Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
File: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft (raw, json)
Hash identifier: Rg3iIjaSgNlXMC0dcRUQxshXr9O5FFeVTwRQOMZcGqk=
Subject key identifier: D7:EA:E9:2F:71:ED:E3:E9:A3:EC:36:17:92:A9:6E:9F:77:3F:BE:19
Authority key identifier: 37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
Certificate issuer: /CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Certificate serial: 01968322B6D01DC66AA0E09E7EA7CAFEEF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
Manifest number: 0CC7
Signing time: Tue 29 Apr 2025 20:00:12 +0000
Manifest this update: Tue 29 Apr 2025 20:00:12 +0000
Manifest next update: Wed 30 Apr 2025 20:00:12 +0000
Files and hashes: 1: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl (hash: 9Nv73N6tyFhHZqqxWDse8E6jxcJL2YVoRiKLALZ5ibc=)
2: agomHzSEGLU5uAKAS4YLGwlj-Q4.roa (hash: 7ISU2WJyj8nXTFjL/d0M7asR7w4tkrVLJaIrTwedHgs=)
3: vkfZgYornLyFRcsSczSPVSrUfQk.roa (hash: KEormr1cuV7WUv9lxgaJIBb9fC8nujOGpBV6adXBfrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:b6:d0:1d:c6:6a:a0:e0:9e:7e:a7:ca:fe:ef:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Validity
Not Before: Apr 29 20:00:12 2025 GMT
Not After : Apr 30 20:00:12 2025 GMT
Subject: CN=d7eae92f71ede3e9a3ec361792a96e9f773fbe19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:9b:53:a2:1b:9e:38:29:d6:fb:76:e6:ee:
12:a8:38:6b:2e:e5:b1:a8:44:58:e6:46:8f:23:20:
0b:9a:43:52:ab:a1:50:37:ed:21:02:8e:62:1f:8d:
29:37:ea:e8:ae:99:f9:19:35:d4:93:39:aa:2a:d1:
bf:fb:eb:75:00:01:6c:3b:a5:9a:09:13:8b:47:66:
2a:a8:d9:77:16:c4:4b:07:c1:f5:b3:ff:5f:3f:61:
ff:c3:3b:ad:46:ce:84:3b:15:98:73:d9:0b:ee:74:
0e:46:52:84:53:2c:e8:ea:31:fb:65:81:3a:a0:1b:
98:79:ce:82:5a:94:ea:a1:46:52:d2:36:95:4d:85:
9d:fa:8e:90:7d:1b:76:c8:09:69:6a:f7:50:e1:e7:
31:32:64:59:ac:04:ab:51:1a:51:e5:15:bf:e6:9f:
30:1c:92:14:f0:90:9d:2f:45:63:af:4f:e7:c6:8f:
bc:c0:8b:01:f0:c9:cf:79:d5:be:bd:f5:7b:c8:81:
a3:68:8a:96:b5:ef:e8:e2:94:90:77:64:59:6e:47:
f2:9c:82:2a:0c:da:9e:4b:73:b3:db:02:a6:4c:0d:
8d:e8:d2:98:98:e4:75:50:a7:ea:79:7c:af:6c:8c:
4d:f2:10:ff:80:75:dc:76:e1:ef:c7:21:07:36:9a:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EA:E9:2F:71:ED:E3:E9:A3:EC:36:17:92:A9:6E:9F:77:3F:BE:19
X509v3 Authority Key Identifier:
keyid:37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b3:43:4f:d4:b0:f3:21:76:ce:78:12:37:bd:30:a0:03:f9:
