Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File: ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier: 731LPc5NlIkv4xZL+vWhJhjM0HPr6/Zs5etPUUZvW1U=
Subject key identifier: EA:8E:FB:8D:11:2D:80:CD:1F:03:5B:DC:68:AA:23:0F:E7:D3:D7:9C
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer: /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial: 0196D8C0C138C313FB96CBA42743C624C65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number: 0D9A
Signing time: Fri 16 May 2025 11:00:33 +0000
Manifest this update: Fri 16 May 2025 11:00:33 +0000
Manifest next update: Sat 17 May 2025 11:00:33 +0000
Files and hashes: 1: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: MXtbFcuW+pmhdmlSvWq0ij2Cez6BaXfTWwgqpRCMFj0=)
2: uweYkDCu-qqfi3ug1YgUgTCGT6M.roa (hash: /KpNT+Dkmz13bWhCJTvJ8D+AbxL/YrXSoux1HxprkcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:c0:c1:38:c3:13:fb:96:cb:a4:27:43:c6:24:c6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Validity
Not Before: May 16 11:00:33 2025 GMT
Not After : May 17 11:00:33 2025 GMT
Subject: CN=ea8efb8d112d80cd1f035bdc68aa230fe7d3d79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5a:6a:31:92:50:01:24:10:d6:e0:1a:f6:67:
75:19:c5:63:93:f1:d9:a8:80:bc:79:92:3f:87:81:
b2:25:3c:08:9b:fb:06:51:0e:ab:15:69:09:61:8a:
fb:6f:9c:4d:e6:f1:b6:07:55:dd:44:2b:89:64:96:
66:4e:56:16:0d:96:6a:d3:32:d2:b0:23:fa:38:12:
21:79:2e:c3:a9:2c:b1:7e:32:08:b7:d2:2d:4b:dc:
d9:7b:fa:85:32:46:f7:11:f2:d5:26:25:5c:c4:bc:
88:51:58:2d:21:ee:61:aa:e0:b7:73:91:d2:50:76:
04:79:80:54:35:b3:34:f1:b1:91:30:62:a2:99:20:
94:62:35:01:56:bc:2a:86:37:d5:86:5a:e4:24:68:
d7:08:99:b5:bb:d6:c5:d4:7c:ad:08:a1:62:98:75:
dc:b1:fe:c3:db:db:5d:3d:8a:67:04:99:c0:e7:42:
d8:88:33:84:36:da:46:24:aa:a3:3b:15:93:03:26:
de:13:c2:f1:ec:5a:ce:63:6a:cb:7a:ae:e1:95:3e:
08:a2:18:d1:ef:bb:d8:c5:df:1e:7d:af:b8:33:10:
3a:20:47:fd:6f:3f:16:08:e5:b8:e3:d7:58:47:13:
2f:1a:db:86:8a:0b:68:49:2d:a6:ee:d3:5b:45:08:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8E:FB:8D:11:2D:80:CD:1F:03:5B:DC:68:AA:23:0F:E7:D3:D7:9C
X509v3 Authority Key Identifier:
keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:72:dd:18:52:06:97:d6:c0:b3:00:96:cd:10:b9:c7:49:d6:
40:61:fb:a1:d4:aa:f8:18:f9:1e:79:98:c8:f1:da:f2:66:8c:
4e:ba:7b:7a:b8:c2:75:e3:bc:5b:48:8d:6a:ad:48:44:f5:24:
86:83:18:5f:84:59:0c:4e:65:7b:16:33:54:df:fe:48:36:35:
76:8e:bc:b0:e1:54:8e:29:e4:5b:e5:d1:90:5c:62:51:99:ea:
96:14:43:4f:51:5f:f8:04:9f:6b:41:ba:43:1c:cf:dd:8e:0b:
e4:66:e5:f7:10:bd:2b:e8:21:18:68:1e:79:d8:bc:57:a5:24:
e5:b7:c3:f2:60:4d:05:0b:6d:df:fb:52:69:b9:9b:6c:09:27:
6f:ec:50:ee:ef:bf:ed:31:4d:c3:b9:1e:b8:94:a5:fc:8d:ad:
79:38:aa:78:8a:8d:66:04:23:96:00:7c:a6:c4:51:c9:d5:3c:
95:41:a1:e3:d5:a8:87:77:8b:f4:36:89:f6:75:ce:47:76:4b:
71:4f:5c:49:f2:f9:49:f3:5c:ba:ab:96:83:25:b5:f3:2a:49:
d3:3f:89:d4:bd:8c:4c:15:eb:82:db:34:22:74:b0:c5:53:9b:
81:da:df:93:c8:63:79:9d:46:fc:d8:d1:88:2b:5c:3a:fe:9f:
98:a7:38:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbYwME4wxP7lsukJ0PGJMZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMmU4OGY1MDdjZDJlYWRiYjIzMmM4NjRmNzFlZGJhNmVj
YjVkYTAwHhcNMjUwNTE2MTEwMDMzWhcNMjUwNTE3MTEwMDMzWjAzMTEwLwYDVQQD
EyhlYThlZmI4ZDExMmQ4MGNkMWYwMzViZGM2OGFhMjMwZmU3ZDNkNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lpqMZJQASQQ1uAa9md1GcVjk/HZ
qIC8eZI/h4GyJTwIm/sGUQ6rFWkJYYr7b5xN5vG2B1XdRCuJZJZmTlYWDZZq0zLS
sCP6OBIheS7DqSyxfjIIt9ItS9zZe/qFMkb3EfLVJiVcxLyIUVgtIe5hquC3c5HS
UHYEeYBUNbM08bGRMGKimSCUYjUBVrwqhjfVhlrkJGjXCJm1u9bF1HytCKFimHXc
sf7D29tdPYpnBJnA50LYiDOENtpGJKqjOxWTAybeE8Lx7FrOY2rLeq7hlT4IohjR
77vYxd8efa+4MxA6IEf9bz8WCOW449dYRxMvGtuGigtoSS2m7tNbRQicAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqO+40RLYDNHwNb3GiqIw/n09ecMB8GA1UdIwQY
MBaAFJ4uiPUHzS6tuyMshk9x7bpuy12gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmk2STlRZk5McTI3SXl5R1QzSHR1bTdMWGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMDc2NGUtNzk5Zi00NzM2LTk2ODYt
OTJkNWQzOTcwYTU5LzEvbmk2STlRZk5McTI3SXl5R1QzSHR1bTdMWGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zMDc2NGUtNzk5Zi00NzM2LTk2ODYtOTJkNWQzOTcwYTU5
LzEvbmk2STlRZk5McTI3SXl5R1QzSHR1bTdMWGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXLdGFIG
l9bAswCWzRC5x0nWQGH7odSq+Bj5HnmYyPHa8maMTrp7erjCdeO8W0iNaq1IRPUk
hoMYX4RZDE5lexYzVN/+SDY1do68sOFUjinkW+XRkFxiUZnqlhRDT1Ff+ASfa0G6
QxzP3Y4L5Gbl9xC9K+ghGGgeedi8V6Uk5bfD8mBNBQtt3/tSabmbbAknb+xQ7u+/
7TFNw7keuJSl/I2teTiqeIqNZgQjlgB8psRRydU8lUGh49Woh3eL9DaJ9nXOR3ZL
cU9cSfL5SfNcuquWgyW18ypJ0z+J1L2MTBXrgts0InSwxVObgdrfk8hjeZ1G/NjR
iCtcOv6fmKc46A==
-----END CERTIFICATE-----
Generated at Fri May 16 13:56:06 2025 by rpki-client