Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: XDf571GHIrjTQlZWFsalirHYuJk+t6NlVskkDVFn8UA=
Subject key identifier: 15:59:F8:03:7F:0A:69:79:74:E3:47:D7:A2:69:37:05:3F:38:70:42
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 01967FB483CC500816EA245B44FAE835C3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 04:00:58 +0000
Manifest this update: Tue 29 Apr 2025 04:00:58 +0000
Manifest next update: Wed 30 Apr 2025 04:00:58 +0000
Files and hashes: 1: Bha5fqCb4Fccw9Hz-g5tESnNC_M.roa (hash: 46eG+dZ14ZYRFYw5iRf0nTqMM6SE1SjEdU7Pao7e1x0=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: TeHhPrKbIijbHdb0vxFZ7KtjJKBfFwH3v+ngoIQ+YbM=)
3: k7ZKxdVx9_HpLEEXMgJ7VK0ot74.roa (hash: Jn0c0Y7u45CliHNs1mV0LEaHAyb9OLN6GTScJnODixs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:83:cc:50:08:16:ea:24:5b:44:fa:e8:35:c3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Apr 29 04:00:58 2025 GMT
Not After : Apr 30 04:00:58 2025 GMT
Subject: CN=1559f8037f0a697974e347d7a26937053f387042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:06:b0:08:da:6a:c9:86:1e:d1:08:dd:f2:9e:
c7:cd:cd:08:d8:d9:ee:8d:63:e4:4e:eb:af:34:eb:
99:85:14:41:f8:56:89:85:a9:d7:40:9e:05:8f:98:
91:54:70:b8:c2:4f:2c:2d:69:f3:52:c7:d9:3f:5c:
7f:60:0e:37:8d:47:56:d9:9b:50:a4:40:fc:68:2b:
0d:d5:50:39:14:90:90:72:b7:90:b1:81:27:53:e0:
e1:d3:f0:7e:18:7d:7c:77:5d:53:49:0c:80:cf:4a:
0d:39:f8:8f:46:51:83:2b:3f:72:7a:d6:6f:31:44:
a4:f6:40:78:25:a3:4c:31:d7:2b:aa:55:c6:b9:4e:
ac:f8:a1:98:e9:b6:eb:1f:21:73:3f:60:d8:4e:9f:
09:1d:c1:d3:df:9b:01:74:15:c8:ec:45:ac:15:9d:
f6:e8:93:c3:07:21:fe:1f:26:ba:39:da:c3:db:4f:
7a:77:b4:31:11:fd:f6:88:d2:e2:35:50:ec:cb:82:
48:eb:f4:c7:05:a8:70:1e:ff:8a:91:e8:c1:62:41:
dc:b6:e0:69:59:4e:e7:54:17:bf:9d:f7:0b:51:54:
f5:ff:77:d8:67:86:77:e0:27:a7:27:6e:f4:5b:49:
27:43:ef:a1:d6:78:c2:95:3a:89:b0:b4:2a:18:fb:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:59:F8:03:7F:0A:69:79:74:E3:47:D7:A2:69:37:05:3F:38:70:42
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b5:3a:59:a1:d4:9a:59:a9:49:05:0a:e4:d3:d1:59:32:35:
02:af:2b:6a:f4:9b:79:19:a8:7c:15:c9:44:49:18:81:8d:a9:
8f:73:62:a8:fb:b2:59:cb:60:20:40:da:21:78:19:2c:50:a8:
ab:d8:9d:07:f9:75:70:b3:4e:0d:58:59:2b:5f:c1:cd:dc:c1:
c3:f5:3d:d8:9b:93:70:8d:aa:9e:7f:db:38:8f:40:4d:55:45:
83:fe:26:a2:98:25:22:c5:16:7a:d6:d4:38:49:2e:6f:b7:d0:
aa:03:55:1f:d9:8d:f2:84:1b:8e:bf:a3:68:7b:05:0f:e4:82:
0b:8d:0b:03:a1:c7:e4:fb:6d:97:2b:e4:98:3e:3e:b5:23:a5:
fa:58:5e:7d:93:83:71:c9:59:29:11:e8:7b:8c:d1:0f:44:ef:
ab:ab:25:57:fc:f2:ca:57:0b:5f:92:65:47:77:09:71:4c:51:
65:e4:55:88:8d:b9:91:2f:97:d8:99:b3:13:69:36:84:69:70:
9f:be:bb:f5:43:b3:29:ab:c6:bd:d8:6c:69:4c:4f:c1:20:b6:
ba:e6:06:74:74:3e:b5:99:01:22:a0:79:2b:92:ab:32:99:3d:
99:17:9a:91:0f:28:b2:0d:d6:23:5e:6a:a3:61:e6:ed:0a:7f:
51:64:cf:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tIPMUAgW6iRbRProNcPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YTQ2NjhmZjgzODE0YWY5MGE3OGI0ZmM4ZDI2MjMyNTA1
OGNiYzYwHhcNMjUwNDI5MDQwMDU4WhcNMjUwNDMwMDQwMDU4WjAzMTEwLwYDVQQD
EygxNTU5ZjgwMzdmMGE2OTc5NzRlMzQ3ZDdhMjY5MzcwNTNmMzg3MDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QawCNpqyYYe0Qjd8p7Hzc0I2Nnu
jWPkTuuvNOuZhRRB+FaJhanXQJ4Fj5iRVHC4wk8sLWnzUsfZP1x/YA43jUdW2ZtQ
pED8aCsN1VA5FJCQcreQsYEnU+Dh0/B+GH18d11TSQyAz0oNOfiPRlGDKz9yetZv
MUSk9kB4JaNMMdcrqlXGuU6s+KGY6bbrHyFzP2DYTp8JHcHT35sBdBXI7EWsFZ32
6JPDByH+Hya6OdrD2096d7QxEf32iNLiNVDsy4JI6/THBahwHv+KkejBYkHctuBp
WU7nVBe/nfcLUVT1/3fYZ4Z34CenJ270W0knQ++h1njClTqJsLQqGPvyUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVZ+AN/Cml5dONH16JpNwU/OHBCMB8GA1UdIwQY
MBaAFDakZo/4OBSvkKeLT8jSYjJQWMvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3Yjkt
OTBlNjU0MTIyNTJhLzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3YjktOTBlNjU0MTIyNTJh
LzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbU6WaHU
mlmpSQUK5NPRWTI1Aq8ravSbeRmofBXJREkYgY2pj3NiqPuyWctgIEDaIXgZLFCo
q9idB/l1cLNODVhZK1/BzdzBw/U92JuTcI2qnn/bOI9ATVVFg/4mopglIsUWetbU
OEkub7fQqgNVH9mN8oQbjr+jaHsFD+SCC40LA6HH5PttlyvkmD4+tSOl+lhefZOD
cclZKRHoe4zRD0Tvq6slV/zyylcLX5JlR3cJcUxRZeRViI25kS+X2JmzE2k2hGlw
n7679UOzKavGvdhsaUxPwSC2uuYGdHQ+tZkBIqB5K5KrMpk9mReakQ8osg3WI15q
o2Hm7Qp/UWTP4g==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:05:06 2025 by rpki-client