Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: 3VkEnuUqQKZ9SNY240jR2VljTWat///zIPH6G2smnT8=
Subject key identifier: 1C:FD:11:57:6E:D7:A0:55:B6:AD:8A:3E:95:55:9C:79:E4:73:53:EA
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 01969E2C196EC01FDDCB608B4E59CAFEEBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 02:00:11 +0000
Manifest this update: Mon 05 May 2025 02:00:11 +0000
Manifest next update: Tue 06 May 2025 02:00:11 +0000
Files and hashes: 1: AkKW7m-MHHB19PTWABc4m9rKocs.roa (hash: qHV2PtoHadaa9NwNl5xTEsUFUv4QzTCLjq+mny689nw=)
2: _GG8qubp_g9Px6E1DCD6hAdsvxo.roa (hash: 7gqHqwq0qb4WMuA79mugfXtlkRY7UZiMzeqs0bw/bLo=)
3: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: 5G1MsZ3DbsCHGkfIeorLstQxM7oJ6DRiY0GCKk468dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:19:6e:c0:1f:dd:cb:60:8b:4e:59:ca:fe:eb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: May 5 02:00:11 2025 GMT
Not After : May 6 02:00:11 2025 GMT
Subject: CN=1cfd11576ed7a055b6ad8a3e95559c79e47353ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:36:1a:3b:45:48:f2:68:c0:f7:89:60:bd:
49:3e:8f:7d:8c:c8:47:f1:fd:22:8a:ba:d5:c0:0c:
6f:ee:02:c7:69:ab:22:b2:e7:07:8b:54:f2:32:8f:
b4:bd:69:28:27:bc:a0:01:23:fa:8b:2c:80:6c:42:
6c:48:6c:75:f5:16:8e:07:9c:dc:cd:d6:fa:7c:7b:
97:32:f2:d7:0d:1a:f5:d4:cb:17:02:4c:25:59:b0:
04:d2:e1:a8:1f:0d:c8:7c:39:11:3a:5a:8f:86:ef:
90:ac:1c:09:f6:55:e5:aa:14:c3:a1:85:90:43:2f:
9b:8f:f4:2b:d0:fc:e7:c7:2f:6d:b6:b6:40:75:ee:
fd:06:fe:7e:37:d5:31:c1:aa:bc:5d:d4:84:7d:21:
f9:e9:e2:86:2a:fa:54:13:8e:e6:e4:6b:a2:ed:1f:
6e:d3:51:b4:d0:dc:9e:20:ab:85:2a:e0:c1:25:ed:
73:bb:97:42:f4:e9:6d:45:4e:1f:46:cf:8c:ff:da:
22:c5:99:f1:b6:44:39:6f:38:d0:7f:a4:98:37:1e:
dd:ba:e9:99:02:dc:6c:25:e8:b3:a8:67:fe:fa:55:
16:56:20:4e:20:2e:d5:b6:0d:68:1c:ee:1d:87:90:
8f:eb:fc:dd:c0:ca:5b:6e:7f:e1:3e:b4:fa:c4:a0:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FD:11:57:6E:D7:A0:55:B6:AD:8A:3E:95:55:9C:79:E4:73:53:EA
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:12:cf:08:b5:c4:c6:ed:af:1b:c8:a1:95:3d:17:13:a5:17:
3c:4b:25:26:68:74:57:92:21:19:6b:55:a4:98:88:7f:f9:04:
f7:57:79:4c:33:87:37:ac:32:cc:28:e6:56:d5:f1:bf:e7:98:
e3:26:60:5e:1c:d8:59:87:19:f5:9a:e9:ce:13:fb:25:cf:88:
12:d1:1a:d9:28:1e:aa:80:36:1d:23:b3:a0:cf:9f:e9:37:96:
51:1b:3e:1e:ed:18:2f:08:6a:a9:c2:b2:ad:d6:55:08:75:b0:
b7:1b:6e:c9:30:03:00:33:86:f3:70:f6:73:8a:a0:5e:81:dd:
27:3c:e2:23:b9:61:65:19:f0:65:66:37:13:73:a6:91:2a:70:
5e:03:c8:f1:05:1c:3a:f6:d8:81:8c:bd:03:60:4a:13:fa:c6:
cd:2d:18:4a:b4:bf:91:4a:5f:4d:78:da:ab:90:65:47:30:e0:
f6:3a:43:f8:6c:85:f8:8f:47:bb:79:2f:5e:02:da:70:79:57:
bf:c0:92:d2:28:98:c6:a2:04:c3:34:b1:fb:04:c8:55:60:c8:
16:71:43:37:7d:ae:da:a6:9f:db:70:f9:22:a1:b3:92:c1:21:
2c:6f:ae:87:bc:f3:c3:8b:92:53:d1:aa:9e:d7:50:c3:2d:43:
eb:d5:a6:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeLBluwB/dy2CLTlnK/uvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDdhNzIxZWRhNDU5ZWJkZjk4ZTAyOWY4N2M5MGE5ODBl
ODFkOTQwHhcNMjUwNTA1MDIwMDExWhcNMjUwNTA2MDIwMDExWjAzMTEwLwYDVQQD
EygxY2ZkMTE1NzZlZDdhMDU1YjZhZDhhM2U5NTU1OWM3OWU0NzM1M2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujo2GjtFSPJowPeJYL1JPo99jMhH
8f0iirrVwAxv7gLHaasisucHi1TyMo+0vWkoJ7ygASP6iyyAbEJsSGx19RaOB5zc
zdb6fHuXMvLXDRr11MsXAkwlWbAE0uGoHw3IfDkROlqPhu+QrBwJ9lXlqhTDoYWQ
Qy+bj/Qr0Pznxy9ttrZAde79Bv5+N9Uxwaq8XdSEfSH56eKGKvpUE47m5Gui7R9u
01G00NyeIKuFKuDBJe1zu5dC9OltRU4fRs+M/9oixZnxtkQ5bzjQf6SYNx7duumZ
AtxsJeizqGf++lUWViBOIC7Vtg1oHO4dh5CP6/zdwMpbbn/hPrT6xKDUxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz9EVdu16BVtq2KPpVVnHnkc1PqMB8GA1UdIwQY
MBaAFPzXpyHtpFnr35jgKfh8kKmA6B2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jZjRhYjQtZTkxNC00MGUxLTgyZGYt
MTRkYzdlYzA0OTVkLzEvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jZjRhYjQtZTkxNC00MGUxLTgyZGYtMTRkYzdlYzA0OTVk
LzEvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBLPCLXE
xu2vG8ihlT0XE6UXPEslJmh0V5IhGWtVpJiIf/kE91d5TDOHN6wyzCjmVtXxv+eY
4yZgXhzYWYcZ9ZrpzhP7Jc+IEtEa2SgeqoA2HSOzoM+f6TeWURs+Hu0YLwhqqcKy
rdZVCHWwtxtuyTADADOG83D2c4qgXoHdJzziI7lhZRnwZWY3E3OmkSpwXgPI8QUc
OvbYgYy9A2BKE/rGzS0YSrS/kUpfTXjaq5BlRzDg9jpD+GyF+I9Hu3kvXgLacHlX
v8CS0iiYxqIEwzSx+wTIVWDIFnFDN32u2qaf23D5IqGzksEhLG+uh7zzw4uSU9Gq
ntdQwy1D69WmdQ==
-----END CERTIFICATE-----
Generated at Mon May 5 04:49:42 2025 by rpki-client