Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: D6wf12X1UUpBnsbt771gXCAtLAIhIIPKmXguUv0YSn8=
Subject key identifier: 05:C2:B8:CB:E2:CA:11:BB:E8:58:4F:60:09:90:B3:6C:15:6D:8B:E5
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 0196BAB626B676916321940E6EB3F1BC17A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 085E
Signing time: Sat 10 May 2025 15:00:21 +0000
Manifest this update: Sat 10 May 2025 15:00:21 +0000
Manifest next update: Sun 11 May 2025 15:00:21 +0000
Files and hashes: 1: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: pUQr44JzVt6phi6IJfE+abAYfJyZye0rBzYfB7TrOHs=)
2: tONpcnjfR_-MsVEafiNaGJ4uDm4.roa (hash: SGzJp4OEszdVKR+f54x18hkn789cto3mWJ/E8xABEU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:26:b6:76:91:63:21:94:0e:6e:b3:f1:bc:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: May 10 15:00:21 2025 GMT
Not After : May 11 15:00:21 2025 GMT
Subject: CN=05c2b8cbe2ca11bbe8584f600990b36c156d8be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:6c:db:60:0d:2a:2c:e7:10:19:2a:7f:66:
e9:e5:9a:22:95:83:0f:c4:05:05:ac:98:10:9f:29:
33:bc:be:66:d3:4f:0c:c5:f5:3b:c7:3b:f0:b8:60:
29:08:b2:4f:dd:9c:38:9f:49:a9:d3:bb:1a:87:41:
c0:a0:60:7d:b4:af:33:7d:f3:36:6c:e7:94:c6:63:
5d:c1:31:38:e1:be:df:69:29:64:e0:d0:1f:63:19:
3a:da:61:f4:c0:49:2b:cc:21:ba:36:7d:8c:02:09:
60:34:c1:1d:a2:98:a6:4a:f8:52:c2:97:1e:c7:a2:
a0:1e:5f:7e:31:c9:1c:e1:96:a8:d6:41:ad:b7:f5:
8b:da:7a:3b:71:12:a2:b0:ba:f4:a8:3a:eb:ac:5c:
7a:3c:76:85:f2:e0:9a:68:28:39:22:60:10:09:03:
92:2f:71:45:1c:f5:13:72:57:88:1a:36:42:fc:0f:
81:8f:36:dd:03:e4:8f:0f:89:3f:e7:29:25:9f:42:
91:ff:7f:de:14:d1:27:5d:2a:b6:5c:42:1d:7e:07:
90:07:4b:58:33:5a:cd:ec:f3:23:65:70:e4:93:a4:
76:6d:bc:5f:1f:b4:09:61:45:68:52:cd:61:85:1d:
45:b3:4c:dc:6d:26:0d:ae:0e:41:c3:25:d5:01:42:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:B8:CB:E2:CA:11:BB:E8:58:4F:60:09:90:B3:6C:15:6D:8B:E5
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3c:00:c5:c2:f4:59:01:c1:35:ac:9f:c2:b4:2f:42:1f:2c:
06:bd:ae:b2:5e:87:af:36:19:01:ce:5c:57:4e:49:1f:e3:1a:
f6:6f:20:4e:03:44:bd:1c:f1:65:f2:66:7a:11:db:f7:ae:bd:
83:9b:e9:e2:64:b0:f5:a4:57:b8:5f:91:1b:fe:9b:e7:fe:c8:
c5:57:76:88:a1:f4:02:8b:66:d2:44:2c:f5:8a:33:7f:cb:10:
11:50:73:3d:7d:81:89:5b:15:b4:f6:83:5c:f3:4f:14:76:db:
d7:b5:37:9c:f1:cb:ba:51:ef:ef:23:b3:3a:9d:c7:1e:35:15:
ab:a7:d0:f7:c4:7b:c0:71:bc:10:cf:79:34:c5:fc:24:fa:5e:
a2:95:10:e6:89:22:ae:c4:15:8e:f6:84:4b:72:c8:51:ec:cf:
51:2d:83:e4:3a:74:8f:94:ba:6d:1e:e7:b0:1c:42:ed:b4:82:
6d:af:ec:50:56:0d:8b:6e:15:e4:14:cc:8f:96:75:78:f4:e9:
75:1f:61:0c:22:08:9f:a7:1a:29:da:52:14:ab:65:7a:8e:0c:
6c:ce:fc:c7:b6:c6:9f:2f:86:be:a6:83:14:40:9c:b4:04:41:
9b:e4:c9:fd:b4:9b:be:b8:a6:8c:51:a6:3c:56:95:db:cb:21:
1f:90:c4:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6tia2dpFjIZQObrPxvBegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllY2IyMjJiODEyNmEyMWRmMzJkMDE1ZTRjNDg1Mzk1N2Qx
ZDk3NDQwHhcNMjUwNTEwMTUwMDIxWhcNMjUwNTExMTUwMDIxWjAzMTEwLwYDVQQD
EygwNWMyYjhjYmUyY2ExMWJiZTg1ODRmNjAwOTkwYjM2YzE1NmQ4YmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+Rs22ANKiznEBkqf2bp5ZoilYMP
xAUFrJgQnykzvL5m008MxfU7xzvwuGApCLJP3Zw4n0mp07sah0HAoGB9tK8zffM2
bOeUxmNdwTE44b7faSlk4NAfYxk62mH0wEkrzCG6Nn2MAglgNMEdopimSvhSwpce
x6KgHl9+Mckc4Zao1kGtt/WL2no7cRKisLr0qDrrrFx6PHaF8uCaaCg5ImAQCQOS
L3FFHPUTcleIGjZC/A+BjzbdA+SPD4k/5ykln0KR/3/eFNEnXSq2XEIdfgeQB0tY
M1rN7PMjZXDkk6R2bbxfH7QJYUVoUs1hhR1Fs0zcbSYNrg5BwyXVAUKX8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXCuMviyhG76FhPYAmQs2wVbYvlMB8GA1UdIwQY
MBaAFJ7LIiuBJqId8y0BXkxIU5V9HZdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNGYyOWEtYTcwOS00MmJhLTk2MzIt
NThlNGYyNGZhYmVhLzEvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iNGYyOWEtYTcwOS00MmJhLTk2MzItNThlNGYyNGZhYmVh
LzEvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzwAxcL0
WQHBNayfwrQvQh8sBr2usl6HrzYZAc5cV05JH+Ma9m8gTgNEvRzxZfJmehHb9669
g5vp4mSw9aRXuF+RG/6b5/7IxVd2iKH0Aotm0kQs9Yozf8sQEVBzPX2BiVsVtPaD
XPNPFHbb17U3nPHLulHv7yOzOp3HHjUVq6fQ98R7wHG8EM95NMX8JPpeopUQ5oki
rsQVjvaES3LIUezPUS2D5Dp0j5S6bR7nsBxC7bSCba/sUFYNi24V5BTMj5Z1ePTp
dR9hDCIIn6caKdpSFKtleo4MbM78x7bGny+GvqaDFECctARBm+TJ/bSbvrimjFGm
PFaV28shH5DEpw==
-----END CERTIFICATE-----
Generated at Sat May 10 19:44:24 2025 by rpki-client