Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json)
Hash identifier: QEjnMLigMH9ZPVO4m8YrtuQdEDz3pxDFTzsZtczzv2Q=
Subject key identifier: 8E:AF:CA:EE:B7:0B:B4:43:CE:3E:97:AA:F7:55:44:5F:95:35:EA:4E
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial: 0196DB8AAE0E12787FDA675105AD43FC7EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
Manifest number: 1542
Signing time: Sat 17 May 2025 00:00:20 +0000
Manifest this update: Sat 17 May 2025 00:00:20 +0000
Manifest next update: Sun 18 May 2025 00:00:20 +0000
Files and hashes: 1: F76FpI_z3pp7FvEBXhJ_sZMIEq4.roa (hash: 1qsVc/WLV0a8wJB91bXtNOSX8a5UYSQoJwoErMzZDKk=)
2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: 9iw5iPeUZEBvmUnO9jIS3oC/i+ChK6lT6v6yhM1nF0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:8a:ae:0e:12:78:7f:da:67:51:05:ad:43:fc:7e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Validity
Not Before: May 17 00:00:20 2025 GMT
Not After : May 18 00:00:20 2025 GMT
Subject: CN=8eafcaeeb70bb443ce3e97aaf755445f9535ea4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:08:1c:a7:8b:05:1d:ab:41:03:6e:ab:3d:7f:
d5:6d:7e:e9:cc:06:3e:b5:c0:09:4b:64:70:a4:e5:
42:49:95:04:24:95:bf:01:df:8e:23:20:57:d9:40:
38:5e:df:3d:dc:ec:91:bb:27:3a:56:09:dd:69:9e:
23:19:bc:b8:2a:f0:46:38:2a:bc:4c:bb:e0:9c:77:
12:37:23:7d:b6:29:16:1d:ea:01:58:a6:d8:d4:33:
03:ec:ae:9b:2f:ab:76:cd:93:12:57:2a:32:f0:28:
4d:b4:db:cf:8e:63:0a:5e:6e:1c:7f:26:11:30:93:
c5:fd:09:c2:98:75:dd:e0:12:76:90:76:c4:0a:02:
ad:1c:94:e2:af:ff:19:19:e0:d8:74:0e:1c:dc:e2:
0a:17:9d:81:1d:f9:ab:df:bc:e0:de:e5:9f:fa:64:
69:11:b9:7e:07:f1:ff:5f:a7:c3:f7:13:2e:1b:47:
61:68:8a:30:7f:74:75:74:83:ce:ac:13:5b:94:65:
72:24:87:11:a6:42:c2:b2:2e:79:5c:71:8a:2c:71:
91:0b:87:bd:0c:78:9c:ae:95:2f:d0:5e:d4:b3:72:
85:5d:57:38:4d:4f:26:e5:ec:b6:b3:ee:31:a4:5b:
9b:aa:be:06:32:b4:be:bc:f9:90:cf:8d:70:d1:82:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AF:CA:EE:B7:0B:B4:43:CE:3E:97:AA:F7:55:44:5F:95:35:EA:4E
X509v3 Authority Key Identifier:
keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8a:16:79:44:64:36:7f:e8:cb:0d:6b:37:35:8b:1c:d6:e5:
53:f6:4b:f9:e1:ad:5d:fe:cd:15:ae:21:9f:1b:36:df:9e:af:
d8:5d:6f:c6:e1:34:bd:65:f7:e8:8b:19:bc:44:9a:05:fe:d2:
a1:ad:ca:f0:13:af:d5:4e:7f:43:9e:bb:72:86:20:80:18:18:
fc:c7:7e:2b:59:85:a7:87:e1:63:26:26:44:3d:51:83:84:e5:
9b:1c:b0:89:ec:80:f3:75:25:00:56:46:5b:9b:38:44:69:e7:
4e:da:04:46:6e:f3:5a:a9:e2:c9:2f:f7:bb:ae:20:93:a7:37:
b4:af:ef:ea:5e:a8:d4:44:ea:e0:c4:64:a7:fe:81:ee:82:d1:
42:e2:b6:a0:bf:55:74:99:df:e0:ac:26:3d:c9:f6:4a:25:04:
e0:12:df:fc:d7:25:43:d3:2d:5c:67:99:19:f5:69:98:41:51:
57:83:aa:04:91:a0:20:77:17:67:0f:01:45:c8:d5:98:a5:08:
8a:a5:f4:f4:06:ad:a1:aa:09:4c:6b:df:90:ab:eb:25:5d:17:
57:08:65:c1:74:f6:43:db:7e:58:8e:90:02:75:20:f4:2a:e2:
45:7a:9b:e4:0e:27:af:f6:a9:5b:49:6b:f0:cc:7a:5b:1c:8e:
ca:08:c1:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbbiq4OEnh/2mdRBa1D/H7iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYTMxOWVhNTFjODAwM2FhZDk0YThlMjdjZTY5NDkyYWEy
ZTMzYTgwHhcNMjUwNTE3MDAwMDIwWhcNMjUwNTE4MDAwMDIwWjAzMTEwLwYDVQQD
Eyg4ZWFmY2FlZWI3MGJiNDQzY2UzZTk3YWFmNzU1NDQ1Zjk1MzVlYTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkggcp4sFHatBA26rPX/VbX7pzAY+
tcAJS2RwpOVCSZUEJJW/Ad+OIyBX2UA4Xt893OyRuyc6VgndaZ4jGby4KvBGOCq8
TLvgnHcSNyN9tikWHeoBWKbY1DMD7K6bL6t2zZMSVyoy8ChNtNvPjmMKXm4cfyYR
MJPF/QnCmHXd4BJ2kHbECgKtHJTir/8ZGeDYdA4c3OIKF52BHfmr37zg3uWf+mRp
Ebl+B/H/X6fD9xMuG0dhaIowf3R1dIPOrBNblGVyJIcRpkLCsi55XHGKLHGRC4e9
DHicrpUv0F7Us3KFXVc4TU8m5ey2s+4xpFubqr4GMrS+vPmQz41w0YIK8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6vyu63C7RDzj6XqvdVRF+VNepOMB8GA1UdIwQY
MBaAFJyjGepRyAA6rZSo4nzmlJKqLjOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjct
MGFkM2M3OTYyYzA5LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjctMGFkM2M3OTYyYzA5
LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYoWeURk
Nn/oyw1rNzWLHNblU/ZL+eGtXf7NFa4hnxs2356v2F1vxuE0vWX36IsZvESaBf7S
oa3K8BOv1U5/Q567coYggBgY/Md+K1mFp4fhYyYmRD1Rg4TlmxywieyA83UlAFZG
W5s4RGnnTtoERm7zWqniyS/3u64gk6c3tK/v6l6o1ETq4MRkp/6B7oLRQuK2oL9V
dJnf4KwmPcn2SiUE4BLf/NclQ9MtXGeZGfVpmEFRV4OqBJGgIHcXZw8BRcjVmKUI
iqX09AatoaoJTGvfkKvrJV0XVwhlwXT2Q9t+WI6QAnUg9CriRXqb5A4nr/apW0lr
8Mx6WxyOygjB7g==
-----END CERTIFICATE-----
Generated at Sat May 17 02:27:59 2025 by rpki-client