Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
File: nvnDHh7MuhkCs_YiWT3pcspxi1w.mft (raw, json)
Hash identifier: myYehBYD0jzJVqhGfX2C9Z6Uf41hM89yulPXaXexdYg=
Subject key identifier: 39:61:DE:F2:1B:34:72:27:5A:8D:ED:3D:5F:10:64:2D:50:95:BB:38
Authority key identifier: 9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C
Certificate issuer: /CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
Certificate serial: 0194BABB65047CA47F3B962E96CE22428848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
Manifest number: 0B81
Signing time: Fri 31 Jan 2025 05:00:30 +0000
Manifest this update: Fri 31 Jan 2025 05:00:30 +0000
Manifest next update: Sat 01 Feb 2025 05:00:30 +0000
Files and hashes: 1: nvnDHh7MuhkCs_YiWT3pcspxi1w.crl (hash: ZDspJpy/EnW3P0TeHwrfNDvPsv3IE/5y4J4OlpVBV/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:65:04:7c:a4:7f:3b:96:2e:96:ce:22:42:88:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
Validity
Not Before: Jan 31 05:00:30 2025 GMT
Not After : Feb 1 05:00:30 2025 GMT
Subject: CN=3961def21b3472275a8ded3d5f10642d5095bb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:3d:32:14:48:7d:d5:9a:58:ac:2a:e8:fc:
08:b5:20:b5:73:89:e0:4e:52:eb:fd:ce:61:a2:b5:
0b:01:2a:c7:3a:91:e2:c0:9e:8d:17:dc:65:9d:8f:
cb:64:e1:5c:9a:59:54:92:2d:01:ed:12:8c:1b:46:
e1:67:72:bc:77:34:84:6e:b1:64:ec:3b:1b:a1:ae:
68:95:19:36:32:93:89:81:b0:35:b1:73:d8:31:b0:
3c:be:cb:c2:76:4f:9f:1e:c0:6f:2e:57:ec:7d:2a:
4a:94:56:7b:f2:56:7a:16:51:81:c6:46:bb:ae:36:
f6:fa:12:89:28:66:b1:36:96:09:8d:e7:98:df:bb:
75:00:37:ee:49:a0:37:50:66:5f:f3:a0:f2:4d:46:
08:c7:2e:b3:a9:c1:2a:ee:8c:b5:3b:f7:75:02:c5:
33:06:63:e6:e7:8d:19:09:4f:99:6a:f7:c1:85:48:
88:09:25:ff:30:1e:7d:a3:3f:59:f4:a6:33:5d:7c:
ea:3e:cc:a2:9d:b3:de:0d:0f:be:ef:58:ff:60:8c:
f5:a3:f8:22:06:a0:22:f3:fe:5e:2c:b8:03:66:94:
e0:7b:4c:db:1b:83:d1:f6:3e:10:15:04:b2:5d:bc:
3c:6b:f4:a8:0e:bd:ca:43:03:ca:84:17:78:f7:0d:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:61:DE:F2:1B:34:72:27:5A:8D:ED:3D:5F:10:64:2D:50:95:BB:38
X509v3 Authority Key Identifier:
keyid:9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cb:a5:bd:85:f4:0e:6e:65:9c:8b:ef:6a:eb:36:54:23:7b:
99:37:84:32:d4:ed:21:e8:65:6a:26:b6:87:1a:b9:60:41:50:
9b:04:60:4a:08:14:0f:cf:58:a3:90:96:28:18:ad:05:7c:8d:
1d:73:a3:56:d2:46:40:29:74:bf:06:00:9f:fc:03:d7:cf:ec:
ec:b6:73:a7:82:96:0b:ea:bd:e3:6c:e5:70:67:40:a4:0f:54:
58:fd:67:8c:b4:78:c3:84:c5:d1:06:ab:60:7a:a0:27:68:1a:
d6:38:d4:99:c2:4d:6b:da:76:ec:68:e0:a4:22:7d:5c:d1:ec:
98:5f:2f:fd:c9:b3:f2:64:d3:a1:aa:8d:c4:db:bb:34:6d:f7:
08:ca:eb:b3:62:d1:f4:67:a5:c5:a4:6f:04:b8:09:85:31:5e:
e6:f8:11:77:12:0c:35:97:ab:93:c1:34:46:b2:be:ed:35:dc:
a2:fe:e3:cd:76:3a:8a:ee:53:d3:8e:fb:2b:d6:08:06:e2:c6:
9a:85:2d:03:ee:00:40:39:ff:43:55:90:52:d3:0d:c6:bf:7b:
00:5a:72:d8:da:30:52:c0:79:e5:ea:50:ec:b2:b9:fe:65:18:
2a:41:69:d5:a7:2b:a8:1d:72:86:b6:5e:bd:27:53:16:50:ff:
ef:cd:6d:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u2UEfKR/O5Yuls4iQohIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZjljMzFlMWVjY2JhMTkwMmIzZjYyMjU5M2RlOTcyY2E3
MThiNWMwHhcNMjUwMTMxMDUwMDMwWhcNMjUwMjAxMDUwMDMwWjAzMTEwLwYDVQQD
EygzOTYxZGVmMjFiMzQ3MjI3NWE4ZGVkM2Q1ZjEwNjQyZDUwOTViYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyY9MhRIfdWaWKwq6PwItSC1c4ng
TlLr/c5horULASrHOpHiwJ6NF9xlnY/LZOFcmllUki0B7RKMG0bhZ3K8dzSEbrFk
7Dsboa5olRk2MpOJgbA1sXPYMbA8vsvCdk+fHsBvLlfsfSpKlFZ78lZ6FlGBxka7
rjb2+hKJKGaxNpYJjeeY37t1ADfuSaA3UGZf86DyTUYIxy6zqcEq7oy1O/d1AsUz
BmPm540ZCU+ZavfBhUiICSX/MB59oz9Z9KYzXXzqPsyinbPeDQ++71j/YIz1o/gi
BqAi8/5eLLgDZpTge0zbG4PR9j4QFQSyXbw8a/SoDr3KQwPKhBd49w3OPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlh3vIbNHInWo3tPV8QZC1Qlbs4MB8GA1UdIwQY
MBaAFJ75wx4ezLoZArP2Ilk96XLKcYtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZuREhoN011aGtDc19ZaVdUM3Bjc3B4aTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yZmE3YjgtYTQ4NC00N2RmLWIxYzIt
OTcyYzBmYWU2N2I4LzEvbnZuREhoN011aGtDc19ZaVdUM3Bjc3B4aTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yZmE3YjgtYTQ4NC00N2RmLWIxYzItOTcyYzBmYWU2N2I4
LzEvbnZuREhoN011aGtDc19ZaVdUM3Bjc3B4aTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMulvYX0
Dm5lnIvvaus2VCN7mTeEMtTtIehlaia2hxq5YEFQmwRgSggUD89Yo5CWKBitBXyN
HXOjVtJGQCl0vwYAn/wD18/s7LZzp4KWC+q942zlcGdApA9UWP1njLR4w4TF0Qar
YHqgJ2ga1jjUmcJNa9p27GjgpCJ9XNHsmF8v/cmz8mTToaqNxNu7NG33CMrrs2LR
9GelxaRvBLgJhTFe5vgRdxIMNZerk8E0RrK+7TXcov7jzXY6iu5T0477K9YIBuLG
moUtA+4AQDn/Q1WQUtMNxr97AFpy2NowUsB55epQ7LK5/mUYKkFp1acrqB1yhrZe
vSdTFlD/781t9w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:07 2025 by rpki-client on console-fra.rpki-client.org