Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
File: NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft (raw, json)
Hash identifier: UpUZMYpUYpxow2AS+IBVgDMuOZq09Ce/SBsCl68xs3w=
Subject key identifier: 90:67:79:62:9F:99:C7:E2:B3:1F:75:45:D7:04:76:FD:D5:08:86:98
Authority key identifier: 34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
Certificate issuer: /CN=34012343a62f3f09b55cdbc01e75c38212a235df
Certificate serial: 019685B5DE39CDC2EE753327B7DB16A12D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
Manifest number: 0D1C
Signing time: Wed 30 Apr 2025 08:00:10 +0000
Manifest this update: Wed 30 Apr 2025 08:00:10 +0000
Manifest next update: Thu 01 May 2025 08:00:10 +0000
Files and hashes: 1: NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl (hash: THQKY8hSEzDz/o84MRrT2L+KGDtCvuAprxbGohGhVjM=)
2: hRAHaXw08T46yQXdPdRGo5FEyKc.roa (hash: kanS0GeR3i8daBZU7h/NZ29VRbj73ZfNj0diMdbJ7lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b5:de:39:cd:c2:ee:75:33:27:b7:db:16:a1:2d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34012343a62f3f09b55cdbc01e75c38212a235df
Validity
Not Before: Apr 30 08:00:10 2025 GMT
Not After : May 1 08:00:10 2025 GMT
Subject: CN=906779629f99c7e2b31f7545d70476fdd5088698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:3b:46:6c:47:3b:ad:0f:7f:19:22:7f:d0:
46:ee:fb:f9:36:e5:b9:f1:55:cc:ce:3f:33:7a:81:
e4:74:aa:f5:0f:68:74:6e:41:ca:3d:ed:34:24:0b:
d6:84:71:0d:72:65:c0:d9:b1:28:ff:a2:33:8b:55:
7f:9f:9d:4c:49:0a:f3:ce:a8:3f:20:0d:0c:98:e4:
39:08:5e:91:44:e0:f5:ea:73:74:9b:4d:ab:dd:56:
68:c1:7f:23:98:f5:b9:b4:97:a0:9f:ea:5c:73:73:
80:7f:77:66:fc:a7:e9:1c:7e:56:d4:ba:ed:cb:f1:
a9:30:aa:7d:f2:99:46:dc:29:ca:ee:be:b1:ef:58:
03:40:fc:45:a4:b7:22:c1:a6:e1:f6:54:7f:2c:2a:
4e:13:9e:66:4c:f5:12:9f:14:26:56:f2:d7:a8:a4:
53:8f:5a:4c:71:c7:da:f2:fe:cc:66:60:e3:83:c2:
b2:2f:16:78:85:ee:f7:a7:9c:9d:9d:dc:45:aa:37:
1f:b1:ca:37:ed:18:1e:13:25:de:bf:75:7a:d7:7c:
58:d3:1b:84:4c:6a:24:67:a3:e3:2e:5d:2b:ec:b1:
1e:17:e1:d0:9f:b5:1f:f2:98:92:31:5c:76:9d:79:
7d:5f:e6:f2:e5:92:8e:f8:6d:34:91:45:2a:ab:cd:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:67:79:62:9F:99:C7:E2:B3:1F:75:45:D7:04:76:FD:D5:08:86:98
X509v3 Authority Key Identifier:
keyid:34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:86:f3:82:76:8d:32:4f:e4:a1:a8:c6:97:c0:b7:4d:3a:4c:
