Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: GDDyHCSMlLmt3npmZHXkwVMRNI9TdYViNs/q05PwrOs=
Subject key identifier: E0:D0:57:B8:80:04:CF:C8:01:19:08:F3:CC:30:85:DE:E9:DE:05:97
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 01967679D1D77B4D07E1096B8524C7A42655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 09:00:17 +0000
Manifest this update: Sun 27 Apr 2025 09:00:17 +0000
Manifest next update: Mon 28 Apr 2025 09:00:17 +0000
Files and hashes: 1: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: paSY3fhhcrDBdY5fRkBrepXKrvI1BDRlx05bcbpC1BI=)
2: PSL2OSxsoutF8sVX_uvIaiWUApI.roa (hash: IoDHAxb+U2Gaz8HUwj/mdMtnodnlu8iYqMMfCwQw35I=)
3: t0FWDnJPs6XvZokHfTcCnjKRaeE.roa (hash: Aou1i/O3zguK2P9WdtUpbw8G9iRuYff1/7SNrw+Pohw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:d1:d7:7b:4d:07:e1:09:6b:85:24:c7:a4:26:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Apr 27 09:00:17 2025 GMT
Not After : Apr 28 09:00:17 2025 GMT
Subject: CN=e0d057b88004cfc8011908f3cc3085dee9de0597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:24:de:d9:a3:08:99:8a:87:70:b4:e0:87:7b:
58:9c:1f:65:1f:19:15:d1:e4:33:d6:28:e5:9d:20:
da:39:ce:66:e2:5e:7c:35:91:34:6e:28:94:bc:29:
28:6d:4b:d2:f1:2c:62:c4:f7:d1:4d:6c:15:ea:9b:
f8:29:8a:ee:8d:99:e7:16:6a:f9:ed:f0:e1:15:8a:
b8:3e:4a:2a:54:2c:3e:6b:74:1e:e4:50:d5:f6:33:
27:00:e1:9d:5f:af:4d:71:48:88:55:9d:7e:ff:34:
b3:2c:58:b0:fa:fb:6a:5b:90:95:59:13:1b:3e:db:
69:cb:45:39:26:9a:1a:96:5c:df:4a:74:99:af:37:
be:73:45:01:29:ae:5f:78:dd:36:d3:29:7b:28:63:
89:29:d0:62:f9:bf:9d:06:cb:c1:8e:7b:4d:83:08:
59:23:6e:60:ef:20:a2:4e:fc:d1:d5:c7:fd:05:9c:
7b:58:08:fa:35:e0:bb:2d:9f:d3:ba:eb:b8:1c:8b:
d4:18:f0:25:34:c9:2f:3b:57:4a:e8:69:4c:a0:3a:
b2:39:50:ca:77:58:f6:cc:c1:89:c2:ac:b4:3f:6c:
9a:23:7e:1c:8f:18:de:96:01:fa:26:7c:63:9e:4d:
34:a1:fd:fb:5d:55:44:e2:68:cd:95:bb:a8:9b:d3:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D0:57:B8:80:04:CF:C8:01:19:08:F3:CC:30:85:DE:E9:DE:05:97
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d0:82:41:76:f1:0f:3a:a5:07:e3:03:b6:96:cf:af:eb:97:
2e:ed:58:2b:95:0c:ce:ff:23:f0:82:ce:4f:06:4c:9c:a4:73:
0d:a8:46:4f:2a:02:1e:25:f2:ae:67:b3:7a:94:40:27:5d:1d:
41:bc:50:5b:e5:ec:30:8c:80:79:ad:87:da:f6:9a:0b:0d:c7:
87:b1:df:37:8c:86:2e:0f:55:d1:7a:bd:87:a0:9d:39:01:38:
59:51:0a:96:28:d2:9b:4e:f0:49:c9:08:10:92:11:06:f0:76:
03:00:0d:db:ab:87:d6:cc:29:5c:78:10:92:c3:ce:fa:eb:29:
88:ee:67:a9:b0:c0:6b:5a:4f:93:8d:d1:c6:6e:94:ee:b6:f1:
ea:40:37:01:2c:5b:41:90:c2:b0:3a:ab:bd:55:f2:4f:05:c9:
63:b2:7d:60:e9:79:4f:5f:7a:35:29:13:84:7c:cb:8e:f5:17:
da:c0:98:2a:47:c1:da:bf:9a:b8:8a:26:02:b5:ac:af:46:92:
e0:28:19:df:20:63:2a:86:14:fd:7b:4e:34:74:68:6d:97:49:
88:b1:06:f5:83:7b:22:be:8d:3e:4e:64:a9:e0:20:bb:e8:e4:
42:e5:01:32:d1:05:3f:2f:54:f5:67:a2:ce:40:d6:12:53:f8:
b6:7c:74:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2edHXe00H4QlrhSTHpCZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmJkZjJmNWY4NTVlNWUxY2E0OGU3N2MzYmRkMzNiZDQ3
YjQ0MzgwHhcNMjUwNDI3MDkwMDE3WhcNMjUwNDI4MDkwMDE3WjAzMTEwLwYDVQQD
EyhlMGQwNTdiODgwMDRjZmM4MDExOTA4ZjNjYzMwODVkZWU5ZGUwNTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+iTe2aMImYqHcLTgh3tYnB9lHxkV
0eQz1ijlnSDaOc5m4l58NZE0biiUvCkobUvS8SxixPfRTWwV6pv4KYrujZnnFmr5
7fDhFYq4PkoqVCw+a3Qe5FDV9jMnAOGdX69NcUiIVZ1+/zSzLFiw+vtqW5CVWRMb
Pttpy0U5JpoallzfSnSZrze+c0UBKa5feN020yl7KGOJKdBi+b+dBsvBjntNgwhZ
I25g7yCiTvzR1cf9BZx7WAj6NeC7LZ/Tuuu4HIvUGPAlNMkvO1dK6GlMoDqyOVDK
d1j2zMGJwqy0P2yaI34cjxjelgH6Jnxjnk00of37XVVE4mjNlbuom9Ny0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODQV7iABM/IARkI88wwhd7p3gWXMB8GA1UdIwQY
MBaAFDf73y9fhV5eHKSOd8O90zvUe0Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDct
ZjQ0MTY2YmIyZGIwLzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDctZjQ0MTY2YmIyZGIw
LzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptCCQXbx
DzqlB+MDtpbPr+uXLu1YK5UMzv8j8ILOTwZMnKRzDahGTyoCHiXyrmezepRAJ10d
QbxQW+XsMIyAea2H2vaaCw3Hh7HfN4yGLg9V0Xq9h6CdOQE4WVEKlijSm07wSckI
EJIRBvB2AwAN26uH1swpXHgQksPO+uspiO5nqbDAa1pPk43Rxm6U7rbx6kA3ASxb
QZDCsDqrvVXyTwXJY7J9YOl5T196NSkThHzLjvUX2sCYKkfB2r+auIomArWsr0aS
4CgZ3yBjKoYU/XtONHRobZdJiLEG9YN7Ir6NPk5kqeAgu+jkQuUBMtEFPy9U9Wei
zkDWElP4tnx0nw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:19 2025 by rpki-client