Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: dUh7M03KxDekSfirGkYllWNeCJYVlkL9/eOwbeMkF7w=
Subject key identifier: 9B:49:24:F0:99:E0:28:81:BC:A7:F1:C7:D9:B1:62:47:AB:D6:B1:86
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 0196A01A76469A68E6D88F828926F6A5F7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 0BFA
Signing time: Mon 05 May 2025 11:00:10 +0000
Manifest this update: Mon 05 May 2025 11:00:10 +0000
Manifest next update: Tue 06 May 2025 11:00:10 +0000
Files and hashes: 1: Puy-0P_jBepIb5u3SpvEh4v47j8.roa (hash: ZN41z34tLWoaRsScijTCdX/mIzcEneubj96rKehXEgw=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: o2bvrDPH0Pz1SqNR0kofjeyaW8UOYVn6sPFW99DyaO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:76:46:9a:68:e6:d8:8f:82:89:26:f6:a5:f7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: May 5 11:00:10 2025 GMT
Not After : May 6 11:00:10 2025 GMT
Subject: CN=9b4924f099e02881bca7f1c7d9b16247abd6b186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:28:54:8b:42:b6:19:fa:87:a1:d3:c1:59:
62:35:fc:0c:01:33:19:3f:e3:e1:ef:a2:bf:cc:b4:
0c:52:da:16:58:91:81:37:97:dc:b8:08:61:27:17:
76:15:2a:03:90:06:e7:9b:ad:44:25:02:60:f9:87:
fd:73:9e:22:0e:3d:88:29:64:ea:26:07:2a:9f:93:
cd:a1:42:ff:82:9f:3e:9e:90:02:bb:e0:03:b3:c3:
f2:a2:6f:13:5a:15:4a:1f:22:67:a1:88:bc:11:94:
f4:9c:fb:42:09:a3:84:7d:13:9c:ea:08:ac:cc:f8:
e3:2a:e8:d4:ee:fe:de:8e:00:cf:d8:e5:cf:8b:b2:
5c:79:e5:39:b7:be:e3:98:d5:c4:fe:4a:a4:a4:eb:
be:d5:90:02:95:b8:3b:a4:3c:7b:00:c9:22:ba:ae:
35:cb:02:79:ed:f9:83:64:07:f2:20:16:8f:96:91:
22:83:d9:e7:7b:1d:04:94:a0:4a:48:50:d4:51:3f:
45:de:c4:f2:db:22:5e:e6:c1:4c:4e:2f:1a:24:e6:
9a:d0:c7:38:58:02:d2:57:b5:c3:cc:7a:2f:b9:dd:
e3:9b:cb:43:92:ee:f0:5d:1b:68:15:1e:49:f7:7c:
b2:be:9e:70:6b:35:9f:99:4e:0c:21:fc:8b:8b:df:
59:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:49:24:F0:99:E0:28:81:BC:A7:F1:C7:D9:B1:62:47:AB:D6:B1:86
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0c:1b:de:25:a6:c5:de:b8:47:93:72:d1:f7:1a:3e:89:fe:
e0:ab:1e:37:66:1d:9f:57:15:44:2f:7e:af:ee:e4:25:1f:7e:
10:cb:8d:f3:3d:df:c4:d9:ea:65:a0:d7:b2:ff:d8:f0:03:dc:
fe:2f:c8:05:c4:0d:7b:3b:30:f4:6a:0d:4d:a2:a4:0e:79:e1:
06:48:00:d7:95:28:de:32:b7:13:0a:39:b8:12:ac:f3:22:3a:
80:71:eb:85:28:f9:e0:62:23:80:dc:08:2a:d4:a0:5f:c5:a2:
72:08:f8:c5:8d:4c:78:4d:52:93:a5:3e:56:58:3e:81:c8:b2:
99:2f:b8:51:9d:de:d8:c5:43:5f:10:b8:0f:54:9c:bb:78:d5:
9b:76:a7:aa:e1:63:94:3b:13:fb:2d:9f:2f:6e:ef:87:39:ef:
32:17:67:39:dd:b1:99:e8:01:52:6c:2f:1e:8d:1f:93:e5:96:
d3:5d:59:fa:f1:d2:f5:ae:ed:80:f5:95:a4:f6:d8:83:c1:88:
a3:ce:52:c1:ac:61:f4:b2:af:19:af:16:77:de:95:8f:8f:3f:
30:3f:a8:58:69:fc:0c:b1:75:6c:99:a2:2c:5c:83:1d:d4:c3:
c3:0c:9b:2c:ea:39:11:ab:35:11:15:bd:3a:04:6e:e8:5a:c6:
c9:7a:16:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGnZGmmjm2I+CiSb2pff+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzA3ZTc3NjczMGMyYzJlY2JhNmI5ZWU5NTcyMTJhZDU4
ZDVjZGIwHhcNMjUwNTA1MTEwMDEwWhcNMjUwNTA2MTEwMDEwWjAzMTEwLwYDVQQD
Eyg5YjQ5MjRmMDk5ZTAyODgxYmNhN2YxYzdkOWIxNjI0N2FiZDZiMTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8coVItCthn6h6HTwVliNfwMATMZ
P+Ph76K/zLQMUtoWWJGBN5fcuAhhJxd2FSoDkAbnm61EJQJg+Yf9c54iDj2IKWTq
Jgcqn5PNoUL/gp8+npACu+ADs8Pyom8TWhVKHyJnoYi8EZT0nPtCCaOEfROc6gis
zPjjKujU7v7ejgDP2OXPi7JceeU5t77jmNXE/kqkpOu+1ZAClbg7pDx7AMkiuq41
ywJ57fmDZAfyIBaPlpEig9nnex0ElKBKSFDUUT9F3sTy2yJe5sFMTi8aJOaa0Mc4
WALSV7XDzHovud3jm8tDku7wXRtoFR5J93yyvp5wazWfmU4MIfyLi99Z8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtJJPCZ4CiBvKfxx9mxYker1rGGMB8GA1UdIwQY
MBaAFP5wfndnMMLC7LprnulXISrVjVzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGIt
ODcxNTQwMzMwODU5LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGItODcxNTQwMzMwODU5
LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAwb3iWm
xd64R5Ny0fcaPon+4KseN2Ydn1cVRC9+r+7kJR9+EMuN8z3fxNnqZaDXsv/Y8APc
/i/IBcQNezsw9GoNTaKkDnnhBkgA15Uo3jK3Ewo5uBKs8yI6gHHrhSj54GIjgNwI
KtSgX8Wicgj4xY1MeE1Sk6U+Vlg+gciymS+4UZ3e2MVDXxC4D1Scu3jVm3anquFj
lDsT+y2fL27vhznvMhdnOd2xmegBUmwvHo0fk+WW011Z+vHS9a7tgPWVpPbYg8GI
o85Swaxh9LKvGa8Wd96Vj48/MD+oWGn8DLF1bJmiLFyDHdTDwwybLOo5Eas1ERW9
OgRu6FrGyXoWLA==
-----END CERTIFICATE-----
Generated at Mon May 5 21:20:32 2025 by rpki-client