Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: K1+4OBSpBMeYR2rhT0hXy77xeM0l/nl8wmcg8DghjNU=
Subject key identifier: FF:DE:B2:AA:F7:BA:59:65:D3:65:8A:6C:79:0D:C5:32:8E:A5:EF:7C
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 0196AC8CAEBBD5AD8BD9046EDEC8A64F149F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 0E55
Signing time: Wed 07 May 2025 21:00:22 +0000
Manifest this update: Wed 07 May 2025 21:00:22 +0000
Manifest next update: Thu 08 May 2025 21:00:22 +0000
Files and hashes: 1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=)
2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=)
3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=)
4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=)
5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=)
6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=)
7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=)
8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=)
9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: +HMtcT/BHWAaqy6G0A0WlE8+0KVrVp/cm/2wPIeCo4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8c:ae:bb:d5:ad:8b:d9:04:6e:de:c8:a6:4f:14:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: May 7 21:00:22 2025 GMT
Not After : May 8 21:00:22 2025 GMT
Subject: CN=ffdeb2aaf7ba5965d3658a6c790dc5328ea5ef7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:16:fc:1d:b9:fc:89:17:92:d4:6c:6f:cf:51:
35:c0:dc:1e:e7:ed:47:03:26:2a:2e:7e:05:ae:2e:
6b:38:a7:e6:96:de:46:dd:10:d5:da:d1:eb:05:86:
6c:ad:49:a3:de:72:c1:82:e9:7c:a2:a4:d3:f0:ff:
2d:d5:76:76:f2:3a:d7:86:21:6f:0a:25:ef:8f:81:
9c:97:68:da:d0:2a:76:d8:87:98:4d:82:aa:9b:fa:
05:a0:4c:b8:3f:56:33:11:44:2c:cd:a8:63:5d:a7:
30:8d:3d:28:40:bc:50:06:48:5c:11:81:c0:a3:03:
8c:51:5a:57:e6:ee:4b:0f:8f:f2:c2:79:87:ac:52:
fb:f8:ee:d1:e3:43:b8:49:79:82:5b:fb:67:04:b4:
ef:42:6d:d3:58:30:6d:a1:d3:cd:64:1b:96:11:50:
0b:7c:0c:fb:5e:1f:67:21:da:d9:80:65:c6:a9:6a:
e2:33:8a:ab:a6:3e:3d:8d:35:95:c4:75:79:e1:0e:
4a:1c:6f:ba:1c:34:c4:78:08:cc:08:f6:72:d8:65:
b9:fb:eb:2a:42:a8:7d:b6:18:2e:20:f7:66:46:51:
8a:47:79:df:ef:cc:68:7c:b2:cf:f5:85:e4:0e:8e:
3a:1e:81:8e:66:6a:88:7e:4a:37:cc:a8:29:89:a7:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DE:B2:AA:F7:BA:59:65:D3:65:8A:6C:79:0D:C5:32:8E:A5:EF:7C
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2b:b3:1b:67:1d:e8:62:24:33:92:90:96:c9:0c:1d:fc:7a:
47:03:6c:dd:5e:3c:b0:0c:50:23:62:2d:3f:df:22:a9:1b:69:
c7:0d:6a:07:ff:6b:e0:57:c7:94:bc:c4:ee:5f:77:db:42:34:
d5:10:1d:77:37:bb:13:0f:dd:75:65:f9:e1:5b:d4:d6:95:c8:
29:b6:82:3a:93:a4:3f:ea:66:a5:f1:62:f2:d0:87:86:f8:ac:
c5:af:76:d5:0e:fc:41:94:c4:cb:74:3b:2f:84:d2:03:8f:92:
b1:2c:d0:78:00:37:00:23:f7:94:c6:90:13:db:d0:ae:ad:55:
92:aa:49:2e:a4:ff:06:b6:17:09:8c:e5:1b:e1:2f:6f:25:10:
c0:d2:1a:19:87:74:7f:d7:31:33:90:d5:53:db:c5:84:39:08:
d0:74:30:fe:46:c7:23:05:73:49:c8:ae:f5:71:27:c4:18:06:
23:d7:66:f5:4f:19:46:d1:5d:a2:91:4d:83:8f:be:55:0d:26:
06:9a:07:33:7b:b6:84:72:4e:1d:ef:a1:44:75:30:03:aa:c5:
ed:a4:be:7e:e1:77:16:11:b7:ec:a7:11:0c:f9:db:01:1d:66:
23:a4:1e:82:7f:ee:6d:ba:07:a2:52:8e:c1:81:d5:91:8d:76:
40:21:76:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasjK671a2L2QRu3simTxSfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjUwNTA3MjEwMDIyWhcNMjUwNTA4MjEwMDIyWjAzMTEwLwYDVQQD
EyhmZmRlYjJhYWY3YmE1OTY1ZDM2NThhNmM3OTBkYzUzMjhlYTVlZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRb8Hbn8iReS1Gxvz1E1wNwe5+1H
AyYqLn4Fri5rOKfmlt5G3RDV2tHrBYZsrUmj3nLBgul8oqTT8P8t1XZ28jrXhiFv
CiXvj4Gcl2ja0Cp22IeYTYKqm/oFoEy4P1YzEUQszahjXacwjT0oQLxQBkhcEYHA
owOMUVpX5u5LD4/ywnmHrFL7+O7R40O4SXmCW/tnBLTvQm3TWDBtodPNZBuWEVAL
fAz7Xh9nIdrZgGXGqWriM4qrpj49jTWVxHV54Q5KHG+6HDTEeAjMCPZy2GW5++sq
Qqh9thguIPdmRlGKR3nf78xofLLP9YXkDo46HoGOZmqIfko3zKgpiaePZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/esqr3ulll02WKbHkNxTKOpe98MB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSuzG2cd
6GIkM5KQlskMHfx6RwNs3V48sAxQI2ItP98iqRtpxw1qB/9r4FfHlLzE7l9320I0
1RAddze7Ew/ddWX54VvU1pXIKbaCOpOkP+pmpfFi8tCHhvisxa921Q78QZTEy3Q7
L4TSA4+SsSzQeAA3ACP3lMaQE9vQrq1VkqpJLqT/BrYXCYzlG+EvbyUQwNIaGYd0
f9cxM5DVU9vFhDkI0HQw/kbHIwVzSciu9XEnxBgGI9dm9U8ZRtFdopFNg4++VQ0m
BpoHM3u2hHJOHe+hRHUwA6rF7aS+fuF3FhG37KcRDPnbAR1mI6Qegn/ubboHolKO
wYHVkY12QCF2aQ==
-----END CERTIFICATE-----
Generated at Thu May 8 07:29:54 2025 by rpki-client