Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier: 2nvsndDctQh3vSNOmBZe4js4InRCP5nH5BZ+bKxfKQg=
Subject key identifier: FE:8F:64:07:E4:05:93:06:2B:AF:A0:83:21:59:72:00:B2:69:96:BF
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 019693E031E4BF213948FEAB469A3D7F4DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number: 151C
Signing time: Sat 03 May 2025 02:01:05 +0000
Manifest this update: Sat 03 May 2025 02:01:05 +0000
Manifest next update: Sun 04 May 2025 02:01:05 +0000
Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: BuvjgsW06vgz6eHLAxRs78Z1iNBDY1oFROVIa+dlpoc=)
2: kVipI_xyp0_kuJlOJOnoAHsePks.roa (hash: 1FUuhHfAvSDiWJAZOii+4sL3nFhAdH6ZW0fC89DJLKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:e0:31:e4:bf:21:39:48:fe:ab:46:9a:3d:7f:4d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: May 3 02:01:05 2025 GMT
Not After : May 4 02:01:05 2025 GMT
Subject: CN=fe8f6407e40593062bafa08321597200b26996bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:82:a2:3f:d5:40:4c:88:d9:92:eb:fd:93:
ec:29:3a:3f:21:03:93:24:5f:87:e5:ef:ff:51:8b:
2a:62:2c:10:e0:48:37:07:f9:7e:4b:ab:1b:ad:0c:
f9:5c:54:36:23:42:70:e7:a7:5d:4c:b0:2f:0d:12:
be:f6:57:ca:89:0a:82:53:7b:cd:a8:e9:84:66:d6:
f3:b8:ae:98:28:49:30:fe:33:77:48:2b:e5:dc:50:
5e:53:e2:4d:13:54:62:14:c7:63:3c:4e:08:49:7f:
ca:fb:fe:39:68:67:c3:90:b6:28:a4:c4:85:7f:d5:
f7:7e:99:c4:5a:64:a6:bb:72:f1:21:0e:13:64:92:
98:4f:b4:44:22:ac:cd:81:6f:b0:6d:44:c3:de:32:
0b:4c:9e:dc:a2:c6:84:3c:0b:29:82:94:c2:58:81:
34:ef:00:39:72:17:b0:5f:2c:20:7f:19:ac:27:22:
dc:43:bc:cd:f3:04:14:f2:b1:ad:1e:d1:d9:5a:8c:
8f:ad:5a:68:b2:cb:ae:f7:cb:cf:87:eb:30:0f:67:
9b:f1:ed:22:e0:bb:fc:65:1b:ce:f9:91:49:e3:45:
b8:ad:5f:ca:34:b1:2f:ca:2d:ee:94:c2:1c:79:fb:
ff:63:f6:12:cf:46:d8:b2:72:32:1d:60:04:95:15:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8F:64:07:E4:05:93:06:2B:AF:A0:83:21:59:72:00:B2:69:96:BF
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ba:a8:0a:fd:0b:b4:26:50:c2:3b:ce:a9:24:99:f9:3b:39:
03:68:c9:c8:26:4e:f9:ea:d9:5d:0d:da:56:62:e8:0c:cc:15:
a8:2b:be:91:d5:8e:54:2d:7f:4a:36:11:c6:c8:2b:36:98:10:
0b:cc:6a:9f:47:ed:96:7e:fc:78:74:f7:40:f2:4b:4b:a5:13:
4a:36:4f:df:32:ca:04:9b:01:22:e6:85:df:eb:17:f3:2a:96:
3e:84:17:f4:e4:06:44:87:5d:1b:ed:db:76:f0:e5:7a:09:8b:
ba:99:2b:5b:bf:d2:b3:b9:97:df:e8:67:4d:46:f8:55:f1:f4:
35:90:7f:06:54:63:ed:89:42:64:66:9f:f1:d7:9e:18:26:76:
44:57:3e:5c:9e:f4:ab:8d:40:58:0e:b6:78:d5:4b:29:ae:68:
55:77:bf:a4:b3:3b:d0:37:90:c4:b3:7e:c2:6f:a0:ea:dd:c1:
1f:9c:77:da:eb:7d:db:08:81:71:79:28:06:02:a8:f8:b8:38:
94:8c:ba:de:4a:5d:eb:f8:95:b4:2b:92:0a:a6:0e:9c:48:58:
11:28:37:9b:5a:70:bd:4d:15:b0:2c:8d:40:57:dc:2d:4d:f8:
22:23:1a:c6:f0:5b:d1:fa:2d:23:5c:4f:cd:59:73:c3:bc:dc:
6e:83:a2:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaT4DHkvyE5SP6rRpo9f02wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NmFjOWM3Njk5NzZmNmUyZTgyYWFjY2ZlMjM5YjZhYTE5
MjIzNzgwHhcNMjUwNTAzMDIwMTA1WhcNMjUwNTA0MDIwMTA1WjAzMTEwLwYDVQQD
EyhmZThmNjQwN2U0MDU5MzA2MmJhZmEwODMyMTU5NzIwMGIyNjk5NmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ+Coj/VQEyI2ZLr/ZPsKTo/IQOT
JF+H5e//UYsqYiwQ4Eg3B/l+S6sbrQz5XFQ2I0Jw56ddTLAvDRK+9lfKiQqCU3vN
qOmEZtbzuK6YKEkw/jN3SCvl3FBeU+JNE1RiFMdjPE4ISX/K+/45aGfDkLYopMSF
f9X3fpnEWmSmu3LxIQ4TZJKYT7REIqzNgW+wbUTD3jILTJ7cosaEPAspgpTCWIE0
7wA5chewXywgfxmsJyLcQ7zN8wQU8rGtHtHZWoyPrVpossuu98vPh+swD2eb8e0i
4Lv8ZRvO+ZFJ40W4rV/KNLEvyi3ulMIcefv/Y/YSz0bYsnIyHWAElRVUhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6PZAfkBZMGK6+ggyFZcgCyaZa/MB8GA1UdIwQY
MBaAFDVqycdpl29uLoKqzP4jm2qhkiN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldySngybVhiMjR1Z3FyTV9pT2JhcUdTSTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZWZlNjctM2ViZC00NmNiLWJjYzgt
NmM2MWE5MDIzMTM5LzEvTldySngybVhiMjR1Z3FyTV9pT2JhcUdTSTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZWZlNjctM2ViZC00NmNiLWJjYzgtNmM2MWE5MDIzMTM5
LzEvTldySngybVhiMjR1Z3FyTV9pT2JhcUdTSTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerqoCv0L
tCZQwjvOqSSZ+Ts5A2jJyCZO+erZXQ3aVmLoDMwVqCu+kdWOVC1/SjYRxsgrNpgQ
C8xqn0ftln78eHT3QPJLS6UTSjZP3zLKBJsBIuaF3+sX8yqWPoQX9OQGRIddG+3b
dvDlegmLupkrW7/Ss7mX3+hnTUb4VfH0NZB/BlRj7YlCZGaf8deeGCZ2RFc+XJ70
q41AWA62eNVLKa5oVXe/pLM70DeQxLN+wm+g6t3BH5x32ut92wiBcXkoBgKo+Lg4
lIy63kpd6/iVtCuSCqYOnEhYESg3m1pwvU0VsCyNQFfcLU34IiMaxvBb0fotI1xP
zVlzw7zcboOiiw==
-----END CERTIFICATE-----
Generated at Sat May 3 06:54:52 2025 by rpki-client