Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: pt9Z0hr+Rkkrz2k/AWSGxo7w2WFNTH1URJzSaj5pyrM=
Subject key identifier: F3:8D:35:61:42:A8:0D:A1:EC:84:28:71:93:F7:0E:40:BA:E6:D9:76
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 0196B3A165368869C01BCD7D697EF929EE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 0E8F
Signing time: Fri 09 May 2025 06:00:20 +0000
Manifest this update: Fri 09 May 2025 06:00:20 +0000
Manifest next update: Sat 10 May 2025 06:00:20 +0000
Files and hashes: 1: mcodiKTX1slSmfc3nZ7DZKGNYFk.roa (hash: 8YfkV+577aVFpH3FgiABnIRQh7w2LYtBhi55zdviFSU=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: 5K10P+9Q3rSDcvUwokqD0MyFFcAcH13q5EckvVtoLso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:65:36:88:69:c0:1b:cd:7d:69:7e:f9:29:ee:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: May 9 06:00:20 2025 GMT
Not After : May 10 06:00:20 2025 GMT
Subject: CN=f38d356142a80da1ec84287193f70e40bae6d976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:e2:13:d9:92:7d:f6:12:75:2b:5a:3b:24:
a6:53:55:3e:c9:4d:dd:e5:1e:91:9e:80:b2:85:aa:
e2:b1:20:39:87:66:65:fc:b3:b3:b0:c9:a4:ac:1b:
4e:42:48:4b:5f:1d:bd:3a:fa:56:96:99:df:c6:69:
8e:62:6a:0d:c5:06:23:a4:07:2c:d3:7f:e4:9e:e2:
fe:ef:fa:45:15:68:44:f7:c7:15:6d:04:83:48:86:
cf:9f:cc:a5:81:31:a3:e1:84:79:34:56:61:29:5e:
4d:c9:68:57:1d:2d:eb:25:7e:d5:d3:21:73:6f:d2:
c4:f2:0e:54:b7:6d:9d:73:f7:7a:6d:eb:f1:34:a3:
3e:21:e3:45:a9:49:36:64:1d:97:35:13:a7:39:ef:
c0:1a:e3:a8:60:9b:5b:bd:1d:a4:bf:a2:8d:1e:e8:
70:a7:48:ca:11:e7:10:f5:45:7a:f3:67:fa:f4:17:
18:2c:80:44:a9:40:47:37:aa:23:18:7f:cf:00:68:
a5:4a:33:e5:a8:61:f3:5d:1b:18:8d:c2:87:45:99:
51:0f:8a:70:ea:7a:28:a5:1a:8c:86:38:c1:01:f1:
f9:ed:0f:d3:fa:77:a1:fe:f4:f2:4f:bb:bb:6c:0b:
94:d4:c9:84:5b:73:b5:7c:78:10:a4:ac:18:b2:45:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8D:35:61:42:A8:0D:A1:EC:84:28:71:93:F7:0E:40:BA:E6:D9:76
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9c:42:2f:bb:e8:f8:0e:ab:e7:28:93:b6:5e:09:07:b2:be:
46:c0:2b:9f:ac:9f:49:8f:e1:bd:21:41:24:5a:cb:78:ae:21:
ac:b5:28:dc:65:df:3c:d5:69:b5:8f:95:8c:23:5b:f3:7c:8e:
62:ef:55:70:24:3a:55:b9:5e:ec:22:d3:17:e9:84:e7:ff:4a:
ae:58:89:07:a5:1c:df:f1:f6:31:07:8e:58:7a:b2:f8:0b:df:
9e:4c:3b:f3:99:22:6a:83:89:bc:2a:27:b2:c0:d4:aa:a0:23:
84:ae:20:a8:87:7b:c2:54:2e:71:16:8c:4b:54:f6:ab:db:2d:
0b:ff:c6:d1:fa:8f:ac:bd:50:fd:1e:ad:be:8c:9d:b3:0c:76:
7b:24:07:82:5d:ec:60:91:34:85:d8:34:b2:9f:40:93:e0:10:
b1:b5:47:db:d4:28:f3:9e:a2:16:df:53:c5:4a:ed:d8:0c:7c:
35:4d:2d:80:37:2b:8c:0c:c6:d7:9f:cb:59:4a:4c:01:00:0a:
d9:03:3a:c0:ea:f2:d0:ea:5c:de:69:99:b8:e4:15:a6:94:e2:
87:5a:2b:65:50:22:bd:06:51:e6:1d:df:dc:0d:02:0b:44:97:
c5:e0:29:5a:2f:4b:57:f2:fc:f8:79:7a:82:8d:c5:21:db:c9:
69:45:18:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazoWU2iGnAG819aX75Ke5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZjE5ODcxYjE3NTlmMzIzNzAxMmU0YjZkYmI2YzJmZDJi
ZThiNGIwHhcNMjUwNTA5MDYwMDIwWhcNMjUwNTEwMDYwMDIwWjAzMTEwLwYDVQQD
EyhmMzhkMzU2MTQyYTgwZGExZWM4NDI4NzE5M2Y3MGU0MGJhZTZkOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2viE9mSffYSdStaOySmU1U+yU3d
5R6RnoCyharisSA5h2Zl/LOzsMmkrBtOQkhLXx29OvpWlpnfxmmOYmoNxQYjpAcs
03/knuL+7/pFFWhE98cVbQSDSIbPn8ylgTGj4YR5NFZhKV5NyWhXHS3rJX7V0yFz
b9LE8g5Ut22dc/d6bevxNKM+IeNFqUk2ZB2XNROnOe/AGuOoYJtbvR2kv6KNHuhw
p0jKEecQ9UV682f69BcYLIBEqUBHN6ojGH/PAGilSjPlqGHzXRsYjcKHRZlRD4pw
6noopRqMhjjBAfH57Q/T+neh/vTyT7u7bAuU1MmEW3O1fHgQpKwYskVUvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPONNWFCqA2h7IQocZP3DkC65tl2MB8GA1UdIwQY
MBaAFJ7xmHGxdZ8yNwEuS227bC/SvotLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQt
NGEwY2IyNTVkNzNhLzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQtNGEwY2IyNTVkNzNh
LzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5xCL7vo
+A6r5yiTtl4JB7K+RsArn6yfSY/hvSFBJFrLeK4hrLUo3GXfPNVptY+VjCNb83yO
Yu9VcCQ6Vble7CLTF+mE5/9KrliJB6Uc3/H2MQeOWHqy+Avfnkw785kiaoOJvCon
ssDUqqAjhK4gqId7wlQucRaMS1T2q9stC//G0fqPrL1Q/R6tvoydswx2eyQHgl3s
YJE0hdg0sp9Ak+AQsbVH29Qo856iFt9TxUrt2Ax8NU0tgDcrjAzG15/LWUpMAQAK
2QM6wOry0Opc3mmZuOQVppTih1orZVAivQZR5h3f3A0CC0SXxeApWi9LV/L8+Hl6
go3FIdvJaUUYRQ==
-----END CERTIFICATE-----
Generated at Fri May 9 13:16:20 2025 by rpki-client