Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: bVq33EZAIieeKvHalSUPiMk/0XsypEHaDMf+QSBpSFg=
Subject key identifier: AC:3D:1A:AC:71:E8:50:3C:5E:12:43:CA:CA:5F:F8:AF:13:24:57:BC
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 0196760C9A3A6608250212E29E82C9A081DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 0B42
Signing time: Sun 27 Apr 2025 07:00:59 +0000
Manifest this update: Sun 27 Apr 2025 07:00:59 +0000
Manifest next update: Mon 28 Apr 2025 07:00:59 +0000
Files and hashes: 1: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: t3hvm8EIdXM+H/yDAXSHa5f8PJCgXj7fdBMkpuOUBb0=)
2: R_dc828vlc27bxXSMzahF76dopg.roa (hash: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=)
3: yzgxHb39JlWgV-6OUyl9AE4hQAQ.roa (hash: pG2NZjpFYDlbN9iuGT1kUvmnDeM4noZC3E54rEDkwXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:9a:3a:66:08:25:02:12:e2:9e:82:c9:a0:81:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Apr 27 07:00:59 2025 GMT
Not After : Apr 28 07:00:59 2025 GMT
Subject: CN=ac3d1aac71e8503c5e1243caca5ff8af132457bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c0:c1:3b:0f:ee:15:75:73:8f:32:15:91:d2:
1e:34:c8:b9:07:1a:d8:2f:85:a0:dc:9f:66:26:eb:
88:0c:04:61:14:53:7a:61:80:0c:ca:bf:cc:07:99:
30:16:99:12:7b:2e:98:c0:27:eb:dd:29:82:96:89:
cb:3c:c8:51:08:71:f4:79:75:fb:89:5e:63:ef:93:
05:44:88:03:53:05:65:29:91:c8:75:6f:f3:2d:9f:
e8:66:37:0d:a6:e2:56:10:6f:2a:f9:03:2a:af:b7:
74:31:1c:5c:0c:54:1a:44:12:4b:8e:43:a2:dd:6f:
22:d0:a2:da:3b:d2:73:70:05:71:11:d3:12:57:16:
d1:21:13:66:ae:58:75:4e:ff:c7:84:d3:70:a1:7d:
63:e5:1b:68:12:17:b5:87:08:07:b3:52:31:40:18:
72:ec:4c:e4:69:fe:c8:6a:1e:45:bd:48:5c:51:81:
b2:be:db:fb:ee:d2:a8:95:39:3d:83:39:f7:8f:6b:
c5:96:2a:ac:f1:70:5f:63:07:96:7c:71:36:96:99:
c8:ed:27:24:de:ef:bc:f7:a6:3f:12:b9:33:a5:69:
f1:8d:a9:b0:0d:4b:8a:d7:c8:68:15:d5:2e:ba:bb:
03:be:6d:c3:a7:14:d4:0d:39:16:35:2d:15:d0:0c:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3D:1A:AC:71:E8:50:3C:5E:12:43:CA:CA:5F:F8:AF:13:24:57:BC
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9a:06:cf:f3:1e:5c:1a:65:37:d3:37:3e:ae:89:06:55:e0:
c9:82:97:54:26:1c:29:ab:a1:f6:4a:1a:11:20:d3:2b:2a:e7:
6a:fe:de:19:4a:9b:28:c4:ce:ef:f9:51:6b:5b:99:2e:e8:1a:
8f:a9:5d:95:57:dd:4d:13:52:6c:90:ef:72:11:58:3b:60:6a:
79:4e:22:04:7e:d3:82:32:96:21:ff:82:08:f1:97:b2:1d:c3:
af:b9:91:ce:ca:d2:d4:6a:26:42:a5:b7:c7:a4:6a:88:23:f8:
8b:4a:3a:44:e4:52:75:30:f9:a7:f8:bc:9a:a5:0a:0d:d1:7f:
13:3f:89:a7:8c:3c:a3:1c:b7:d6:07:af:87:a9:17:03:de:3b:
89:50:4d:e6:22:60:13:c2:6c:ec:78:15:d0:6c:c3:8e:86:b9:
aa:f3:33:03:2e:d5:08:8e:9d:52:f9:78:58:60:bd:43:0e:6a:
4b:12:06:9a:39:83:8d:ff:8d:ac:f8:fd:93:0d:72:e2:a6:ad:
c1:2e:9a:93:e7:31:e6:de:5b:2a:fa:ce:52:a7:e7:40:7f:5e:
4c:08:b6:25:6a:b3:3c:56:19:51:64:20:c0:fa:65:48:f6:5c:
f2:78:11:65:53:c0:e9:c9:76:3d:88:1c:66:c3:ae:0d:a1:67:
63:18:71:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DJo6ZgglAhLinoLJoIHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZmUzYTkxMjYzZTJlODMxOWMyYTY3OGU2Mjk4NTFkMDll
NzdmMGQwHhcNMjUwNDI3MDcwMDU5WhcNMjUwNDI4MDcwMDU5WjAzMTEwLwYDVQQD
EyhhYzNkMWFhYzcxZTg1MDNjNWUxMjQzY2FjYTVmZjhhZjEzMjQ1N2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MDBOw/uFXVzjzIVkdIeNMi5BxrY
L4Wg3J9mJuuIDARhFFN6YYAMyr/MB5kwFpkSey6YwCfr3SmClonLPMhRCHH0eXX7
iV5j75MFRIgDUwVlKZHIdW/zLZ/oZjcNpuJWEG8q+QMqr7d0MRxcDFQaRBJLjkOi
3W8i0KLaO9JzcAVxEdMSVxbRIRNmrlh1Tv/HhNNwoX1j5RtoEhe1hwgHs1IxQBhy
7Ezkaf7Iah5FvUhcUYGyvtv77tKolTk9gzn3j2vFliqs8XBfYweWfHE2lpnI7Sck
3u+896Y/ErkzpWnxjamwDUuK18hoFdUuursDvm3DpxTUDTkWNS0V0Az7eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKw9Gqxx6FA8XhJDyspf+K8TJFe8MB8GA1UdIwQY
MBaAFDb+OpEmPi6DGcKmeOYphR0J538NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYt
ZmEzZTA5MDFmMjQwLzEvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYtZmEzZTA5MDFmMjQw
LzEvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJoGz/Me
XBplN9M3Pq6JBlXgyYKXVCYcKauh9koaESDTKyrnav7eGUqbKMTO7/lRa1uZLuga
j6ldlVfdTRNSbJDvchFYO2BqeU4iBH7TgjKWIf+CCPGXsh3Dr7mRzsrS1GomQqW3
x6RqiCP4i0o6RORSdTD5p/i8mqUKDdF/Ez+Jp4w8oxy31gevh6kXA947iVBN5iJg
E8Js7HgV0GzDjoa5qvMzAy7VCI6dUvl4WGC9Qw5qSxIGmjmDjf+NrPj9kw1y4qat
wS6ak+cx5t5bKvrOUqfnQH9eTAi2JWqzPFYZUWQgwPplSPZc8ngRZVPA6cl2PYgc
ZsOuDaFnYxhxAQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:35 2025 by rpki-client