Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: xU+8v0IPQm22bpA2oHGnASaqStA9+T89s+GDR4LEw28=
Subject key identifier: DC:DF:89:ED:F9:C1:DB:F3:80:22:16:E7:AD:06:51:36:C1:67:D1:BC
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 0196760CD5BA6DDDC899F4A6041B5CB08B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 07:01:14 +0000
Manifest this update: Sun 27 Apr 2025 07:01:14 +0000
Manifest next update: Mon 28 Apr 2025 07:01:14 +0000
Files and hashes: 1: Jhw9faAWoEdqP1e__8w7b6zkmPk.roa (hash: TQENvT9b218+4xF+VAk4clIU0JMsKTFbzJxIDRXuwJ4=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: 4z4Csnq01zm2OwgPZrVBx3Esu8EHk5YsNC5w0fBToKc=)
3: fubcea_39IkkaWowT_0PbtN75oM.roa (hash: b26RPXGBBJCeMiSKu69amdDTbZc6gUFdxgY2Yx3wVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:d5:ba:6d:dd:c8:99:f4:a6:04:1b:5c:b0:8b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Apr 27 07:01:14 2025 GMT
Not After : Apr 28 07:01:14 2025 GMT
Subject: CN=dcdf89edf9c1dbf3802216e7ad065136c167d1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:ab:1f:aa:6e:e2:8f:86:ef:00:f6:b5:24:
66:99:aa:90:c7:3a:b0:d4:f4:7e:ce:e8:f7:72:81:
d2:a0:0c:14:9d:1d:d0:d6:d9:2d:82:9b:e3:cd:2b:
d8:08:38:fe:50:3c:a5:ea:b0:d5:82:12:3e:ef:05:
2f:fb:26:90:00:a7:32:cc:0f:15:d3:14:5d:a8:63:
9f:ef:a2:62:01:51:fb:0a:09:ed:1f:55:b2:8e:1b:
10:d4:62:71:b6:c9:f8:82:37:66:07:b6:fb:20:86:
75:19:55:2b:65:da:7f:15:e6:5b:fd:26:76:c4:e3:
d8:16:bc:79:1d:07:0c:c6:45:78:c7:16:8f:c0:bb:
3c:96:d9:d8:91:d2:c5:ff:d6:1d:19:ac:cb:42:12:
57:1a:98:7a:8b:f3:9b:7e:ab:bd:62:30:ea:4f:5c:
a8:0d:b0:0a:b8:89:80:80:db:76:3c:ba:e7:6e:98:
01:41:39:3c:9a:c7:2c:3d:ed:78:b8:df:e3:96:a6:
ca:83:b1:1e:cf:73:78:b2:1f:19:ef:0d:c0:17:54:
54:b6:83:98:d0:ef:bf:48:01:00:b6:51:fb:dc:48:
4f:c1:5b:90:be:45:1c:49:48:af:04:f3:a2:ef:af:
3f:bb:2e:10:66:9e:c2:5e:d5:2a:a0:2f:b2:3b:99:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DF:89:ED:F9:C1:DB:F3:80:22:16:E7:AD:06:51:36:C1:67:D1:BC
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ba:96:0d:d4:63:cd:55:09:66:c2:9c:69:9d:14:dd:b7:44:
a9:6f:6c:ad:d0:62:de:d3:39:d6:c8:ae:79:90:1d:4c:58:32:
d3:ef:f9:2c:1d:46:c1:66:32:91:c3:a2:48:ea:16:23:ee:70:
fa:d6:08:2b:8f:37:5a:2b:37:46:5a:d9:c9:80:8d:20:0c:85:
bf:83:b9:75:9f:c5:2e:56:b4:0c:a5:54:81:26:9b:4f:99:c3:
06:ea:0b:58:49:80:31:10:42:01:36:07:ad:a8:32:6e:69:da:
9a:db:d2:f3:cc:52:96:86:59:4a:2f:7c:14:30:37:e8:56:79:
75:8b:f9:de:e8:54:02:d3:63:33:3b:5f:e0:8b:1d:b2:f6:eb:
bf:1a:c3:1a:a8:75:06:8d:9f:42:ee:41:52:65:8a:19:4f:e6:
d3:f7:c2:b3:b5:94:98:10:71:40:30:db:d1:12:22:8c:d3:80:
68:96:16:12:84:ed:a4:da:5c:89:bb:5d:a5:57:ee:83:28:f3:
5d:51:45:84:34:36:b1:fc:8c:c7:33:f3:9e:e4:37:21:2c:97:
46:92:44:e7:03:b2:b2:82:d9:26:9a:84:4e:71:fd:3c:6f:aa:
f8:de:b0:20:a0:62:9e:49:f3:1f:c8:5a:d1:ea:86:66:6b:08:
38:c8:5d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DNW6bd3ImfSmBBtcsIsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1M2UzZjI4ZTY0N2U5MmFjOGE3MTBjMzA1YzJlMjFiNjIz
ZWRjMWMwHhcNMjUwNDI3MDcwMTE0WhcNMjUwNDI4MDcwMTE0WjAzMTEwLwYDVQQD
EyhkY2RmODllZGY5YzFkYmYzODAyMjE2ZTdhZDA2NTEzNmMxNjdkMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+SrH6pu4o+G7wD2tSRmmaqQxzqw
1PR+zuj3coHSoAwUnR3Q1tktgpvjzSvYCDj+UDyl6rDVghI+7wUv+yaQAKcyzA8V
0xRdqGOf76JiAVH7CgntH1WyjhsQ1GJxtsn4gjdmB7b7IIZ1GVUrZdp/FeZb/SZ2
xOPYFrx5HQcMxkV4xxaPwLs8ltnYkdLF/9YdGazLQhJXGph6i/Obfqu9YjDqT1yo
DbAKuImAgNt2PLrnbpgBQTk8mscsPe14uN/jlqbKg7Eez3N4sh8Z7w3AF1RUtoOY
0O+/SAEAtlH73EhPwVuQvkUcSUivBPOi768/uy4QZp7CXtUqoC+yO5niAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzfie35wdvzgCIW560GUTbBZ9G8MB8GA1UdIwQY
MBaAFDU+PyjmR+kqyKcQwwXC4htiPtwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQt
ZGFjYTI2ZGU2ZjdiLzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQtZGFjYTI2ZGU2Zjdi
LzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlbqWDdRj
zVUJZsKcaZ0U3bdEqW9srdBi3tM51siueZAdTFgy0+/5LB1GwWYykcOiSOoWI+5w
+tYIK483Wis3RlrZyYCNIAyFv4O5dZ/FLla0DKVUgSabT5nDBuoLWEmAMRBCATYH
ragybmnamtvS88xSloZZSi98FDA36FZ5dYv53uhUAtNjMztf4IsdsvbrvxrDGqh1
Bo2fQu5BUmWKGU/m0/fCs7WUmBBxQDDb0RIijNOAaJYWEoTtpNpcibtdpVfugyjz
XVFFhDQ2sfyMxzPznuQ3ISyXRpJE5wOysoLZJpqETnH9PG+q+N6wIKBinknzH8ha
0eqGZmsIOMhd9A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:52:28 2025 by rpki-client