Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File: N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier: vGGk5hNKVO9gCUgDlsfYSFO62ymYUOm9OSmaiH9uLWY=
Subject key identifier: FD:3F:73:1A:9C:15:D2:DE:D3:D9:BE:EC:E8:A4:7D:3E:96:51:42:66
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial: 0196D96575ED6F9336F6C28F3B10593BA575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number: 07CA
Signing time: Fri 16 May 2025 14:00:27 +0000
Manifest this update: Fri 16 May 2025 14:00:27 +0000
Manifest next update: Sat 17 May 2025 14:00:27 +0000
Files and hashes: 1: A3ey_cAeMANwFWddA6tWalsb_HU.roa (hash: 1QzvBN6h57NIWttaQKkwiJVejIWg/N7/NzIPvbKh3sU=)
2: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: nRHgBHwvFYIy2pJ5KsooTliOO5PVP1noqzEUwTJlZP0=)
3: X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa (hash: I3L20uWKmG3AN70fPYDWHSKnKdL/hAFebOsi5YIWBck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:65:75:ed:6f:93:36:f6:c2:8f:3b:10:59:3b:a5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
Validity
Not Before: May 16 14:00:27 2025 GMT
Not After : May 17 14:00:27 2025 GMT
Subject: CN=fd3f731a9c15d2ded3d9beece8a47d3e96514266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:53:e4:9f:a7:ea:33:56:9c:41:92:14:f3:
dd:e9:04:06:95:ce:fa:93:30:eb:a6:39:b4:1f:1f:
ef:6c:e9:f9:38:41:ae:4b:6a:ed:71:9b:e8:eb:f6:
79:e0:31:3e:b2:65:a8:ae:f8:03:7d:1c:38:a3:98:
21:8f:dd:80:ef:ea:df:f5:05:f5:57:c8:cc:ce:07:
1d:5e:c4:20:83:07:1d:cb:5d:99:34:b9:cd:8a:31:
65:a0:75:cf:0b:c9:2d:eb:a4:28:16:6f:0a:0e:9a:
50:15:13:3f:17:7a:6e:8f:cc:0c:3e:75:ab:07:d9:
87:71:d5:a4:25:33:46:9a:cf:00:ca:97:21:b0:c0:
e7:79:66:cd:1e:a3:9a:10:ea:d2:e2:05:17:b3:87:
d1:75:76:f3:6c:d5:14:19:2e:fc:0c:96:99:1d:7a:
cb:6e:09:46:b5:a8:bd:1f:68:8e:15:97:b2:fc:73:
3d:50:6d:fe:9b:45:8c:2d:c7:4f:6b:bd:f1:ca:5a:
eb:84:6f:bd:d7:b3:42:c7:36:e7:a6:77:d1:08:b1:
72:5d:4f:85:a1:68:42:fe:25:c1:87:1d:b3:1f:4a:
db:d0:78:29:ef:49:7f:15:5e:9c:4b:40:06:d0:19:
0d:9a:f3:58:a5:4e:cb:6c:03:09:88:b4:bd:da:6d:
36:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:73:1A:9C:15:D2:DE:D3:D9:BE:EC:E8:A4:7D:3E:96:51:42:66
X509v3 Authority Key Identifier:
keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6a:76:fd:5b:67:a7:be:16:4a:e3:84:1c:ba:5d:19:ec:4d:
d8:90:f8:5f:56:84:07:67:d9:8e:7d:12:fa:94:ac:40:2b:96:
a9:a1:53:d0:55:9e:e6:ad:7a:ee:a2:4e:1a:4d:6e:14:fe:01:
6c:ff:94:6f:2e:d7:7a:96:7f:22:ff:cb:25:0a:04:b4:6d:3b:
fa:02:cf:ac:89:28:d2:a7:40:3e:9a:88:bb:cd:5e:3c:07:69:
4e:d3:d6:ea:71:73:2c:0f:5e:b7:78:64:2d:78:9c:5c:ea:67:
60:f0:10:5e:20:d2:32:da:9c:c7:20:19:8c:12:d0:4b:68:69:
fa:8c:1e:f3:92:94:0f:44:48:0d:c4:67:04:6b:f7:21:c1:74:
25:56:d9:cd:9e:fe:88:e9:44:42:92:ba:76:6e:e0:d7:58:b8:
e3:c5:18:da:98:2c:90:59:cd:ec:1c:53:e7:48:72:62:52:3e:
f3:e6:f4:9e:8a:7b:26:33:5f:79:7d:9b:46:b1:f0:1d:50:73:
ba:e6:7b:ae:f3:38:ce:06:9a:45:0a:10:64:78:25:d8:0a:72:
2c:e4:70:b3:26:97:6a:68:d7:f9:08:96:cf:b2:ea:19:0d:e9:
12:7c:04:bb:ca:25:65:c9:94:c7:06:fb:0c:33:de:d9:30:69:
5d:86:a1:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbZZXXtb5M29sKPOxBZO6V1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NDMxZjFiZTlmZGMyNDE5MDk4NDc5Y2RlNDU3YmJmNzk1
NzE3NTkwHhcNMjUwNTE2MTQwMDI3WhcNMjUwNTE3MTQwMDI3WjAzMTEwLwYDVQQD
EyhmZDNmNzMxYTljMTVkMmRlZDNkOWJlZWNlOGE0N2QzZTk2NTE0MjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq9T5J+n6jNWnEGSFPPd6QQGlc76
kzDrpjm0Hx/vbOn5OEGuS2rtcZvo6/Z54DE+smWorvgDfRw4o5ghj92A7+rf9QX1
V8jMzgcdXsQggwcdy12ZNLnNijFloHXPC8kt66QoFm8KDppQFRM/F3puj8wMPnWr
B9mHcdWkJTNGms8AypchsMDneWbNHqOaEOrS4gUXs4fRdXbzbNUUGS78DJaZHXrL
bglGtai9H2iOFZey/HM9UG3+m0WMLcdPa73xylrrhG+917NCxzbnpnfRCLFyXU+F
oWhC/iXBhx2zH0rb0Hgp70l/FV6cS0AG0BkNmvNYpU7LbAMJiLS92m028wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0/cxqcFdLe09m+7OikfT6WUUJmMB8GA1UdIwQY
MBaAFDdDHxvp/cJBkJhHnN5Fe795VxdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYt
NjE1OTYxMzEyYjUyLzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYtNjE1OTYxMzEyYjUy
LzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2p2/Vtn
p74WSuOEHLpdGexN2JD4X1aEB2fZjn0S+pSsQCuWqaFT0FWe5q167qJOGk1uFP4B
bP+Uby7XepZ/Iv/LJQoEtG07+gLPrIko0qdAPpqIu81ePAdpTtPW6nFzLA9et3hk
LXicXOpnYPAQXiDSMtqcxyAZjBLQS2hp+owe85KUD0RIDcRnBGv3IcF0JVbZzZ7+
iOlEQpK6dm7g11i448UY2pgskFnN7BxT50hyYlI+8+b0nop7JjNfeX2bRrHwHVBz
uuZ7rvM4zgaaRQoQZHgl2ApyLORwsyaXamjX+QiWz7LqGQ3pEnwEu8olZcmUxwb7
DDPe2TBpXYah3A==
-----END CERTIFICATE-----
Generated at Fri May 16 22:46:27 2025 by rpki-client