e7:cd:56:d3:5a:ca:d5:3c:c5:de:71:14:db:b4:97:9f:29:ab:
12:95:1f:26:91:bd:67:42:6a:34:5d:66:ab:8f:4d:e1:3c:55:
57:bd:59:f1:a5:89:27:6f:89:71:5f:a8:0a:25:79:d1:2b:3e:
f3:7d:6c:d9:b7:4b:63:75:e7:c8:36:76:7f:e9:20:04:4a:12:
77:b8:03:8c:60:13:7a:21:12:8b:2f:5b:24:05:b7:b3:b0:a5:
e8:93:84:bb:6a:76:ea:57:66:2b:2d:ed:0d:0b:28:e5:e7:e3:
e9:40:a1:1a:86:c0:44:7d:d7:48:23:aa:44:bb:74:da:81:10:
20:10:e4:96:e5:04:9c:20:44:73:18:d7:b6:8d:41:84:15:6f:
a8:99:69:51:5a:6d:48:45:f7:f9:1a:c3:b0:04:e6:59:5e:46:
d5:51:78:24:05:4f:12:fc:ec:6b:5c:5d:c8:a0:1e:85:0c:ab:
4f:68:e6:8f:ed:df:f9:a7:ca:b8:18:01:32:dc:e9:26:bf:5f:
15:f0:fa:60:1c:cc:8b:93:f5:63:95:e9:a0:9e:be:de:27:9c:
b4:30:bc:2c:fd:88:a5:89:69:11:2f:03:c1:36:e1:0d:35:d0:
0f:df:b7:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDIrbQHcZqoOCefqfK/u9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGVhMWIwNWNiZDRlNWMwOTI2Nzg3Yzc5NTMzZWUyOWQ5
NGJlOTYwHhcNMjUwNDI5MjAwMDEyWhcNMjUwNDMwMjAwMDEyWjAzMTEwLwYDVQQD
EyhkN2VhZTkyZjcxZWRlM2U5YTNlYzM2MTc5MmE5NmU5Zjc3M2ZiZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAqbU6Ibnjgp1vt25u4SqDhrLuWx
qERY5kaPIyALmkNSq6FQN+0hAo5iH40pN+rorpn5GTXUkzmqKtG/++t1AAFsO6Wa
CROLR2YqqNl3FsRLB8H1s/9fP2H/wzutRs6EOxWYc9kL7nQORlKEUyzo6jH7ZYE6
oBuYec6CWpTqoUZS0jaVTYWd+o6QfRt2yAlpavdQ4ecxMmRZrASrURpR5RW/5p8w
HJIU8JCdL0Vjr0/nxo+8wIsB8MnPedW+vfV7yIGjaIqWte/o4pSQd2RZbkfynIIq
DNqeS3Oz2wKmTA2N6NKYmOR1UKfqeXyvbIxN8hD/gHXcduHvxyEHNpos/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfq6S9x7ePpo+w2F5Kpbp93P74ZMB8GA1UdIwQY
MBaAFDcOobBcvU5cCSZ4fHlTPuKdlL6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc2aHNGeTlUbHdKSm5oOGVWTS00cDJVdnBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81YjJkMTYtMDg3Zi00ODhjLTllYmIt
ZThhMzIyODQ2NjQxLzEvTnc2aHNGeTlUbHdKSm5oOGVWTS00cDJVdnBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81YjJkMTYtMDg3Zi00ODhjLTllYmItZThhMzIyODQ2NjQx
LzEvTnc2aHNGeTlUbHdKSm5oOGVWTS00cDJVdnBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbNDT9Sw
8yF2zngSN70woAP5581W01rK1TzF3nEU27SXnymrEpUfJpG9Z0JqNF1mq49N4TxV
V71Z8aWJJ2+JcV+oCiV50Ss+831s2bdLY3XnyDZ2f+kgBEoSd7gDjGATeiESiy9b
JAW3s7Cl6JOEu2p26ldmKy3tDQso5efj6UChGobARH3XSCOqRLt02oEQIBDkluUE
nCBEcxjXto1BhBVvqJlpUVptSEX3+RrDsATmWV5G1VF4JAVPEvzsa1xdyKAehQyr
T2jmj+3f+afKuBgBMtzpJr9fFfD6YBzMi5P1Y5XpoJ6+3iectDC8LP2IpYlpES8D
wTbhDTXQD9+3zA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:33:51 2025 by rpki-client