Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
File: NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json)
Hash identifier: mnKllKfuiugyFOIgdQiJmtGtu8/aRc/DYhyTaD2YUbc=
Subject key identifier: E3:38:46:83:CF:45:7F:74:60:4C:D8:2E:36:C6:D6:BE:33:DA:2C:29
Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
Certificate issuer: /CN=34c4956f85671125882c574cd2e2d203aabded05
Certificate serial: 01967BD75773E16F266B6B484DA134210AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 10:00:32 +0000
Manifest this update: Mon 28 Apr 2025 10:00:32 +0000
Manifest next update: Tue 29 Apr 2025 10:00:32 +0000
Files and hashes: 1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: bjKjL4STY9dXTRs4fQ+0w2+4Qm8rUdfMJFl8WV9Ys44=)
2: xtLurjJMXgwePFKUT7vd_Bs7y4g.roa (hash: 9QOnyZtRBS25fvMRFyNZdyW0R5uMOP/pXW6ujcGtyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:57:73:e1:6f:26:6b:6b:48:4d:a1:34:21:0a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05
Validity
Not Before: Apr 28 10:00:32 2025 GMT
Not After : Apr 29 10:00:32 2025 GMT
Subject: CN=e3384683cf457f74604cd82e36c6d6be33da2c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:90:e6:2f:a5:2f:fe:4c:f8:1b:f4:5b:69:
e9:f0:0a:35:18:d9:40:97:85:e1:2a:a1:56:fa:57:
c9:6a:1f:04:a3:82:44:46:31:31:b7:8f:6d:9e:38:
e1:72:5b:93:52:ca:81:be:3f:70:ac:d7:97:77:b3:
97:3b:e9:0d:b7:6a:b8:d0:08:ea:72:a2:1f:e4:42:
99:64:e9:08:e5:e6:70:da:4d:b8:0b:21:33:20:0f:
e6:fb:3d:4e:68:48:09:6b:c9:04:ef:d6:41:5b:a2:
74:ed:67:29:da:9b:cc:3c:44:ff:66:34:c1:dc:2a:
96:c7:7d:cc:00:ff:08:d4:39:d6:fa:b6:63:0e:58:
a2:95:21:f6:14:43:e6:7f:73:4c:58:c8:4f:24:df:
9a:bc:e4:cb:bd:db:f1:2d:a3:1b:2c:49:5c:c2:16:
f5:94:c5:c9:9a:cc:32:9a:34:1c:f6:31:e2:ca:22:
9b:5e:01:3b:67:73:b6:02:ed:a5:63:c4:41:12:c1:
fe:1e:97:4d:1f:88:39:32:0c:50:7a:52:1a:6c:f1:
70:4f:e6:00:06:58:ff:0b:33:34:9c:15:34:89:7d:
ac:83:95:3b:32:76:ad:cb:78:87:ce:bf:31:e4:2b:
26:46:2f:b7:39:f7:56:f7:98:4a:a3:ab:af:1f:81:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:38:46:83:CF:45:7F:74:60:4C:D8:2E:36:C6:D6:BE:33:DA:2C:29
X509v3 Authority Key Identifier:
keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:73:90:f9:d1:8d:38:6b:7f:f4:ae:2e:34:cd:26:be:eb:cd:
55:e1:7b:3a:4a:9f:fc:2b:6f:86:60:5b:4a:da:18:70:f7:22:
48:94:9c:21:06:4f:9f:d2:1d:15:b0:c6:72:5b:60:4a:8d:a2:
89:eb:4d:a1:32:18:87:99:23:7b:8b:c8:62:86:59:7b:f2:a8:
30:d5:8d:f3:b2:af:0d:ce:4d:27:66:84:c1:1d:d7:d5:b8:dc:
6b:a3:e3:1e:e7:cb:86:bc:07:04:81:ee:17:d6:0f:1f:0f:04:
86:42:50:1a:f1:44:40:9b:dc:97:03:ae:e3:9e:4a:30:f2:5b:
aa:cd:e9:ca:36:2c:2f:b7:ff:2d:93:91:46:79:31:92:18:5d:
64:5a:e9:21:8f:66:b6:33:33:a8:ef:e7:23:8e:c3:b5:a9:83:
ef:97:78:d3:4b:b6:8f:c0:ca:3c:05:16:49:2b:36:af:08:b7:
02:28:b9:da:4d:5e:4f:a6:3f:31:e2:5d:30:84:b8:8d:4a:1f:
97:2e:77:dd:00:3e:32:47:2c:ba:8a:a8:1a:48:42:b7:7d:84:
1e:10:f8:38:ac:88:2c:1d:17:6b:a3:16:f1:37:9b:bf:a3:73:
7d:32:4b:31:b4:a2:c3:e6:17:c6:fb:dc:04:2d:24:1d:46:56:
de:7b:b1:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ711dz4W8ma2tITaE0IQqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YzQ5NTZmODU2NzExMjU4ODJjNTc0Y2QyZTJkMjAzYWFi
ZGVkMDUwHhcNMjUwNDI4MTAwMDMyWhcNMjUwNDI5MTAwMDMyWjAzMTEwLwYDVQQD
EyhlMzM4NDY4M2NmNDU3Zjc0NjA0Y2Q4MmUzNmM2ZDZiZTMzZGEyYzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6qQ5i+lL/5M+Bv0W2np8Ao1GNlA
l4XhKqFW+lfJah8Eo4JERjExt49tnjjhcluTUsqBvj9wrNeXd7OXO+kNt2q40Ajq
cqIf5EKZZOkI5eZw2k24CyEzIA/m+z1OaEgJa8kE79ZBW6J07Wcp2pvMPET/ZjTB
3CqWx33MAP8I1DnW+rZjDliilSH2FEPmf3NMWMhPJN+avOTLvdvxLaMbLElcwhb1
lMXJmswymjQc9jHiyiKbXgE7Z3O2Au2lY8RBEsH+HpdNH4g5MgxQelIabPFwT+YA
Blj/CzM0nBU0iX2sg5U7Mnaty3iHzr8x5CsmRi+3OfdW95hKo6uvH4ElYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOM4RoPPRX90YEzYLjbG1r4z2iwpMB8GA1UdIwQY
MBaAFDTElW+FZxEliCxXTNLi0gOqve0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjct
MmQ5MGM3ZmQwZDYwLzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjctMmQ5MGM3ZmQwZDYw
LzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnOQ+dGN
OGt/9K4uNM0mvuvNVeF7Okqf/CtvhmBbStoYcPciSJScIQZPn9IdFbDGcltgSo2i
ietNoTIYh5kje4vIYoZZe/KoMNWN87KvDc5NJ2aEwR3X1bjca6PjHufLhrwHBIHu
F9YPHw8EhkJQGvFEQJvclwOu455KMPJbqs3pyjYsL7f/LZORRnkxkhhdZFrpIY9m
tjMzqO/nI47DtamD75d400u2j8DKPAUWSSs2rwi3Aii52k1eT6Y/MeJdMIS4jUof
ly533QA+MkcsuoqoGkhCt32EHhD4OKyILB0Xa6MW8Tebv6NzfTJLMbSiw+YXxvvc
BC0kHUZW3nuxHA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:08:41 2025 by rpki-client