Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: lW2uKRAGjTPE3rO8GyF1EOUZqmnyCfp0a6Q+KhYjgIQ=
Subject key identifier: 05:B7:D9:5D:7D:34:62:EB:EF:C0:81:CD:AF:17:F9:5C:2D:FF:00:43
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 0196C239459D09957CBFFB0E70EE6653E565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 0E6D
Signing time: Mon 12 May 2025 02:00:55 +0000
Manifest this update: Mon 12 May 2025 02:00:55 +0000
Manifest next update: Tue 13 May 2025 02:00:55 +0000
Files and hashes: 1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: 97fGFEoc/NnaXdmTXWQuR1/NyFhUUiOqbvwoOJZb9BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:45:9d:09:95:7c:bf:fb:0e:70:ee:66:53:e5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: May 12 02:00:55 2025 GMT
Not After : May 13 02:00:55 2025 GMT
Subject: CN=05b7d95d7d3462ebefc081cdaf17f95c2dff0043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:3c:69:18:da:a0:65:42:1b:d3:63:73:3b:
34:db:d9:50:50:2a:46:65:54:a1:44:82:e5:0f:1c:
ae:e2:0f:fb:2d:14:90:68:2e:af:77:29:58:e4:96:
94:b1:fa:77:00:5b:1b:98:9e:a0:98:9a:00:c0:5e:
44:9d:ff:87:ef:48:35:3e:69:5a:eb:aa:c8:26:39:
b0:b3:52:9a:84:b0:4e:4c:22:7c:a4:20:58:4b:18:
0f:a9:d2:36:47:b6:4c:9d:e9:16:e4:31:83:e9:5b:
17:ef:79:a5:75:2b:dc:ec:5b:e0:8c:76:29:29:9c:
d4:d5:36:e9:42:02:82:45:ef:37:2b:88:5d:33:ee:
f7:21:ba:a1:25:c2:13:b0:da:16:72:26:29:f2:f2:
d7:06:09:22:73:50:08:72:1a:8a:02:10:12:f9:25:
b5:21:2f:6d:a0:df:5a:75:52:6c:99:4e:da:17:01:
3f:ed:23:92:c8:88:84:31:20:09:56:24:f2:34:16:
89:24:30:d0:8d:0f:15:48:d7:88:f8:53:dd:c6:a8:
0c:55:ea:67:18:e7:96:18:67:3f:6f:28:09:7e:83:
bc:14:36:c9:d4:95:8c:98:0f:3e:f2:d4:99:13:be:
84:33:b6:fc:ae:92:c6:fa:37:df:dd:29:5f:ff:f8:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B7:D9:5D:7D:34:62:EB:EF:C0:81:CD:AF:17:F9:5C:2D:FF:00:43
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:09:39:31:fa:97:26:62:cf:82:a6:f0:93:31:ae:b7:a0:87:
73:4e:dc:0e:36:d6:48:cf:2f:a0:d9:c8:39:16:d3:f4:44:5a:
2c:e2:37:2e:81:8a:74:e7:d1:49:44:5c:21:2a:48:19:3c:ac:
a3:39:fc:35:50:9c:d1:7d:b4:14:62:da:62:a5:36:ed:20:a6:
54:5f:22:04:8e:67:9b:ca:ef:43:c3:18:72:e8:0a:d2:16:48:
75:2a:93:af:eb:0d:77:ae:a5:f4:82:b1:94:27:bb:95:a2:e2:
b4:95:68:3e:86:25:99:8f:2a:de:b3:ba:a7:1c:b1:ac:26:1e:
7b:82:4d:79:13:4b:3d:1a:5d:aa:6b:54:c0:08:f2:c9:18:8b:
7f:46:cb:f5:ac:b8:f3:24:77:1c:cd:13:73:16:a4:e4:c5:76:
3c:ca:fc:48:ad:ee:3f:c6:1a:30:fd:e8:30:8b:8a:cf:83:78:
f0:30:b3:87:e0:72:03:54:e5:18:5c:e8:20:ab:81:1f:5b:f6:
f0:61:20:81:6f:9c:43:c0:e8:6b:85:33:ee:08:fc:c0:ea:e5:
ab:d4:62:d3:3b:02:7c:e4:b3:f7:27:b0:62:3c:56:a3:d1:83:
4c:90:91:d0:5a:56:bc:f4:ee:9b:93:d7:67:bf:93:c0:6b:44:
ba:11:89:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOUWdCZV8v/sOcO5mU+VlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YTYzZGM4NjEyMGU4N2Y0Y2ZmOGM1OWFmMzI2MWU2ZTEy
OTJmZDkwHhcNMjUwNTEyMDIwMDU1WhcNMjUwNTEzMDIwMDU1WjAzMTEwLwYDVQQD
EygwNWI3ZDk1ZDdkMzQ2MmViZWZjMDgxY2RhZjE3Zjk1YzJkZmYwMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypo8aRjaoGVCG9Njczs029lQUCpG
ZVShRILlDxyu4g/7LRSQaC6vdylY5JaUsfp3AFsbmJ6gmJoAwF5Enf+H70g1Pmla
66rIJjmws1KahLBOTCJ8pCBYSxgPqdI2R7ZMnekW5DGD6VsX73mldSvc7FvgjHYp
KZzU1TbpQgKCRe83K4hdM+73IbqhJcITsNoWciYp8vLXBgkic1AIchqKAhAS+SW1
IS9toN9adVJsmU7aFwE/7SOSyIiEMSAJViTyNBaJJDDQjQ8VSNeI+FPdxqgMVepn
GOeWGGc/bygJfoO8FDbJ1JWMmA8+8tSZE76EM7b8rpLG+jff3Slf//gRfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAW32V19NGLr78CBza8X+Vwt/wBDMB8GA1UdIwQY
MBaAFDSmPchhIOh/TP+MWa8yYebhKS/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEt
ZmM3YTBlYTZiMGUyLzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEtZmM3YTBlYTZiMGUy
LzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwk5MfqX
JmLPgqbwkzGut6CHc07cDjbWSM8voNnIORbT9ERaLOI3LoGKdOfRSURcISpIGTys
ozn8NVCc0X20FGLaYqU27SCmVF8iBI5nm8rvQ8MYcugK0hZIdSqTr+sNd66l9IKx
lCe7laLitJVoPoYlmY8q3rO6pxyxrCYee4JNeRNLPRpdqmtUwAjyyRiLf0bL9ay4
8yR3HM0Tcxak5MV2PMr8SK3uP8YaMP3oMIuKz4N48DCzh+ByA1TlGFzoIKuBH1v2
8GEggW+cQ8Doa4Uz7gj8wOrlq9Ri0zsCfOSz9yewYjxWo9GDTJCR0FpWvPTum5PX
Z7+TwGtEuhGJOw==
-----END CERTIFICATE-----
Generated at Mon May 12 10:44:24 2025 by rpki-client