Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier: OWaXCX75KnOV36VDoQuTNDk7ZJXNkEFhc1vkRWPB2B4=
Subject key identifier: 44:A6:55:40:D0:A8:1E:76:D0:96:FE:7F:07:2B:DC:28:8C:D1:06:4D
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 019678D631CECE06524F6E3CC16814E6DA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number: 036B
Signing time: Sun 27 Apr 2025 20:00:25 +0000
Manifest this update: Sun 27 Apr 2025 20:00:25 +0000
Manifest next update: Mon 28 Apr 2025 20:00:25 +0000
Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: rbv9YgtWkHpKiV/DhgTT8uHAA3EXrWvu2hy8+sac5KE=)
2: YYXnMCAt040NcLATlrH2pdrRzy4.roa (hash: //AxvWil0+RRuTzD9Iyynz1Qj6s3Pa74fW9rqeU5a2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:31:ce:ce:06:52:4f:6e:3c:c1:68:14:e6:da:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: Apr 27 20:00:25 2025 GMT
Not After : Apr 28 20:00:25 2025 GMT
Subject: CN=44a65540d0a81e76d096fe7f072bdc288cd1064d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:f5:6d:42:b7:36:ae:b4:46:25:77:d4:6e:
f6:0d:bf:6f:58:27:6d:1f:35:6a:32:83:09:4a:fe:
f0:f2:7c:6e:d7:fa:d0:44:5e:53:1d:a6:cf:a2:72:
1a:6b:59:0f:d0:82:1f:a4:16:fd:9d:7e:93:03:98:
f1:fe:fd:e9:8a:a7:c0:9c:a8:1a:25:0c:32:d2:40:
5d:00:d4:08:88:38:bd:3b:e1:93:d9:5c:fc:6a:59:
14:10:d4:ad:e4:68:5e:3c:79:22:15:ad:01:72:bb:
31:7e:45:dd:d0:f0:95:cf:47:01:ed:aa:5f:3a:ef:
3e:d9:e2:e8:1b:ee:be:2b:ee:0e:61:7a:14:e2:b4:
fc:13:43:4c:45:b0:b2:64:2f:62:3d:37:55:31:d8:
3c:77:2e:60:a1:47:c3:ad:38:53:7e:d1:87:30:a5:
76:52:fb:97:56:99:0f:94:70:37:22:62:fb:c6:80:
2d:2e:51:16:34:da:5c:60:9c:fa:c1:20:2a:8a:58:
d6:f9:9e:4d:92:45:47:ab:8b:ea:cd:83:83:8c:57:
c1:b9:b9:7c:45:3e:a2:59:bf:95:99:be:33:49:fc:
ed:80:ed:ce:bb:10:9c:04:98:6f:9e:87:a4:03:de:
80:00:0b:dc:e7:7a:8a:eb:a2:55:69:41:b0:75:8a:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:55:40:D0:A8:1E:76:D0:96:FE:7F:07:2B:DC:28:8C:D1:06:4D
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e7:4e:ab:d2:5e:15:f3:4f:57:20:bb:dc:f7:10:3e:05:19:
2f:a9:55:3c:e1:5e:ec:71:2e:8a:cc:52:b1:fa:d7:90:3e:cb:
e6:94:05:30:b2:9b:98:15:2d:c7:fd:bf:87:9f:cc:6b:15:df:
42:fb:f0:9e:ef:f2:ee:c7:37:8c:e7:8c:14:43:ef:65:b8:17:
e4:db:80:2c:6f:0a:1d:40:0a:f7:01:12:56:8a:53:cc:ae:26:
28:49:90:b6:00:df:e5:c8:98:ce:bb:d0:d1:87:bc:9f:34:08:
7c:5b:24:05:41:b5:8c:f3:a0:8e:5a:fd:0a:95:0b:83:19:45:
2a:73:bf:62:fb:b6:26:6f:9b:b1:2c:a9:89:19:08:15:7d:68:
06:f6:96:de:21:28:e3:08:35:8a:f7:2b:ac:3f:12:e0:61:aa:
1d:2e:9b:4f:30:90:52:06:95:81:b2:77:ff:81:5b:dc:45:9c:
01:71:2c:8a:1e:b0:e4:0a:fe:70:a7:e7:4d:c2:59:be:c8:62:
a6:ae:17:92:51:d0:74:f2:24:4f:f6:a6:0f:b7:23:3c:fb:bd:
57:1e:07:00:ac:19:f1:1b:1a:2e:1c:cc:31:38:77:5c:cb:07:
0b:eb:eb:ec:af:34:56:19:d6:15:9d:09:6e:b2:fd:55:cc:11:
c4:a0:c3:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41jHOzgZST248wWgU5tp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MzYyMGRhNDQ1MmFjODJhYWY0YzhjMDg4MTllYjBiODI1
MTNiODMwHhcNMjUwNDI3MjAwMDI1WhcNMjUwNDI4MjAwMDI1WjAzMTEwLwYDVQQD
Eyg0NGE2NTU0MGQwYTgxZTc2ZDA5NmZlN2YwNzJiZGMyODhjZDEwNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7r1bUK3Nq60RiV31G72Db9vWCdt
HzVqMoMJSv7w8nxu1/rQRF5THabPonIaa1kP0IIfpBb9nX6TA5jx/v3piqfAnKga
JQwy0kBdANQIiDi9O+GT2Vz8alkUENSt5GhePHkiFa0BcrsxfkXd0PCVz0cB7apf
Ou8+2eLoG+6+K+4OYXoU4rT8E0NMRbCyZC9iPTdVMdg8dy5goUfDrThTftGHMKV2
UvuXVpkPlHA3ImL7xoAtLlEWNNpcYJz6wSAqiljW+Z5NkkVHq4vqzYODjFfBubl8
RT6iWb+Vmb4zSfztgO3OuxCcBJhvnoekA96AAAvc53qK66JVaUGwdYoyCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESmVUDQqB520Jb+fwcr3CiM0QZNMB8GA1UdIwQY
MBaAFDU2INpEUqyCqvTIwIgZ6wuCUTuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2It
NTUxNTg0ZTVjMGE0LzEvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2ItNTUxNTg0ZTVjMGE0
LzEvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+dOq9Je
FfNPVyC73PcQPgUZL6lVPOFe7HEuisxSsfrXkD7L5pQFMLKbmBUtx/2/h5/MaxXf
Qvvwnu/y7sc3jOeMFEPvZbgX5NuALG8KHUAK9wESVopTzK4mKEmQtgDf5ciYzrvQ
0Ye8nzQIfFskBUG1jPOgjlr9CpULgxlFKnO/Yvu2Jm+bsSypiRkIFX1oBvaW3iEo
4wg1ivcrrD8S4GGqHS6bTzCQUgaVgbJ3/4Fb3EWcAXEsih6w5Ar+cKfnTcJZvshi
pq4XklHQdPIkT/amD7cjPPu9Vx4HAKwZ8RsaLhzMMTh3XMsHC+vr7K80VhnWFZ0J
brL9VcwRxKDDFA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:10:44 2025 by rpki-client