Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
File: N5fgOfAlolqm6ZI5HZJCYGmbpns.mft (raw, json)
Hash identifier: GzMq1TSaHdSP905nLiOOg9YrHQpLamxcHzARv8VT/JI=
Subject key identifier: A1:ED:DC:E9:86:D8:1B:48:07:EC:75:9F:61:34:7A:94:AC:77:A3:8D
Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
Certificate issuer: /CN=3797e039f025a25aa6e992391d924260699ba67b
Certificate serial: 01967B325AAAFFDA46404D09ED9725E67453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
Manifest number: 0E8C
Signing time: Mon 28 Apr 2025 07:00:19 +0000
Manifest this update: Mon 28 Apr 2025 07:00:19 +0000
Manifest next update: Tue 29 Apr 2025 07:00:19 +0000
Files and hashes: 1: N5fgOfAlolqm6ZI5HZJCYGmbpns.crl (hash: Mpd8TJ45VpX/Foo1ju95OW1QBxMY5oF7A7owUqcYugE=)
2: sVzqlUVXrHqVsVw4yhzSu1oYIjM.roa (hash: HaD8do3X9duYtx96VIyzNjLwjQlO2MrTlBSjfqbB5ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:5a:aa:ff:da:46:40:4d:09:ed:97:25:e6:74:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b
Validity
Not Before: Apr 28 07:00:19 2025 GMT
Not After : Apr 29 07:00:19 2025 GMT
Subject: CN=a1eddce986d81b4807ec759f61347a94ac77a38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:78:e1:f6:e5:16:85:d1:cd:10:56:f6:75:
17:0a:bd:f8:3e:07:c7:2d:59:58:3c:14:bd:8e:b8:
03:0d:ac:02:68:50:68:4a:3a:a3:8d:13:c1:5b:3b:
c1:c5:10:ff:9a:9f:74:01:30:21:c5:29:b5:19:97:
ae:d4:bf:21:78:86:cb:11:79:cc:65:d0:a2:8f:89:
72:89:c5:7d:f6:30:54:28:98:43:88:e2:51:f8:90:
d8:d7:bb:36:44:47:22:4f:c8:69:d5:3d:6d:e3:74:
10:91:2c:98:0d:8b:98:a0:37:a5:d0:f7:9e:5c:8e:
17:f5:4d:a6:c9:0c:d1:c2:cc:25:a3:e6:bf:c8:45:
5b:6f:8f:ed:23:9e:57:16:36:aa:02:c7:76:23:0f:
14:74:16:d1:b1:49:e2:1e:c9:f5:0f:a2:11:13:24:
41:b7:d9:0b:e0:fc:45:5a:06:d7:2c:2c:14:fd:9f:
66:70:0b:74:5f:d5:94:4c:5c:73:8c:87:84:0a:97:
39:d1:8b:19:c5:d2:ed:a7:b6:7c:4c:5e:c9:9f:7f:
fb:0e:1f:5a:6d:74:8a:02:47:b9:0a:40:cc:21:aa:
a0:a1:61:9c:0e:8e:4b:bb:67:37:39:dd:9f:32:f6:
1b:c0:0a:7c:ef:04:35:21:9a:65:ff:2e:23:f6:8a:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:ED:DC:E9:86:D8:1B:48:07:EC:75:9F:61:34:7A:94:AC:77:A3:8D
X509v3 Authority Key Identifier:
keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:44:bd:c6:07:54:78:d9:c1:e4:c4:c4:50:95:8f:61:96:da:
67:67:fd:99:0f:8f:9d:34:d8:a7:fa:fb:9d:48:93:ea:79:d1:
25:e7:fa:a0:42:7d:7c:bd:5e:60:0c:d6:63:ef:ca:71:30:09:
4b:6d:ae:bf:4a:94:dc:8f:fd:35:69:94:5f:81:48:44:1e:19:
21:1d:13:56:21:56:8b:57:35:12:1e:05:33:bd:13:d1:90:6e:
88:a6:ef:46:6e:8d:1a:ad:53:43:34:8b:ec:3d:78:0f:11:44:
45:39:ef:5c:cb:80:bf:1b:14:4a:33:e8:ad:8d:c1:f4:38:f2:
49:48:25:b5:5f:63:05:05:c2:5d:ac:7e:7d:6a:9e:d6:1f:bc:
cd:c4:1e:2c:18:6e:d1:73:46:fd:05:a2:eb:60:4a:b6:7c:f9:
a0:e3:af:16:20:2d:ce:fd:f4:e6:2d:1e:eb:d9:34:96:9f:7b:
a5:7c:5b:9f:e0:c3:9d:ba:b9:a6:60:fc:5d:51:5c:3a:57:c7:
32:6d:5b:d6:6c:9e:e6:81:7f:bc:1b:b3:a5:7c:5e:c5:4c:43:
4b:6d:2d:18:ad:01:9e:ec:01:73:6c:85:0c:68:ce:83:a6:ba:
72:81:52:6b:d2:39:9b:b9:31:f0:bb:38:e3:d8:33:88:74:f7:
41:f5:da:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7Mlqq/9pGQE0J7Zcl5nRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OTdlMDM5ZjAyNWEyNWFhNmU5OTIzOTFkOTI0MjYwNjk5
YmE2N2IwHhcNMjUwNDI4MDcwMDE5WhcNMjUwNDI5MDcwMDE5WjAzMTEwLwYDVQQD
EyhhMWVkZGNlOTg2ZDgxYjQ4MDdlYzc1OWY2MTM0N2E5NGFjNzdhMzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKd44fblFoXRzRBW9nUXCr34PgfH
LVlYPBS9jrgDDawCaFBoSjqjjRPBWzvBxRD/mp90ATAhxSm1GZeu1L8heIbLEXnM
ZdCij4lyicV99jBUKJhDiOJR+JDY17s2REciT8hp1T1t43QQkSyYDYuYoDel0Pee
XI4X9U2myQzRwswlo+a/yEVbb4/tI55XFjaqAsd2Iw8UdBbRsUniHsn1D6IREyRB
t9kL4PxFWgbXLCwU/Z9mcAt0X9WUTFxzjIeECpc50YsZxdLtp7Z8TF7Jn3/7Dh9a
bXSKAke5CkDMIaqgoWGcDo5Lu2c3Od2fMvYbwAp87wQ1IZpl/y4j9opYgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHt3OmG2BtIB+x1n2E0epSsd6ONMB8GA1UdIwQY
MBaAFDeX4DnwJaJapumSOR2SQmBpm6Z7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wYWJiOGEtOTc5OC00YmY4LWJhZTEt
YzFjMDVjZGI3ODQxLzEvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wYWJiOGEtOTc5OC00YmY4LWJhZTEtYzFjMDVjZGI3ODQx
LzEvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkS9xgdU
eNnB5MTEUJWPYZbaZ2f9mQ+PnTTYp/r7nUiT6nnRJef6oEJ9fL1eYAzWY+/KcTAJ
S22uv0qU3I/9NWmUX4FIRB4ZIR0TViFWi1c1Eh4FM70T0ZBuiKbvRm6NGq1TQzSL
7D14DxFERTnvXMuAvxsUSjPorY3B9DjySUgltV9jBQXCXax+fWqe1h+8zcQeLBhu
0XNG/QWi62BKtnz5oOOvFiAtzv305i0e69k0lp97pXxbn+DDnbq5pmD8XVFcOlfH
Mm1b1mye5oF/vBuzpXxexUxDS20tGK0BnuwBc2yFDGjOg6a6coFSa9I5m7kx8Ls4
49gziHT3QfXahg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:41:05 2025 by rpki-client