Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
File: nYy-lCn5RJlbPJNL2vZglrURSNQ.mft (raw, json)
Hash identifier: HEnwQCrTu5CHamXubJqv/MvYiZrkdkIJWjojxaJJ1ho=
Subject key identifier: 74:70:A1:28:45:07:AB:CA:8A:92:34:1D:57:DA:A9:BA:37:A8:9E:93
Authority key identifier: 9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
Certificate issuer: /CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
Certificate serial: 01968435A9282767DE7D72E0BACD2CFF7359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
Manifest number: 0463
Signing time: Wed 30 Apr 2025 01:00:31 +0000
Manifest this update: Wed 30 Apr 2025 01:00:31 +0000
Manifest next update: Thu 01 May 2025 01:00:31 +0000
Files and hashes: 1: nYy-lCn5RJlbPJNL2vZglrURSNQ.crl (hash: CL3GFTiyPv02JaLeMA6jUZh8i19UmoF2MGBLWa/ZX7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:35:a9:28:27:67:de:7d:72:e0:ba:cd:2c:ff:73:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
Validity
Not Before: Apr 30 01:00:31 2025 GMT
Not After : May 1 01:00:31 2025 GMT
Subject: CN=7470a1284507abca8a92341d57daa9ba37a89e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:4d:8b:b4:9e:94:0a:36:74:f6:28:83:15:
55:8a:a3:71:df:27:97:41:c9:e3:98:d7:05:d4:ae:
29:b1:30:da:85:ed:98:ec:2c:98:f4:00:af:1d:4c:
a1:ef:3f:83:75:97:80:a4:5e:d3:f5:17:71:76:48:
00:7a:1c:de:60:40:f5:db:6e:79:ca:f4:04:a6:72:
9c:0a:63:45:23:28:0c:4b:10:21:ef:0e:07:7d:2e:
c9:89:8d:99:71:09:37:41:46:b6:a3:9a:24:bc:48:
96:a5:e2:c1:cc:37:97:8b:dd:59:fe:26:1b:63:30:
72:f9:fa:99:5b:03:b3:ba:f9:d2:90:f2:bd:0a:f5:
63:0b:93:26:92:f3:96:d3:9a:af:73:a3:98:61:9f:
77:1e:19:7d:a4:94:f5:89:23:b5:94:ea:ad:b8:ef:
09:46:cf:5f:35:0d:20:11:96:22:bb:46:29:a8:97:
dc:a2:59:22:51:a7:0d:0d:85:2c:54:3a:c1:62:25:
83:0c:5b:6a:5f:8d:25:66:ef:ad:1b:c2:81:b4:f9:
18:e2:2f:a1:4d:a1:f0:33:08:c3:75:74:72:c9:71:
f3:b0:2d:cb:ad:16:aa:29:37:82:1b:4c:8a:f4:84:
e1:cb:db:36:78:1d:11:6e:d9:fb:cd:d4:c6:9c:5c:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:70:A1:28:45:07:AB:CA:8A:92:34:1D:57:DA:A9:BA:37:A8:9E:93
X509v3 Authority Key Identifier:
keyid:9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c9:51:03:cb:62:63:ce:25:6a:eb:69:86:84:0b:c4:60:85:
d5:87:5a:e8:83:e3:8a:af:36:d5:72:98:a0:48:0c:bf:69:14:
af:fe:0c:ac:d2:fd:32:2d:c0:07:df:18:b2:3b:7b:59:cb:21:
06:5b:00:af:1b:ba:db:28:8e:60:f3:9d:bf:28:67:d4:e3:56:
fd:0d:db:4f:cb:f9:5c:df:c1:77:97:4c:26:f4:a6:1b:85:46:
ab:23:34:61:bf:53:de:c9:ca:df:e3:b6:e8:bc:71:e1:1d:bb:
f3:b1:11:91:74:b5:d8:ea:54:77:1f:06:8e:2d:00:2d:26:f9:
84:23:f9:a5:0e:b8:ee:a4:8c:62:e0:9d:6c:a7:89:44:7d:fa:
83:0c:52:35:52:9a:f9:d0:50:3b:2e:eb:38:ce:ab:cc:af:21:
98:38:0a:ed:5f:c7:fb:64:35:c2:bb:85:b1:cf:ee:97:7c:00:
91:e5:ce:b7:14:a0:f9:db:49:bd:9e:e5:d9:71:30:7d:bf:01:
7e:a1:81:d9:ad:34:ba:94:ce:b8:7f:0a:37:93:cc:d9:e1:36:
dc:af:86:2a:d2:65:d1:1b:13:dd:5c:e0:68:eb:6b:8f:5d:1b:
1f:68:93:9a:53:b4:b1:8b:39:04:0c:72:7b:45:aa:82:58:35:
92:a1:df:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaENakoJ2fefXLgus0s/3NZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOGNiZTk0MjlmOTQ0OTk1YjNjOTM0YmRhZjY2MDk2YjUx
MTQ4ZDQwHhcNMjUwNDMwMDEwMDMxWhcNMjUwNTAxMDEwMDMxWjAzMTEwLwYDVQQD
Eyg3NDcwYTEyODQ1MDdhYmNhOGE5MjM0MWQ1N2RhYTliYTM3YTg5ZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4hNi7SelAo2dPYogxVViqNx3yeX
QcnjmNcF1K4psTDahe2Y7CyY9ACvHUyh7z+DdZeApF7T9RdxdkgAehzeYED12255
yvQEpnKcCmNFIygMSxAh7w4HfS7JiY2ZcQk3QUa2o5okvEiWpeLBzDeXi91Z/iYb
YzBy+fqZWwOzuvnSkPK9CvVjC5MmkvOW05qvc6OYYZ93Hhl9pJT1iSO1lOqtuO8J
Rs9fNQ0gEZYiu0YpqJfcolkiUacNDYUsVDrBYiWDDFtqX40lZu+tG8KBtPkY4i+h
TaHwMwjDdXRyyXHzsC3LrRaqKTeCG0yK9IThy9s2eB0Rbtn7zdTGnFwe1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRwoShFB6vKipI0HVfaqbo3qJ6TMB8GA1UdIwQY
MBaAFJ2MvpQp+USZWzyTS9r2YJa1EUjUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbll5LWxDbjVSSmxiUEpOTDJ2WmdsclVSU05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yM2Q2NGYtNTE5Mi00ZGQ2LWIwMjYt
ZWU5MTE2ZDdlMWQ2LzEvbll5LWxDbjVSSmxiUEpOTDJ2WmdsclVSU05RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yM2Q2NGYtNTE5Mi00ZGQ2LWIwMjYtZWU5MTE2ZDdlMWQ2
LzEvbll5LWxDbjVSSmxiUEpOTDJ2WmdsclVSU05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATslRA8ti
Y84lautphoQLxGCF1Yda6IPjiq821XKYoEgMv2kUr/4MrNL9Mi3AB98Ysjt7Wcsh
BlsArxu62yiOYPOdvyhn1ONW/Q3bT8v5XN/Bd5dMJvSmG4VGqyM0Yb9T3snK3+O2
6Lxx4R2787ERkXS12OpUdx8Gji0ALSb5hCP5pQ647qSMYuCdbKeJRH36gwxSNVKa
+dBQOy7rOM6rzK8hmDgK7V/H+2Q1wruFsc/ul3wAkeXOtxSg+dtJvZ7l2XEwfb8B
fqGB2a00upTOuH8KN5PM2eE23K+GKtJl0RsT3VzgaOtrj10bH2iTmlO0sYs5BAxy
e0Wqglg1kqHfTg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 04:53:17 2025 by rpki-client