50:c6:4c:df:f1:9b:02:97:90:19:8b:b0:
12:d7:91:db:5a:14:c1:ee:fe:ac:8d:3a:e4:48:29:e2:e4:77:
d0:d6:19:c7:d8:16:45:da:11:f2:a8:26:61:eb:7e:5f:25:e3:
88:a4:ce:2b:00:cd:f8:c7:b3:36:4e:7a:07:31:3e:d3:e9:52:
f4:21:90:bf:a9:62:8a:df:44:94:c9:46:ab:2e:0c:0d:31:5a:
8a:f3:48:93:aa:34:b8:86:3f:a5:e1:ad:7d:7b:a0:66:5f:8b:
ca:51:85:cd:b1:fc:bb:40:a2:25:17:50:14:ac:3a:0a:27:fc:
dc:bb:f0:46:3c:8c:41:eb:29:38:ee:63:5e:ca:fa:88:8c:80:
fe:30:ac:91:ca:a7:3c:44:ee:1a:86:e3:c4:a9:bd:9d:1a:69:
f6:dc:2a:d8:1f:ab:53:94:5c:4e:b8:19:a2:fa:d0:4b:d4:b0:
1e:e6:0b:10:50:e2:26:df:a8:92:d4:d8:0d:08:a4:69:ce:1c:
1c:d4:e6:21:57:04:63:2d:71:79:74:d8:3d:60:a7:3e:32:b1:
50:c9:9a:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5NfKlUXCJqalBXsksJd+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm
YzQ1ODIwHhcNMjUwNTEwMDgwMDQyWhcNMjUwNTExMDgwMDQyWjAzMTEwLwYDVQQD
EygyZWIwZmZhYmY3YTNhMTVlNTIzYjlhMzFiMjExMjFjNjk5ZjZjYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp44dYtpw3MQPhovBCYr+xbAa8pCj
nMzhRqqRV/tem13J7nkln6uWkLHYebL+XIxob85Vf/Xk0J+WmKTZyYfaue1eDPJW
HvGI9z0pXOQbOaGpBtWbEbA2FejVWHg1K6eTAAt+QP6k4h4zt4mp8i/2BAf2mT/V
9dxyWZEoaq6mr5Sg8lUMsPZgjuvsXquXJdkklx0hTk7Dqr+ZWqWN5O2zWC/HynFs
T3cSEbn8SNdJNzrO1Lz0tNCbMeCDLc5IJ1vc/DY3ETZRfRISkZ3K7hdM0MzfYVPI
NC71blaCUcepwO+wuLmbPYCUi35COTaLDMJqz7ZBq4gEWUO4mrH02cc4DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6w/6v3o6FeUjuaMbIRIcaZ9sotMB8GA1UdIwQY
MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt
MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk
LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquJTJryT
hI+0haizl6CpCf/mF08EBVQvL+M4F+qZbG6rCKWOym+GyJpOUMZM3/GbApeQGYuw
EteR21oUwe7+rI065Egp4uR30NYZx9gWRdoR8qgmYet+XyXjiKTOKwDN+MezNk56
BzE+0+lS9CGQv6liit9ElMlGqy4MDTFaivNIk6o0uIY/peGtfXugZl+LylGFzbH8
u0CiJRdQFKw6Cif83LvwRjyMQespOO5jXsr6iIyA/jCskcqnPETuGobjxKm9nRpp
9twq2B+rU5RcTrgZovrQS9SwHuYLEFDiJt+oktTYDQikac4cHNTmIVcEYy1xeXTY
PWCnPjKxUMmaOQ==
-----END CERTIFICATE-----
Generated at Sat May 10 10:44:11 2025 by rpki-client