Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
File: N5jHIczxJbe4Klf7Pdk7d6YqOag.mft (raw, json)
Hash identifier: HVAynw7EpQ8GhoNzxCarrCNKqR1J5U8mwGkJ/Ywy5ZA=
Subject key identifier: 1D:78:7B:A1:88:BF:BB:5B:1B:87:E8:C3:71:06:B1:73:51:B0:54:B7
Authority key identifier: 37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
Certificate issuer: /CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Certificate serial: 019687DB7D4AFEF355858927AE807F141AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
Manifest number: 0982
Signing time: Wed 30 Apr 2025 18:00:30 +0000
Manifest this update: Wed 30 Apr 2025 18:00:30 +0000
Manifest next update: Thu 01 May 2025 18:00:30 +0000
Files and hashes: 1: N5jHIczxJbe4Klf7Pdk7d6YqOag.crl (hash: lDWDPS0icPdEBOkoVc0nNZ99EbvxUuUEha7Ylk05rEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:7d:4a:fe:f3:55:85:89:27:ae:80:7f:14:1a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Validity
Not Before: Apr 30 18:00:30 2025 GMT
Not After : May 1 18:00:30 2025 GMT
Subject: CN=1d787ba188bfbb5b1b87e8c37106b17351b054b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:3b:91:31:31:22:c6:ac:a9:aa:67:34:d5:
6b:e5:ef:20:78:f4:e9:2d:6e:7e:4b:74:a0:b5:2d:
8d:be:d7:bc:5c:2b:46:e0:91:32:52:50:fa:02:42:
2a:29:aa:4b:77:00:ba:40:17:88:21:df:19:38:bb:
03:78:79:e0:f9:af:2e:6f:9c:71:a2:90:32:c3:60:
47:d0:7e:d0:9d:e0:0c:e6:c8:e0:05:0e:96:3c:35:
57:66:2d:a8:cd:90:89:61:f6:67:80:00:91:86:1f:
0b:55:28:25:09:2e:39:45:b5:88:10:39:54:0a:ed:
93:9f:ff:ff:b5:84:49:db:00:73:41:46:db:c8:e5:
a8:4f:7c:de:75:25:41:6d:48:1f:25:92:52:46:cb:
8d:d1:21:7c:18:ac:74:49:8f:4b:4e:33:ea:df:c3:
20:ae:aa:f2:99:8a:14:c5:ba:1a:c9:38:df:85:ca:
3d:12:ad:3c:aa:46:68:d1:74:91:06:18:e1:2a:9d:
81:78:f7:be:15:4c:04:ab:2e:6d:54:e8:e6:c4:de:
55:6e:e1:58:72:b2:db:ad:e9:1a:e4:2d:bb:be:ef:
5a:a2:0b:88:df:96:15:3a:64:bc:32:19:43:e8:6d:
be:3d:4b:47:7b:17:47:aa:06:38:82:a4:38:73:4d:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:78:7B:A1:88:BF:BB:5B:1B:87:E8:C3:71:06:B1:73:51:B0:54:B7
X509v3 Authority Key Identifier:
keyid:37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:72:f3:02:70:bf:e4:f7:87:25:03:30:6f:cd:01:c5:89:f8:
5d:e8:67:a3:ef:db:85:4d:83:a5:4a:7a:41:ad:38:f5:1e:ae:
0d:b6:4c:f0:97:0e:4c:c2:19:de:42:f4:66:3a:d5:c4:81:f6:
ff:95:28:40:73:cf:23:d7:b3:06:d3:ed:3d:b8:bf:08:e2:e5:
eb:20:7a:f2:cc:17:e3:2b:8a:37:0e:9d:8f:0d:9f:d5:2e:ec:
92:2c:c2:4c:67:ae:52:03:2c:17:90:0a:93:91:e9:7d:09:5b:
da:ba:a7:4e:1b:52:ec:92:6a:cd:79:91:c1:34:aa:b3:9f:81:
c3:77:02:bf:78:af:ca:38:b1:cd:c1:4e:b0:e0:d3:41:4f:6d:
f1:53:20:17:6c:60:76:de:36:6c:5b:88:20:d8:fa:53:c5:94:
88:46:fc:ee:75:10:09:ae:41:9f:01:c4:2a:4a:06:20:cf:e4:
19:b8:f8:72:ed:32:ec:99:a9:83:3d:53:45:be:fb:8d:d8:a0:
ee:52:62:31:3e:fb:54:a1:79:99:a1:f9:19:53:c4:ce:f1:e0:
7c:25:1f:bd:84:de:42:08:16:8e:84:26:f4:c1:54:12:e0:b4:
29:e0:ef:19:68:5a:f4:d7:6c:c2:c6:28:2f:83:22:ed:fe:1a:
9e:02:5a:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaH231K/vNVhYknroB/FBr1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OThjNzIxY2NmMTI1YjdiODJhNTdmYjNkZDkzYjc3YTYy
YTM5YTgwHhcNMjUwNDMwMTgwMDMwWhcNMjUwNTAxMTgwMDMwWjAzMTEwLwYDVQQD
EygxZDc4N2JhMTg4YmZiYjViMWI4N2U4YzM3MTA2YjE3MzUxYjA1NGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty47kTExIsasqapnNNVr5e8gePTp
LW5+S3SgtS2Nvte8XCtG4JEyUlD6AkIqKapLdwC6QBeIId8ZOLsDeHng+a8ub5xx
opAyw2BH0H7QneAM5sjgBQ6WPDVXZi2ozZCJYfZngACRhh8LVSglCS45RbWIEDlU
Cu2Tn///tYRJ2wBzQUbbyOWoT3zedSVBbUgfJZJSRsuN0SF8GKx0SY9LTjPq38Mg
rqrymYoUxboayTjfhco9Eq08qkZo0XSRBhjhKp2BePe+FUwEqy5tVOjmxN5VbuFY
crLbreka5C27vu9aoguI35YVOmS8MhlD6G2+PUtHexdHqgY4gqQ4c027lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB14e6GIv7tbG4fow3EGsXNRsFS3MB8GA1UdIwQY
MBaAFDeYxyHM8SW3uCpX+z3ZO3emKjmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVqSEljenhKYmU0S2xmN1BkazdkNllxT2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMDQwYWUtYWExMy00Y2JiLTkwZGEt
MzY3Yjg2ZmJjYmY3LzEvTjVqSEljenhKYmU0S2xmN1BkazdkNllxT2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xMDQwYWUtYWExMy00Y2JiLTkwZGEtMzY3Yjg2ZmJjYmY3
LzEvTjVqSEljenhKYmU0S2xmN1BkazdkNllxT2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHLzAnC/
5PeHJQMwb80BxYn4Xehno+/bhU2DpUp6Qa049R6uDbZM8JcOTMIZ3kL0ZjrVxIH2
/5UoQHPPI9ezBtPtPbi/COLl6yB68swX4yuKNw6djw2f1S7skizCTGeuUgMsF5AK
k5HpfQlb2rqnThtS7JJqzXmRwTSqs5+Bw3cCv3ivyjixzcFOsODTQU9t8VMgF2xg
dt42bFuIINj6U8WUiEb87nUQCa5BnwHEKkoGIM/kGbj4cu0y7Jmpgz1TRb77jdig
7lJiMT77VKF5maH5GVPEzvHgfCUfvYTeQggWjoQm9MFUEuC0KeDvGWha9NdswsYo
L4Mi7f4angJaug==
-----END CERTIFICATE-----
Generated at Thu May 1 04:42:33 2025 by rpki-client