Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: 4UYuXS5jCWS14wMtZXMsVcryjB1E5t/L0/MBM5Bz5k8=
Subject key identifier: E8:41:A6:A3:85:F0:9B:D4:01:F6:3D:FE:21:EF:05:13:A3:65:A8:E1
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 0196CBE16F9174F52B8E44DA7EE8D00FE2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 23:01:11 +0000
Manifest this update: Tue 13 May 2025 23:01:11 +0000
Manifest next update: Wed 14 May 2025 23:01:11 +0000
Files and hashes: 1: CpF6aVcFa4aSib91gY7r_oRg7yk.roa (hash: g98Tlf03Q7mP804tnDVA4hODWWDgDXRhH7RoV+ttI2w=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: LfOavxn18opXXJA6IaTYwA9BlmmwKpg4JHA+X8/PUyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:6f:91:74:f5:2b:8e:44:da:7e:e8:d0:0f:e2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: May 13 23:01:11 2025 GMT
Not After : May 14 23:01:11 2025 GMT
Subject: CN=e841a6a385f09bd401f63dfe21ef0513a365a8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:15:2d:f5:34:31:4e:f1:50:2b:0f:70:08:
52:86:c7:1a:39:1a:a0:5a:c4:10:7b:77:04:47:e7:
22:99:7d:9a:fa:e9:34:7e:15:c8:8a:7b:e5:da:24:
5a:3e:94:30:3d:a0:0c:a9:6a:8d:cf:66:be:2d:34:
be:11:2e:8f:d0:a8:53:34:27:eb:a9:56:8c:e2:15:
d3:43:a2:71:9f:2c:8c:b9:f3:98:42:e1:03:69:b6:
01:49:ff:10:d4:11:6f:dc:f3:31:4c:40:a4:5f:4c:
ed:e8:37:1d:bd:ef:41:0c:89:e9:74:62:b3:6a:2b:
1a:7d:f3:bf:8b:3b:c4:39:ad:2c:17:7b:d6:8f:c6:
85:fe:e0:16:30:a9:4c:0a:fe:16:3a:76:f3:ee:fc:
53:b2:31:a3:34:b1:f2:a1:de:f3:7e:df:58:ae:57:
b3:00:f8:f1:35:34:e6:94:87:68:de:65:05:98:d3:
35:fa:24:50:81:3e:28:e1:80:55:6f:c7:13:0f:9d:
bd:6c:f3:1e:55:69:a7:9c:db:58:6c:dc:20:56:4a:
3a:85:9b:ec:f0:23:d4:bd:59:71:37:f8:84:94:73:
b4:4a:af:40:58:b4:55:b5:1d:cc:39:60:b9:20:5a:
8b:6d:10:18:af:e9:07:9c:8d:4e:dd:29:a6:34:a1:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:41:A6:A3:85:F0:9B:D4:01:F6:3D:FE:21:EF:05:13:A3:65:A8:E1
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:97:d5:29:53:20:de:22:5f:22:54:8e:32:53:9b:b2:55:10:
ca:17:1f:40:c4:43:20:24:33:72:93:63:56:d7:85:ce:0d:96:
b4:d4:1d:c9:25:80:6f:5d:2a:5b:6c:9e:ac:01:a0:9f:a5:02:
d2:97:f0:11:3c:12:26:e9:43:2c:e4:32:ff:d0:0a:23:08:74:
0f:d3:66:07:64:ae:c5:b2:fd:78:95:e6:86:53:86:a3:4b:9c:
f9:fc:85:02:fa:1b:83:c6:02:5f:7c:38:fc:2b:78:38:fb:45:
fd:af:9d:a7:80:a6:6b:11:96:13:a4:eb:6e:e8:25:67:f8:bc:
ca:44:ca:b5:a8:18:30:dc:bb:b8:bf:69:57:c2:41:94:b3:02:
28:37:82:25:90:8d:3a:31:94:f5:04:4b:3c:f9:a5:e2:8f:8b:
ed:98:fc:cd:f3:21:59:88:ea:12:69:77:b9:6c:11:e0:50:7a:
47:4b:b5:66:f9:9e:d3:61:2e:9b:15:06:9f:15:d1:2e:bb:87:
19:09:8b:23:71:09:9f:97:c0:ba:1a:e0:17:0f:b6:b2:84:a0:
82:4e:1e:25:6c:e0:b8:fd:a8:a1:0b:01:22:76:26:68:8c:7f:
ae:c3:6c:08:4a:85:81:aa:64:30:c0:b1:dc:8e:46:e9:52:a9:
06:8b:5a:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbL4W+RdPUrjkTafujQD+L8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNTJiNmEwNTE0NzFiZWM1MWRiNzRkNzI1NmU3YTMwYTU1
ZWNmMWEwHhcNMjUwNTEzMjMwMTExWhcNMjUwNTE0MjMwMTExWjAzMTEwLwYDVQQD
EyhlODQxYTZhMzg1ZjA5YmQ0MDFmNjNkZmUyMWVmMDUxM2EzNjVhOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTgVLfU0MU7xUCsPcAhShscaORqg
WsQQe3cER+cimX2a+uk0fhXIinvl2iRaPpQwPaAMqWqNz2a+LTS+ES6P0KhTNCfr
qVaM4hXTQ6JxnyyMufOYQuEDabYBSf8Q1BFv3PMxTECkX0zt6Dcdve9BDInpdGKz
aisaffO/izvEOa0sF3vWj8aF/uAWMKlMCv4WOnbz7vxTsjGjNLHyod7zft9Yrlez
APjxNTTmlIdo3mUFmNM1+iRQgT4o4YBVb8cTD529bPMeVWmnnNtYbNwgVko6hZvs
8CPUvVlxN/iElHO0Sq9AWLRVtR3MOWC5IFqLbRAYr+kHnI1O3SmmNKFO2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhBpqOF8JvUAfY9/iHvBROjZajhMB8GA1UdIwQY
MBaAFJxStqBRRxvsUdt01yVuejClXs8aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAt
MjgyOWFhM2RmMjU4LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAtMjgyOWFhM2RmMjU4
LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpfVKVMg
3iJfIlSOMlObslUQyhcfQMRDICQzcpNjVteFzg2WtNQdySWAb10qW2yerAGgn6UC
0pfwETwSJulDLOQy/9AKIwh0D9NmB2SuxbL9eJXmhlOGo0uc+fyFAvobg8YCX3w4
/Ct4OPtF/a+dp4CmaxGWE6TrbuglZ/i8ykTKtagYMNy7uL9pV8JBlLMCKDeCJZCN
OjGU9QRLPPml4o+L7Zj8zfMhWYjqEml3uWwR4FB6R0u1Zvme02EumxUGnxXRLruH
GQmLI3EJn5fAuhrgFw+2soSggk4eJWzguP2ooQsBInYmaIx/rsNsCEqFgapkMMCx
3I5G6VKpBotaRw==
-----END CERTIFICATE-----
Generated at Wed May 14 02:45:22 2025 by rpki-client