Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
File: nvtWQV815j-nQDpQH97druzqR1o.mft (raw, json)
Hash identifier: z5y+jkmLOIqpgFI3Nfj2n0TUrfMSAYCqyoeywqqyQ7I=
Subject key identifier: A3:DE:92:C9:13:F0:FE:A3:00:C5:82:FF:5F:B5:34:BA:DD:9F:B0:3D
Authority key identifier: 9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
Certificate issuer: /CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Certificate serial: 0194BA843388FBE548A10A90BD785EB3030C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 04:00:13 +0000
Manifest this update: Fri 31 Jan 2025 04:00:13 +0000
Manifest next update: Sat 01 Feb 2025 04:00:13 +0000
Files and hashes: 1: SEfajqd6Fo8tBAWadiViUIYfxIc.roa (hash: buws3E1khkxa0hWtFXM/6/Y2Vl2k7b7xq83eMENRDLs=)
2: nvtWQV815j-nQDpQH97druzqR1o.crl (hash: l/ss94nRRF/NW8zuT++cDVG7O7WWgTBo43EIpQlLbpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:33:88:fb:e5:48:a1:0a:90:bd:78:5e:b3:03:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Validity
Not Before: Jan 31 04:00:13 2025 GMT
Not After : Feb 1 04:00:13 2025 GMT
Subject: CN=a3de92c913f0fea300c582ff5fb534badd9fb03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e3:d3:5a:7f:95:a3:7c:7a:bc:0f:5d:ea:99:
db:07:9c:18:91:e2:34:b1:b4:89:82:60:1f:3e:ed:
08:6e:1f:21:0b:80:e6:3f:d1:dd:43:b1:66:dc:6d:
75:28:3c:8a:34:06:89:9f:50:b7:31:d4:86:7f:eb:
c4:9e:d7:fd:dc:26:6f:aa:f8:6d:39:04:83:89:c1:
89:75:df:30:7e:34:27:a2:7a:9f:de:13:a4:46:17:
64:21:2f:8a:86:e7:63:94:1b:e2:a0:af:bd:94:a3:
de:81:34:08:61:e5:c8:40:d9:d6:91:b2:f2:ca:fd:
61:ee:b6:7f:f4:5a:51:d5:bc:8f:3b:38:80:ad:5f:
d1:54:e8:42:59:82:ca:06:e4:d9:85:b3:5c:64:98:
d1:38:57:d1:ad:0b:55:d1:13:99:68:61:76:ab:9b:
e9:c1:25:90:a8:cb:0b:33:b9:3e:fa:33:8b:8e:23:
e5:f8:c7:ec:e7:53:89:ca:6c:80:39:07:4d:d4:cb:
4e:78:77:5e:8b:a1:c4:02:6d:59:e3:4e:63:bc:ac:
50:77:c4:29:1a:c1:a7:a4:6b:6e:08:2a:85:aa:ce:
c6:d0:5e:0e:58:45:56:ec:65:2d:30:65:35:70:82:
fa:90:55:2b:8b:50:35:8f:e6:ee:a8:6f:1f:6e:66:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DE:92:C9:13:F0:FE:A3:00:C5:82:FF:5F:B5:34:BA:DD:9F:B0:3D
X509v3 Authority Key Identifier:
keyid:9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:22:02:c2:f9:74:0e:11:0c:f4:57:c4:e3:93:f6:7f:11:e9:
4d:fb:99:82:3a:ba:94:1c:14:62:ee:c4:65:be:60:38:30:c6:
fe:56:cd:54:31:ab:ee:6b:a5:09:ba:33:b2:20:05:b2:99:f7:
