Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: 2V/TM08MxvOzDR7My6rcZ+TPpGffxZ9HkZUq8NR2qGA=
Subject key identifier: 91:D7:A6:86:A7:A5:D2:5A:00:04:75:2B:2A:A3:6E:59:27:DF:4A:4B
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019686FFAE6E16401E77AA24F41E64DA64BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 14:00:25 +0000
Manifest this update: Wed 30 Apr 2025 14:00:25 +0000
Manifest next update: Thu 01 May 2025 14:00:25 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: EFl+qn/kV4wowc6LoaONZJvXLDkdE6eOhVj2jt6jGqo=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:ae:6e:16:40:1e:77:aa:24:f4:1e:64:da:64:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Apr 30 14:00:25 2025 GMT
Not After : May 1 14:00:25 2025 GMT
Subject: CN=91d7a686a7a5d25a0004752b2aa36e5927df4a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:ca:e3:8e:5f:f8:54:15:f2:8b:82:eb:6f:
4f:ed:0e:ab:fc:20:dd:1a:ae:28:09:66:10:c5:44:
4f:ca:06:01:b5:b7:e9:ec:c4:36:1f:2d:ae:67:50:
9e:49:64:98:87:66:ad:4c:17:6b:9c:7b:c9:90:c5:
ea:b1:46:76:1f:fe:e2:91:42:24:00:9a:79:fc:8c:
4b:fd:0d:b5:cf:1e:bc:b0:8d:35:29:47:27:7d:6e:
fc:ac:a5:c1:80:13:ca:61:33:b0:bf:84:f4:41:15:
97:bd:47:61:61:e7:10:6b:49:98:82:1b:34:76:76:
23:96:0d:c2:db:98:36:9d:0a:35:d9:dd:31:5e:70:
c2:2a:83:c4:39:5c:aa:70:c2:57:c6:f0:a3:58:6f:
7a:91:6b:7e:3d:04:da:6c:23:ca:5b:88:f6:f3:1d:
f8:ba:6d:69:e0:1b:52:38:23:71:07:ef:57:71:86:
52:86:ff:58:21:72:f3:7b:7d:a7:f3:3e:a6:0d:06:
58:c2:a2:7c:59:73:ad:02:8f:56:72:35:dc:e2:47:
f1:3c:7d:fe:24:56:88:6e:e7:8c:cf:95:fc:9e:39:
49:ec:1b:40:f5:c7:ec:c0:dd:e8:3e:3f:be:03:53:
f2:f0:2f:40:5e:e6:6e:f8:c8:ea:51:d1:91:ec:e0:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D7:A6:86:A7:A5:D2:5A:00:04:75:2B:2A:A3:6E:59:27:DF:4A:4B
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:dc:0d:ee:7a:26:67:2d:a1:55:30:61:35:45:c7:ca:57:3a:
fa:01:ab:d1:c6:50:7d:98:2f:c5:e5:92:ec:fb:3a:f3:26:84:
90:92:c0:8a:0f:2e:53:c7:5b:1b:48:13:f7:87:22:e6:ce:61:
8b:e2:55:b1:2e:2a:d4:85:6d:20:49:78:b3:d9:36:db:4a:02:
06:11:23:e6:3f:6b:f8:d0:6f:9d:14:aa:fa:f6:5d:7d:39:fd:
8f:0e:46:98:00:f2:3c:eb:76:b4:42:e0:3d:11:48:cd:fe:9e:
45:35:91:92:dd:25:83:ec:87:48:f0:ba:47:6d:c0:30:e3:6e:
91:91:e1:ef:f3:c9:9f:e0:ec:4a:08:2e:88:b5:14:8e:4e:a6:
68:7d:2b:13:53:90:5f:2a:02:4c:93:42:33:a8:e2:d8:06:d8:
4a:60:2a:f4:b5:ff:41:ad:f8:c9:f7:58:53:03:e3:0f:2e:53:
ac:04:31:7d:56:c3:35:ec:24:6f:9e:ce:50:45:ff:3d:78:cf:
32:6c:99:ca:be:34:ce:16:a8:83:de:de:9a:f0:9c:94:37:43:
ef:b5:0c:ad:2c:9d:7a:7d:60:06:23:7c:20:76:81:b3:92:d1:
cf:cc:94:c7:a3:8e:c8:c8:a8:c9:8d:1c:58:b7:74:9a:d7:95:
9c:a7:dc:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaG/65uFkAed6ok9B5k2mS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDQ1ZjJhYzViY2UxNTY5ZGY2YjJhZDgwZDE2ZjFiOTJm
YmQ4NWMwHhcNMjUwNDMwMTQwMDI1WhcNMjUwNTAxMTQwMDI1WjAzMTEwLwYDVQQD
Eyg5MWQ3YTY4NmE3YTVkMjVhMDAwNDc1MmIyYWEzNmU1OTI3ZGY0YTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14LK445f+FQV8ouC629P7Q6r/CDd
Gq4oCWYQxURPygYBtbfp7MQ2Hy2uZ1CeSWSYh2atTBdrnHvJkMXqsUZ2H/7ikUIk
AJp5/IxL/Q21zx68sI01KUcnfW78rKXBgBPKYTOwv4T0QRWXvUdhYecQa0mYghs0
dnYjlg3C25g2nQo12d0xXnDCKoPEOVyqcMJXxvCjWG96kWt+PQTabCPKW4j28x34
um1p4BtSOCNxB+9XcYZShv9YIXLze32n8z6mDQZYwqJ8WXOtAo9WcjXc4kfxPH3+
JFaIbueMz5X8njlJ7BtA9cfswN3oPj++A1Py8C9AXuZu+MjqUdGR7OBBzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHXpoanpdJaAAR1Kyqjblkn30pLMB8GA1UdIwQY
MBaAFDXUXyrFvOFWnfayrYDRbxuS+9hcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUt
NmI3ZDdlNGVkNzAxLzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUtNmI3ZDdlNGVkNzAx
LzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9wN7nom
Zy2hVTBhNUXHylc6+gGr0cZQfZgvxeWS7Ps68yaEkJLAig8uU8dbG0gT94ci5s5h
i+JVsS4q1IVtIEl4s9k220oCBhEj5j9r+NBvnRSq+vZdfTn9jw5GmADyPOt2tELg
PRFIzf6eRTWRkt0lg+yHSPC6R23AMONukZHh7/PJn+DsSgguiLUUjk6maH0rE1OQ
XyoCTJNCM6ji2AbYSmAq9LX/Qa34yfdYUwPjDy5TrAQxfVbDNewkb57OUEX/PXjP
MmyZyr40zhaog97emvCclDdD77UMrSyden1gBiN8IHaBs5LRz8yUx6OOyMioyY0c
WLd0mteVnKfcvQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:18:02 2025 by rpki-client