8a:1a:7b:5a:c0:c7:15:f3:66:73:b2:1a:8f:2e:33:26:5b:58:
88:85:58:65:ba:15:6c:7c:32:b7:af:1c:8f:40:af:24:bc:3f:
31:f0:15:c1:bd:aa:35:dd:51:c4:c3:62:62:6f:d4:52:32:73:
be:9a:06:11:8f:21:d8:ae:63:c5:bc:6b:2e:5e:ee:ee:0b:dc:
4a:b1:1a:6b:9b:7c:ec:e6:be:11:c7:4d:96:ce:e8:ac:79:3c:
c0:f8:41:ad:84:80:fa:04:97:7b:12:e3:c0:0b:81:a6:51:c2:
86:4b:81:4f:3b:d5:f2:e8:10:fa:d5:69:3b:ea:75:b5:a5:b4:
9a:9a:71:83:48:88:f7:a0:82:fd:c0:7f:39:bf:21:e6:23:bb:
ff:9b:d1:ca:15:e0:b9:7b:75:fc:d1:cd:5b:40:a8:86:15:9f:
0c:fd:ed:24:cd:1f:7f:2f:8a:59:cc:69:ca:3b:69:68:e4:a2:
a1:ea:61:f6:81:84:84:d6:84:7b:32:24:7e:be:3b:90:ad:ee:
98:a6:af:7a:e5:76:de:7e:b4:48:d5:25:69:34:fb:59:2f:53:
e3:5a:20:c7:3a:28:19:53:f8:78:57:81:70:70:94:a1:8a:b3:
d5:e1:fa:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFtd45zcLudTMnt9sWoS1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDEyMzQzYTYyZjNmMDliNTVjZGJjMDFlNzVjMzgyMTJh
MjM1ZGYwHhcNMjUwNDMwMDgwMDEwWhcNMjUwNTAxMDgwMDEwWjAzMTEwLwYDVQQD
Eyg5MDY3Nzk2MjlmOTljN2UyYjMxZjc1NDVkNzA0NzZmZGQ1MDg4Njk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKI7RmxHO60Pfxkif9BG7vv5NuW5
8VXMzj8zeoHkdKr1D2h0bkHKPe00JAvWhHENcmXA2bEo/6Izi1V/n51MSQrzzqg/
IA0MmOQ5CF6RROD16nN0m02r3VZowX8jmPW5tJegn+pcc3OAf3dm/KfpHH5W1Lrt
y/GpMKp98plG3CnK7r6x71gDQPxFpLciwabh9lR/LCpOE55mTPUSnxQmVvLXqKRT
j1pMccfa8v7MZmDjg8KyLxZ4he73p5ydndxFqjcfsco37RgeEyXev3V613xY0xuE
TGokZ6PjLl0r7LEeF+HQn7Uf8piSMVx2nXl9X+by5ZKO+G00kUUqq81qbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBneWKfmcfisx91RdcEdv3VCIaYMB8GA1UdIwQY
MBaAFDQBI0OmLz8JtVzbwB51w4ISojXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFFalE2WXZQd20xWE52QUhuWERnaEtpTmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iMjMwMmUtYWFkZS00NjVhLWFhOWIt
MzJkMmJkZDRiYmIxLzEvTkFFalE2WXZQd20xWE52QUhuWERnaEtpTmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9iMjMwMmUtYWFkZS00NjVhLWFhOWItMzJkMmJkZDRiYmIx
LzEvTkFFalE2WXZQd20xWE52QUhuWERnaEtpTmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvIbzgnaN
Mk/koajGl8C3TTpMihp7WsDHFfNmc7Iajy4zJltYiIVYZboVbHwyt68cj0CvJLw/
MfAVwb2qNd1RxMNiYm/UUjJzvpoGEY8h2K5jxbxrLl7u7gvcSrEaa5t87Oa+EcdN
ls7orHk8wPhBrYSA+gSXexLjwAuBplHChkuBTzvV8ugQ+tVpO+p1taW0mppxg0iI
96CC/cB/Ob8h5iO7/5vRyhXguXt1/NHNW0CohhWfDP3tJM0ffy+KWcxpyjtpaOSi
oeph9oGEhNaEezIkfr47kK3umKaveuV23n60SNUlaTT7WS9T41ogxzooGVP4eFeB
cHCUoYqz1eH66w==
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:59:58 2025 by rpki-client