07:19:7d:5d:49:e0:e6:2a:22:3b:b8:9d:35:99:ae:cd:1d:79:
a0:ed:34:4f:bf:e7:1f:00:4f:6c:01:b6:b0:5d:69:a2:a1:72:
02:b2:46:7e:87:20:dc:b9:1b:f0:0f:91:0e:00:4d:9c:2d:e4:
8a:00:e8:2e:dc:89:ee:89:11:c3:86:d3:e2:a4:e0:d4:9d:af:
af:68:2d:07:da:64:18:29:18:2b:77:f9:a0:08:f2:0a:3d:10:
11:21:ad:8c:96:1a:97:40:88:96:c3:74:42:d7:33:be:c1:d6:
4e:60:ab:7b:6e:d7:72:2e:8f:71:12:5b:9b:fc:5d:4d:cc:99:
f4:35:f1:e9:f8:97:61:f8:b8:72:9d:53:65:eb:51:f3:ac:6f:
9d:a3:08:d9:e9:97:93:e7:a1:e9:75:ba:1d:5f:08:7a:25:dd:
0a:fc:b3:da:92:49:63:53:de:52:6d:cc:01:80:f6:d1:be:85:
80:c2:8f:8c:20:89:21:06:74:96:c5:38:f4:02:f6:24:ea:dd:
f9:9b:d3:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hDOI++VIoQqQvXheswMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZmI1NjQxNWYzNWU2M2ZhNzQwM2E1MDFmZGVkZGFlZWNl
YTQ3NWEwHhcNMjUwMTMxMDQwMDEzWhcNMjUwMjAxMDQwMDEzWjAzMTEwLwYDVQQD
EyhhM2RlOTJjOTEzZjBmZWEzMDBjNTgyZmY1ZmI1MzRiYWRkOWZiMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+PTWn+Vo3x6vA9d6pnbB5wYkeI0
sbSJgmAfPu0Ibh8hC4DmP9HdQ7Fm3G11KDyKNAaJn1C3MdSGf+vEntf93CZvqvht
OQSDicGJdd8wfjQnonqf3hOkRhdkIS+KhudjlBvioK+9lKPegTQIYeXIQNnWkbLy
yv1h7rZ/9FpR1byPOziArV/RVOhCWYLKBuTZhbNcZJjROFfRrQtV0ROZaGF2q5vp
wSWQqMsLM7k++jOLjiPl+Mfs51OJymyAOQdN1MtOeHdei6HEAm1Z405jvKxQd8Qp
GsGnpGtuCCqFqs7G0F4OWEVW7GUtMGU1cIL6kFUri1A1j+buqG8fbmaFAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPekskT8P6jAMWC/1+1NLrdn7A9MB8GA1UdIwQY
MBaAFJ77VkFfNeY/p0A6UB/e3a7s6kdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZ0V1FWODE1ai1uUURwUUg5N2RydXpxUjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83NWI0M2QtZTc0Mi00OGVhLTk0NWEt
YWE4MzJkYjdiNTBhLzEvbnZ0V1FWODE1ai1uUURwUUg5N2RydXpxUjFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83NWI0M2QtZTc0Mi00OGVhLTk0NWEtYWE4MzJkYjdiNTBh
LzEvbnZ0V1FWODE1ai1uUURwUUg5N2RydXpxUjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiICwvl0
DhEM9FfE45P2fxHpTfuZgjq6lBwUYu7EZb5gODDG/lbNVDGr7mulCbozsiAFspn3
Bxl9XUng5ioiO7idNZmuzR15oO00T7/nHwBPbAG2sF1poqFyArJGfocg3Lkb8A+R
DgBNnC3kigDoLtyJ7okRw4bT4qTg1J2vr2gtB9pkGCkYK3f5oAjyCj0QESGtjJYa
l0CIlsN0QtczvsHWTmCre27Xci6PcRJbm/xdTcyZ9DXx6fiXYfi4cp1TZetR86xv
naMI2emXk+eh6XW6HV8IeiXdCvyz2pJJY1PeUm3MAYD20b6FgMKPjCCJIQZ0lsU4
9AL2JOrd+ZvT2A==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:42 2025 by rpki-client on console-fra.rpki-client.org