Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
File: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft (raw, json)
Hash identifier: IUF1obXQoIy1S8YvL2MBe2XrcsLBuUwmemY/Pi60uaA=
Subject key identifier: 63:57:B5:4A:75:1A:9E:AB:47:3B:CA:E2:B7:31:CB:33:9F:46:FE:B2
Authority key identifier: 9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
Certificate issuer: /CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Certificate serial: 01967E335D412DCCC58A5ECD22AB569D9973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
Manifest number: 1530
Signing time: Mon 28 Apr 2025 21:00:17 +0000
Manifest this update: Mon 28 Apr 2025 21:00:17 +0000
Manifest next update: Tue 29 Apr 2025 21:00:17 +0000
Files and hashes: 1: 3f3HIccO3MohgHCLC_LlaFxa7sU.roa (hash: kCeD4JlEOramRmkp3pFIST1qhopaS50IqgyTgjDtfVo=)
2: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl (hash: zvwJDKsNFWQRZJajAFseHhL0hfOSb+mP30EN/d1s3nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:5d:41:2d:cc:c5:8a:5e:cd:22:ab:56:9d:99:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Validity
Not Before: Apr 28 21:00:17 2025 GMT
Not After : Apr 29 21:00:17 2025 GMT
Subject: CN=6357b54a751a9eab473bcae2b731cb339f46feb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:00:cd:1e:58:c5:58:d1:00:60:87:00:85:
ce:8b:13:a7:f6:8c:fd:bf:95:f5:0c:c7:c7:06:3d:
f7:1a:2e:86:c1:2a:21:e9:ad:47:55:a7:68:26:da:
e7:b9:a4:08:97:16:fc:db:ce:69:5c:68:45:ba:47:
19:46:a5:60:ae:8c:1d:24:ed:fe:0a:d2:49:cd:47:
4c:f4:18:df:52:2d:ff:22:e7:a4:b7:e0:7a:22:f8:
1b:85:65:b8:1c:62:fd:8a:b4:50:31:14:f3:fd:29:
c4:6b:98:0f:3c:ef:61:c3:8c:f2:44:a4:cc:01:17:
df:ee:4c:22:34:5e:40:22:9c:24:d9:71:08:24:60:
36:a5:01:18:d5:77:a3:cb:d1:d4:01:83:e3:66:61:
83:44:28:e9:2f:bf:e0:ea:8c:82:f0:5d:15:cc:8d:
d4:da:b8:2e:b7:ac:57:6c:f7:7f:11:33:ec:f2:25:
ce:00:8a:dc:4f:98:c5:73:9d:3d:5c:0c:61:1d:cd:
39:5d:82:ad:c6:12:95:d9:e1:89:df:67:ff:ea:0b:
58:7e:b2:12:a5:a6:06:2c:74:b7:06:32:a4:6e:21:
20:64:51:fb:67:86:09:61:69:7a:52:a9:01:01:1c:
e5:0c:6d:0d:9f:7e:58:5e:eb:9e:6b:c5:9b:4b:80:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:57:B5:4A:75:1A:9E:AB:47:3B:CA:E2:B7:31:CB:33:9F:46:FE:B2
X509v3 Authority Key Identifier:
keyid:9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:24:88:34:c0:96:7e:dd:e0:5c:fa:07:41:83:61:1a:18:99:
89:2b:91:e9:f3:df:6c:cf:c4:d7:13:e4:f5:a4:17:03:9b:2d:
58:81:2c:6d:ee:dc:5d:d6:a1:de:91:d4:83:20:b8:f5:72:79:
89:54:a3:9f:12:99:dc:b8:c6:20:c7:56:0b:bd:b1:af:da:33:
c1:4d:64:97:72:1f:de:80:65:9b:c4:b1:93:16:91:67:45:7c:
b5:85:01:11:0b:83:01:a1:7b:c2:f6:2f:d4:8b:b5:c8:89:82:
31:41:e2:e5:e2:52:67:ae:3d:ee:38:82:cd:dd:dc:10:b4:83:
6e:82:96:c7:65:14:dd:0c:41:58:02:c6:76:32:f3:71:64:e8:
fc:33:93:86:90:f2:c4:98:6e:d0:d9:86:b9:b0:c7:0b:35:1e:
04:06:b5:f0:e6:53:5a:c0:01:32:b2:f3:36:82:e8:73:06:99:
d7:b9:fb:b0:98:60:1d:02:c3:5a:41:fe:18:3f:a9:cc:7a:7e:
3e:9b:fc:9a:7f:be:9a:0d:b4:ae:0e:17:ab:66:fb:19:f4:95:
41:95:ad:b5:25:94:69:37:9d:36:b8:3e:c7:9c:46:c0:6d:3d:
a1:f3:71:b3:83:5f:10:bf:23:7e:ad:5c:37:be:1a:14:3d:0f:
2b:66:d7:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+M11BLczFil7NIqtWnZlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMWFlZDk5MTNmODg4MGFmNzU1N2VlZjNlZjAyZDZlMGZm
M2ZkNDkwHhcNMjUwNDI4MjEwMDE3WhcNMjUwNDI5MjEwMDE3WjAzMTEwLwYDVQQD
Eyg2MzU3YjU0YTc1MWE5ZWFiNDczYmNhZTJiNzMxY2IzMzlmNDZmZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRQAzR5YxVjRAGCHAIXOixOn9oz9
v5X1DMfHBj33Gi6GwSoh6a1HVadoJtrnuaQIlxb8285pXGhFukcZRqVgrowdJO3+
CtJJzUdM9BjfUi3/Iuekt+B6IvgbhWW4HGL9irRQMRTz/SnEa5gPPO9hw4zyRKTM
ARff7kwiNF5AIpwk2XEIJGA2pQEY1Xejy9HUAYPjZmGDRCjpL7/g6oyC8F0VzI3U
2rgut6xXbPd/ETPs8iXOAIrcT5jFc509XAxhHc05XYKtxhKV2eGJ32f/6gtYfrIS
paYGLHS3BjKkbiEgZFH7Z4YJYWl6UqkBARzlDG0Nn35YXuuea8WbS4AeLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNXtUp1Gp6rRzvK4rcxyzOfRv6yMB8GA1UdIwQY
MBaAFJwa7ZkT+IgK91V+7z7wLW4P8/1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkJydG1SUDRpQXIzVlg3dlB2QXRiZ196X1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mZjk0ZjEtYmE2My00MGQ2LWJlY2Et
NWU2MjRhMzAzOGNmLzEvbkJydG1SUDRpQXIzVlg3dlB2QXRiZ196X1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9mZjk0ZjEtYmE2My00MGQ2LWJlY2EtNWU2MjRhMzAzOGNm
LzEvbkJydG1SUDRpQXIzVlg3dlB2QXRiZ196X1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADySINMCW
ft3gXPoHQYNhGhiZiSuR6fPfbM/E1xPk9aQXA5stWIEsbe7cXdah3pHUgyC49XJ5
iVSjnxKZ3LjGIMdWC72xr9ozwU1kl3If3oBlm8SxkxaRZ0V8tYUBEQuDAaF7wvYv
1Iu1yImCMUHi5eJSZ6497jiCzd3cELSDboKWx2UU3QxBWALGdjLzcWTo/DOThpDy
xJhu0NmGubDHCzUeBAa18OZTWsABMrLzNoLocwaZ17n7sJhgHQLDWkH+GD+pzHp+
Ppv8mn++mg20rg4Xq2b7GfSVQZWttSWUaTedNrg+x5xGwG09ofNxs4NfEL8jfq1c
N74aFD0PK2bX5A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:32:42 2025 by rpki-client