Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: RcJkFE4caeK7Ld/MaS9DBo9vsEGP0RXWrVVbxqb5Wl0=
Subject key identifier: 04:95:4B:E7:66:D0:D0:C2:97:F6:34:80:CB:F3:84:69:2C:58:91:1E
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 0196BDEE7B1A4EB88A5A9585F8CFE47FDFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 1539
Signing time: Sun 11 May 2025 06:00:44 +0000
Manifest this update: Sun 11 May 2025 06:00:44 +0000
Manifest next update: Mon 12 May 2025 06:00:44 +0000
Files and hashes: 1: Etd-zR5nQJ_3oZWsvX_yh9qZs04.roa (hash: Va9UidVPtYR8CQHobQQrWe+S/Z2ABdjjbhF7ggqh2M0=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: PvnZ3I/KhL/h3LP47zqdzq7/juUGhvRn9sMlkT1e1rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:7b:1a:4e:b8:8a:5a:95:85:f8:cf:e4:7f:df:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: May 11 06:00:44 2025 GMT
Not After : May 12 06:00:44 2025 GMT
Subject: CN=04954be766d0d0c297f63480cbf384692c58911e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:bf:98:a8:e8:45:55:fb:03:38:21:9e:41:
fa:2c:0e:d4:4b:cc:12:e3:57:87:bd:e5:a5:bc:58:
a3:57:f7:db:20:0f:15:7d:fc:9b:e5:27:7f:2f:f1:
22:d0:a7:9a:20:2f:b6:66:91:44:91:67:53:12:6b:
ab:45:48:40:45:00:6e:60:b6:50:41:f3:52:0a:a7:
ec:19:6b:41:97:84:a8:24:93:fd:40:1b:64:ec:78:
46:4b:41:a4:8a:32:4d:16:c3:a8:b1:ec:2f:93:31:
ae:8f:bc:09:78:32:20:0b:84:28:65:81:f3:dd:c8:
c8:08:0d:c0:73:c0:77:39:55:e4:01:f6:c7:2b:d4:
fe:9b:54:0f:be:23:1c:91:3c:86:87:11:47:0a:8c:
c9:f5:73:ee:b7:03:17:f8:5b:e9:4c:9f:32:77:f5:
af:c5:33:49:da:12:69:5c:bd:3f:da:31:ab:c9:e9:
71:50:b4:34:21:0f:e7:28:48:8e:b6:2e:f3:04:13:
d2:01:74:28:e9:9a:5f:05:b3:da:12:1c:4f:d1:fe:
ac:24:8f:ae:55:5f:99:24:80:01:55:34:85:1a:a0:
59:d6:85:a3:31:12:fb:a7:34:29:b7:bf:02:66:2a:
22:95:30:7b:45:e4:ad:04:51:59:a9:3c:29:4c:26:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:4B:E7:66:D0:D0:C2:97:F6:34:80:CB:F3:84:69:2C:58:91:1E
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:50:65:13:0c:82:c7:b8:de:ed:0c:4e:64:a8:f4:ec:81:2f:
e9:dc:31:ad:c9:e7:17:b9:6c:c4:ca:77:67:47:9a:78:7c:4b:
dd:da:d2:f7:04:31:6d:94:8c:4b:0b:e8:5f:8a:d6:6c:d4:a8:
71:94:7c:3b:6e:58:de:b9:b9:48:aa:96:49:dd:a0:c1:0e:e9:
73:3f:e0:da:a8:d2:50:3d:b4:f7:c7:08:18:46:89:fe:53:2e:
60:1b:60:75:b3:f6:8c:58:28:f7:40:86:f5:8d:1c:91:9c:44:
07:d7:80:d5:2e:5c:b7:91:ac:21:40:a3:16:26:ad:33:74:f2:
b8:fb:1f:d1:51:57:02:1a:01:40:94:fe:e6:57:2d:78:17:6d:
ed:97:e4:4b:54:ec:a5:3d:75:d5:1a:05:7e:e8:76:bd:69:46:
57:c7:08:24:eb:32:f9:da:7e:fa:a2:f0:ee:74:fe:d9:29:42:
ef:0f:27:d5:46:bf:ca:cb:0a:29:64:78:8d:61:2b:64:e9:58:
4b:f9:21:40:70:ab:7e:db:51:5d:d2:43:0a:39:11:4e:89:32:
ae:45:2e:0d:c8:07:49:b8:53:79:fb:86:e7:68:8b:3a:d5:aa:
f2:f7:c2:bd:4f:b7:3a:be:a2:dd:77:e2:dc:5d:78:fc:13:97:
5c:60:d6:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97nsaTriKWpWF+M/kf9/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzcyMGU5NzBmYWEwZTA3ZjUwYTYzODllN2FlNTNhZmE0
MzlkYWIwHhcNMjUwNTExMDYwMDQ0WhcNMjUwNTEyMDYwMDQ0WjAzMTEwLwYDVQQD
EygwNDk1NGJlNzY2ZDBkMGMyOTdmNjM0ODBjYmYzODQ2OTJjNTg5MTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd+/mKjoRVX7AzghnkH6LA7US8wS
41eHveWlvFijV/fbIA8Vffyb5Sd/L/Ei0KeaIC+2ZpFEkWdTEmurRUhARQBuYLZQ
QfNSCqfsGWtBl4SoJJP9QBtk7HhGS0GkijJNFsOosewvkzGuj7wJeDIgC4QoZYHz
3cjICA3Ac8B3OVXkAfbHK9T+m1QPviMckTyGhxFHCozJ9XPutwMX+FvpTJ8yd/Wv
xTNJ2hJpXL0/2jGryelxULQ0IQ/nKEiOti7zBBPSAXQo6ZpfBbPaEhxP0f6sJI+u
VV+ZJIABVTSFGqBZ1oWjMRL7pzQpt78CZioilTB7ReStBFFZqTwpTCb7WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASVS+dm0NDCl/Y0gMvzhGksWJEeMB8GA1UdIwQY
MBaAFJ83IOlw+qDgf1CmOJ565Tr6Q52rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQt
MTJlNmEwZDQzMThhLzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQtMTJlNmEwZDQzMThh
LzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1BlEwyC
x7je7QxOZKj07IEv6dwxrcnnF7lsxMp3Z0eaeHxL3drS9wQxbZSMSwvoX4rWbNSo
cZR8O25Y3rm5SKqWSd2gwQ7pcz/g2qjSUD2098cIGEaJ/lMuYBtgdbP2jFgo90CG
9Y0ckZxEB9eA1S5ct5GsIUCjFiatM3TyuPsf0VFXAhoBQJT+5lcteBdt7ZfkS1Ts
pT111RoFfuh2vWlGV8cIJOsy+dp++qLw7nT+2SlC7w8n1Ua/yssKKWR4jWErZOlY
S/khQHCrfttRXdJDCjkRTokyrkUuDcgHSbhTefuG52iLOtWq8vfCvU+3Or6i3Xfi
3F14/BOXXGDWuQ==
-----END CERTIFICATE-----
Generated at Sun May 11 13:08:08 2025 by rpki-client