Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier: MnxKzbTayqxudd3wWRmLtoZCngATZO+ATzdAforVedo=
Subject key identifier: 40:39:5F:AA:79:6A:0A:56:58:0C:70:7B:B1:EE:35:32:4D:85:9B:85
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 0196711CEE9F996B69C69B2B6D909032F976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number: 0214
Signing time: Sat 26 Apr 2025 08:00:43 +0000
Manifest this update: Sat 26 Apr 2025 08:00:43 +0000
Manifest next update: Sun 27 Apr 2025 08:00:43 +0000
Files and hashes: 1: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: +s8LcYMoWo3g8ZWoX/TF6pNfLOqfFen0W99/sQDiKFo=)
2: RcZOQzwVPzta74FZUHn3H3BrDfw.roa (hash: V0krQJ1xo1MEn7oEhb7Dh/z9l1NykVrobd6V77UbzAQ=)
3: _ZjRtovsCOJczXTJb78gNEIXWRA.roa (hash: o+YLeLrWzFxVnwd97MbT9/S72tuJZDl5Wl2Z8cJ7fEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:1c:ee:9f:99:6b:69:c6:9b:2b:6d:90:90:32:f9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Apr 26 08:00:43 2025 GMT
Not After : Apr 27 08:00:43 2025 GMT
Subject: CN=40395faa796a0a56580c707bb1ee35324d859b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:12:47:ce:69:4a:82:b3:04:dc:ef:4c:de:
0d:be:84:e7:5f:42:24:20:69:9f:e5:e8:c2:95:1d:
68:f0:bf:c2:ca:b7:dd:5e:7a:04:5d:fa:ac:9b:78:
f5:d2:20:79:23:a2:73:48:c9:9d:63:7c:cc:f1:8b:
16:ba:71:af:8a:bb:e6:18:af:f4:52:d3:68:f2:62:
c2:14:68:ba:b6:9f:b9:25:c5:e5:28:0b:3b:c5:e1:
a7:a2:86:73:72:fb:6d:6a:ab:ca:2f:5d:85:52:2b:
eb:a5:08:1d:7f:65:31:2f:36:5d:29:8a:37:4b:5c:
49:e8:9c:2b:93:0b:48:38:28:83:eb:e6:89:dd:26:
f8:a8:cb:8b:df:31:1b:e4:5c:fb:60:b6:ed:b0:0e:
c6:6d:d2:13:c6:85:fd:22:75:26:cb:8c:c3:a3:f3:
9d:86:77:18:e6:85:8b:f6:7d:50:86:b9:63:49:c4:
ed:bf:26:78:58:fa:6e:7d:43:1d:1c:fa:64:ef:d9:
a0:36:23:00:66:ff:94:86:0e:d1:67:94:39:69:4a:
22:28:32:93:11:40:75:8d:ec:5d:24:cf:0d:1e:10:
8b:20:12:18:51:ca:32:4f:e1:6d:9f:23:6b:78:2f:
da:46:64:3f:ca:bb:e2:b2:a5:1c:66:a5:45:01:d5:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:39:5F:AA:79:6A:0A:56:58:0C:70:7B:B1:EE:35:32:4D:85:9B:85
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:aa:de:fa:35:fa:f3:aa:26:48:1d:31:01:27:f1:cf:f6:6a:
e2:b6:c4:db:fb:a1:b8:7e:b3:38:b7:4a:33:44:2d:bb:3d:3e:
ce:5f:4c:65:76:13:4f:0d:32:26:19:81:89:ad:d5:50:c8:af:
71:0c:b0:75:0d:91:b6:bf:57:08:76:1b:4c:62:69:4f:87:fc:
53:dd:7d:1b:35:95:8f:64:f8:51:c2:56:f6:2c:1d:f7:84:90:
f4:4b:7a:84:ec:10:1c:b5:49:83:b5:b5:33:e5:3f:f6:6b:77:
b5:92:ef:7f:3f:35:61:0f:80:40:9f:67:81:54:93:e0:b8:dd:
3c:f5:9c:cd:b6:6a:86:21:be:0f:ce:e0:e8:61:56:24:c4:22:
59:b5:8f:40:16:21:52:43:c6:26:11:5b:68:7e:c6:61:e1:ed:
02:ee:80:ec:16:cf:18:51:aa:a0:6c:42:00:6c:d7:22:18:67:
b3:11:13:2e:b9:50:c9:03:01:de:e3:90:ae:21:99:c6:c6:83:
09:e8:34:ae:de:03:ca:2b:dc:c6:ae:ce:65:fb:0a:3e:54:5e:
87:9c:fc:bc:54:3a:b0:f1:25:bd:0e:d5:4b:0f:b4:a6:c2:87:
66:62:5e:f9:65:cd:de:50:69:6f:dd:00:1f:2e:30:9c:5b:f4:
21:8c:57:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxHO6fmWtpxpsrbZCQMvl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2YwOTUwOGZkZjI1NjQ0ODIxOWIyODRiYjA5YjIzYjJi
NTEzOTYwHhcNMjUwNDI2MDgwMDQzWhcNMjUwNDI3MDgwMDQzWjAzMTEwLwYDVQQD
Eyg0MDM5NWZhYTc5NmEwYTU2NTgwYzcwN2JiMWVlMzUzMjRkODU5Yjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypISR85pSoKzBNzvTN4NvoTnX0Ik
IGmf5ejClR1o8L/CyrfdXnoEXfqsm3j10iB5I6JzSMmdY3zM8YsWunGvirvmGK/0
UtNo8mLCFGi6tp+5JcXlKAs7xeGnooZzcvttaqvKL12FUivrpQgdf2UxLzZdKYo3
S1xJ6JwrkwtIOCiD6+aJ3Sb4qMuL3zEb5Fz7YLbtsA7GbdITxoX9InUmy4zDo/Od
hncY5oWL9n1QhrljScTtvyZ4WPpufUMdHPpk79mgNiMAZv+Uhg7RZ5Q5aUoiKDKT
EUB1jexdJM8NHhCLIBIYUcoyT+FtnyNreC/aRmQ/yrvisqUcZqVFAdVr7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEA5X6p5agpWWAxwe7HuNTJNhZuFMB8GA1UdIwQY
MBaAFDY/CVCP3yVkSCGbKEuwmyOytROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTIt
ZmQ4MTQ0NTVhODY4LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTItZmQ4MTQ0NTVhODY4
LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6re+jX6
86omSB0xASfxz/Zq4rbE2/uhuH6zOLdKM0Qtuz0+zl9MZXYTTw0yJhmBia3VUMiv
cQywdQ2Rtr9XCHYbTGJpT4f8U919GzWVj2T4UcJW9iwd94SQ9Et6hOwQHLVJg7W1
M+U/9mt3tZLvfz81YQ+AQJ9ngVST4LjdPPWczbZqhiG+D87g6GFWJMQiWbWPQBYh
UkPGJhFbaH7GYeHtAu6A7BbPGFGqoGxCAGzXIhhnsxETLrlQyQMB3uOQriGZxsaD
Ceg0rt4Dyivcxq7OZfsKPlReh5z8vFQ6sPElvQ7VSw+0psKHZmJe+WXN3lBpb90A
Hy4wnFv0IYxXLA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:41:30 2025 by rpki-client