Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
File: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft (raw, json)
Hash identifier: vn24OJ4U8+kgLE4blLLAgHb+ca62G0RqT4UBjGSu5Gw=
Subject key identifier: ED:70:01:3B:40:1A:FD:EF:EC:B9:51:91:0D:45:61:8E:E4:6F:09:3A
Authority key identifier: 36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
Certificate issuer: /CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Certificate serial: 019689CA5EF53690A2E65B3E915392021D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
Manifest number: 0416
Signing time: Thu 01 May 2025 03:01:03 +0000
Manifest this update: Thu 01 May 2025 03:01:03 +0000
Manifest next update: Fri 02 May 2025 03:01:03 +0000
Files and hashes: 1: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl (hash: ZzUChZCzm2CdUE3dU3Oe0hxari4aKk2J6yvAGA7H30k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:5e:f5:36:90:a2:e6:5b:3e:91:53:92:02:1d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Validity
Not Before: May 1 03:01:03 2025 GMT
Not After : May 2 03:01:03 2025 GMT
Subject: CN=ed70013b401afdefecb951910d45618ee46f093a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:bd:17:e6:cd:84:fc:c6:d1:d7:20:b5:f8:
d8:2b:6e:d7:32:4e:fd:8b:bd:df:2f:af:d0:3d:ca:
3e:11:63:1e:13:c6:54:75:ee:9f:af:4f:91:8f:5c:
74:35:9d:7d:5d:5c:bd:f6:30:66:ac:12:c5:fa:d0:
62:97:ff:6b:32:aa:bc:d6:5d:54:0e:fc:e0:10:b3:
60:e1:02:2c:0e:9a:be:10:c3:54:a9:9d:3b:74:d1:
ac:b4:17:bc:f3:b0:56:62:3b:79:05:91:86:00:13:
bf:87:f5:de:13:87:fe:08:3a:e6:6a:74:cd:17:7f:
b2:6c:62:b5:f0:19:71:cc:31:d6:ee:8b:a7:7d:36:
5a:4e:12:f1:15:62:0f:0d:e6:a8:c3:74:3d:14:9f:
8f:6b:4c:09:a4:20:8b:89:01:e5:18:df:35:f2:e1:
d8:f5:7b:d7:25:c0:e3:a5:77:b8:f7:ef:40:66:bc:
f3:81:5d:da:be:a2:99:2b:15:22:b0:d1:dd:96:a9:
2c:24:42:21:6c:7f:6a:e0:52:37:53:ac:6d:ef:12:
96:0e:37:6f:af:d6:b8:12:9d:82:48:0b:f6:fb:ea:
36:b4:f0:9a:83:a5:85:b6:8a:de:70:c5:fc:24:90:
48:55:23:94:35:9c:f9:f1:8a:22:44:65:ed:1b:be:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:70:01:3B:40:1A:FD:EF:EC:B9:51:91:0D:45:61:8E:E4:6F:09:3A
X509v3 Authority Key Identifier:
keyid:36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9a:66:84:5f:83:38:ac:9e:fe:42:a5:8f:d4:7a:f8:a5:7b:
c6:9d:ec:a6:df:41:9d:ff:73:ec:9a:d8:84:38:26:06:83:e9:
88:5a:c4:7e:4c:e2:d4:c6:ad:e2:47:a5:b3:6a:c4:61:b4:4b:
b0:5a:3f:d9:d2:db:f4:b7:d5:dd:b0:f0:58:74:1e:6c:2f:9c:
a5:cf:37:78:de:6e:7c:71:73:01:89:46:1f:8a:41:51:b2:6c:
da:1e:fc:60:07:32:40:66:bf:cf:9c:ef:71:99:e2:28:95:85:
49:82:1a:98:52:be:5a:2e:31:72:fb:83:5f:73:99:2a:52:e0:
58:ae:26:41:d7:10:34:fe:1b:2e:28:68:ca:cb:66:90:f0:cb:
a7:9a:10:d1:a6:c6:e0:75:50:f0:31:bf:80:c1:78:d5:65:fa:
be:a1:32:a7:e7:64:b6:a2:29:69:94:0e:38:65:19:c7:0d:43:
ca:71:45:3c:ae:8a:9c:87:48:29:6e:9e:4b:52:29:9e:fb:55:
8f:d5:ed:dc:1e:8b:d7:7b:ea:0c:7c:6a:80:62:54:17:b6:a1:
27:0b:44:29:5f:51:af:fe:28:96:80:9f:c1:25:5a:ea:59:44:
36:8d:74:e3:70:c0:78:a9:6d:6d:19:b4:a4:22:ac:56:95:50:
ab:63:33:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJyl71NpCi5ls+kVOSAh1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NGNlY2FkYmJmY2JlOTYxYjQyZWQwNjI3NzdjOGM1Njg3
YzM2NzEwHhcNMjUwNTAxMDMwMTAzWhcNMjUwNTAyMDMwMTAzWjAzMTEwLwYDVQQD
EyhlZDcwMDEzYjQwMWFmZGVmZWNiOTUxOTEwZDQ1NjE4ZWU0NmYwOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMq9F+bNhPzG0dcgtfjYK27XMk79
i73fL6/QPco+EWMeE8ZUde6fr0+Rj1x0NZ19XVy99jBmrBLF+tBil/9rMqq81l1U
DvzgELNg4QIsDpq+EMNUqZ07dNGstBe887BWYjt5BZGGABO/h/XeE4f+CDrmanTN
F3+ybGK18BlxzDHW7ounfTZaThLxFWIPDeaow3Q9FJ+Pa0wJpCCLiQHlGN818uHY
9XvXJcDjpXe49+9AZrzzgV3avqKZKxUisNHdlqksJEIhbH9q4FI3U6xt7xKWDjdv
r9a4Ep2CSAv2++o2tPCag6WFtorecMX8JJBIVSOUNZz58YoiRGXtG75crQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1wATtAGv3v7LlRkQ1FYY7kbwk6MB8GA1UdIwQY
MBaAFDZM7K27/L6WG0LtBid3yMVofDZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmt6c3Jidjh2cFliUXUwR0ozZkl4V2g4Tm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jZTYyNzQtYjg3Yi00YTVkLWJlMjQt
MzU2NjBlNzFiYTM4LzEvTmt6c3Jidjh2cFliUXUwR0ozZkl4V2g4Tm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9jZTYyNzQtYjg3Yi00YTVkLWJlMjQtMzU2NjBlNzFiYTM4
LzEvTmt6c3Jidjh2cFliUXUwR0ozZkl4V2g4Tm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJpmhF+D
OKye/kKlj9R6+KV7xp3spt9Bnf9z7JrYhDgmBoPpiFrEfkzi1Mat4kels2rEYbRL
sFo/2dLb9LfV3bDwWHQebC+cpc83eN5ufHFzAYlGH4pBUbJs2h78YAcyQGa/z5zv
cZniKJWFSYIamFK+Wi4xcvuDX3OZKlLgWK4mQdcQNP4bLihoystmkPDLp5oQ0abG
4HVQ8DG/gMF41WX6vqEyp+dktqIpaZQOOGUZxw1DynFFPK6KnIdIKW6eS1IpnvtV
j9Xt3B6L13vqDHxqgGJUF7ahJwtEKV9Rr/4oloCfwSVa6llENo1043DAeKltbRm0
pCKsVpVQq2MzBQ==
-----END CERTIFICATE-----
Generated at Thu May 1 06:47:57 2025 by rpki-client