Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
File: Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft (raw, json)
Hash identifier: +LlAxSK3rCryLSU2CRiOssDbbZZaOFf+bLBTB0VTnko=
Subject key identifier: 6C:02:74:77:51:D2:E8:D5:84:0E:55:CD:37:70:A8:C2:FF:57:33:96
Authority key identifier: 36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29
Certificate issuer: /CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
Certificate serial: 0196760CBE8F1640E2AD45819A68854B0582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
Manifest number: 0BA2
Signing time: Sun 27 Apr 2025 07:01:08 +0000
Manifest this update: Sun 27 Apr 2025 07:01:08 +0000
Manifest next update: Mon 28 Apr 2025 07:01:08 +0000
Files and hashes: 1: Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl (hash: pf+jR6LmWuUIWhLJDuqrzbQkw7DsRxBzuU/5lh6lb+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:be:8f:16:40:e2:ad:45:81:9a:68:85:4b:05:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
Validity
Not Before: Apr 27 07:01:08 2025 GMT
Not After : Apr 28 07:01:08 2025 GMT
Subject: CN=6c02747751d2e8d5840e55cd3770a8c2ff573396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:4d:2b:4d:14:b3:0e:f6:f0:bf:57:2b:f2:
92:2a:ed:a3:6b:72:3b:c2:6e:4d:58:c8:7e:1d:60:
3a:65:a4:c7:a6:d6:72:1e:a8:ad:73:47:7c:d2:b6:
77:d0:b8:6a:ef:7b:ef:62:e2:f7:b8:84:ea:3b:4b:
bf:73:2f:c4:90:0a:e6:e4:06:50:ca:64:00:18:e7:
b8:f5:a1:5f:17:2e:78:3e:55:c1:09:a1:7f:1e:26:
61:ba:76:0d:ad:92:c6:8f:6e:4d:84:49:41:52:2a:
e4:e4:ca:30:12:6d:be:31:6e:1b:f8:24:cb:df:d9:
c5:b7:c1:8e:26:76:77:f0:1c:c9:b6:d5:09:cc:4b:
c9:5e:dc:fb:8a:83:19:2e:75:13:b5:b1:7f:1e:cf:
40:f1:21:39:0f:b6:46:74:fd:4e:50:eb:58:f3:de:
3e:37:ac:07:89:f6:89:5b:94:2d:de:04:d6:08:4b:
8d:c5:31:c7:f4:6c:43:59:be:2a:8b:48:ae:1a:46:
17:32:8c:c4:e3:ea:62:e7:b4:50:53:6c:61:28:26:
44:95:f0:be:43:9e:c2:39:db:e1:37:b3:f8:f4:24:
7c:ef:45:9d:04:b8:aa:bc:c9:49:0c:24:12:f2:e6:
45:3a:88:69:bc:73:69:08:0a:84:94:04:14:96:bf:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:02:74:77:51:D2:E8:D5:84:0E:55:CD:37:70:A8:C2:FF:57:33:96
X509v3 Authority Key Identifier:
keyid:36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d7:19:8e:b4:48:40:1f:9a:aa:fc:22:64:d7:00:36:4e:64:
7a:bd:ef:a3:aa:fc:47:a4:0c:66:3d:69:4c:db:2e:a4:36:79:
d3:bf:ec:0b:4a:6c:aa:e9:fe:1d:a0:2d:d2:34:45:35:19:91:
4e:9f:5c:b6:3b:da:00:4b:4e:a5:6e:39:5e:0d:cf:40:8b:9a:
67:59:ba:ba:b0:d7:f9:9a:e4:2d:1d:eb:23:39:c7:4c:4f:7f:
e6:ff:49:80:60:2e:f7:55:49:24:67:ce:69:35:10:3b:47:e3:
1a:f9:a1:79:36:2b:eb:fa:c2:3b:f5:35:52:30:e1:3f:91:b0:
5f:4a:fb:ad:13:fb:ff:5e:8d:2c:54:b3:73:07:15:9b:16:3b:
a3:e0:d4:be:d3:6a:ca:67:76:e4:00:db:ad:3c:9c:33:0c:99:
ec:13:12:8f:37:4e:1d:71:3c:7d:3e:e4:27:12:b9:11:64:42:
fa:c0:7e:3f:37:88:86:f4:53:ee:42:2c:b4:68:8e:85:9c:45:
c2:a4:c3:b9:1c:58:15:a9:d3:87:36:34:75:45:6d:cf:a0:e4:
13:fb:41:a8:88:d1:ac:07:28:ae:72:10:d4:16:e2:5d:7b:53:
ab:01:3b:be:34:33:10:0d:f4:b3:9f:95:65:1d:1b:05:1c:12:
d5:b5:2f:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DL6PFkDirUWBmmiFSwWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZmRmNjhjZWNhMzc2OWU5MWIwZTc2NDhkMWY5NTU4ZWQ0
YzdjMjkwHhcNMjUwNDI3MDcwMTA4WhcNMjUwNDI4MDcwMTA4WjAzMTEwLwYDVQQD
Eyg2YzAyNzQ3NzUxZDJlOGQ1ODQwZTU1Y2QzNzcwYThjMmZmNTczMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxztNK00Usw728L9XK/KSKu2ja3I7
wm5NWMh+HWA6ZaTHptZyHqitc0d80rZ30Lhq73vvYuL3uITqO0u/cy/EkArm5AZQ
ymQAGOe49aFfFy54PlXBCaF/HiZhunYNrZLGj25NhElBUirk5MowEm2+MW4b+CTL
39nFt8GOJnZ38BzJttUJzEvJXtz7ioMZLnUTtbF/Hs9A8SE5D7ZGdP1OUOtY894+
N6wHifaJW5Qt3gTWCEuNxTHH9GxDWb4qi0iuGkYXMozE4+pi57RQU2xhKCZElfC+
Q57COdvhN7P49CR870WdBLiqvMlJDCQS8uZFOohpvHNpCAqElAQUlr8WQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwCdHdR0ujVhA5VzTdwqML/VzOWMB8GA1UdIwQY
MBaAFDb99ozso3aekbDnZI0flVjtTHwpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnYzMmpPeWpkcDZSc09ka2pSLVZXTzFNZkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wMTA5ZGItMDMzMy00OThhLWI2YjYt
MzUyMzgwNDBlOGY5LzEvTnYzMmpPeWpkcDZSc09ka2pSLVZXTzFNZkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wMTA5ZGItMDMzMy00OThhLWI2YjYtMzUyMzgwNDBlOGY5
LzEvTnYzMmpPeWpkcDZSc09ka2pSLVZXTzFNZkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9cZjrRI
QB+aqvwiZNcANk5ker3vo6r8R6QMZj1pTNsupDZ507/sC0psqun+HaAt0jRFNRmR
Tp9ctjvaAEtOpW45Xg3PQIuaZ1m6urDX+ZrkLR3rIznHTE9/5v9JgGAu91VJJGfO
aTUQO0fjGvmheTYr6/rCO/U1UjDhP5GwX0r7rRP7/16NLFSzcwcVmxY7o+DUvtNq
ymd25ADbrTycMwyZ7BMSjzdOHXE8fT7kJxK5EWRC+sB+PzeIhvRT7kIstGiOhZxF
wqTDuRxYFanThzY0dUVtz6DkE/tBqIjRrAcornIQ1BbiXXtTqwE7vjQzEA30s5+V
ZR0bBRwS1bUvkA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:53:13 2025 by rpki-client