Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: GYVQ1rjV/0YumTepDUI/pqIlWlBunX2dbudxqDI4HN8=
Subject key identifier: 8F:16:69:B8:1C:5D:73:3C:F9:05:64:EB:95:76:B3:13:CA:93:34:57
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 019676E7C72A42170FAC869C963ABBB49D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0BF0
Signing time: Sun 27 Apr 2025 11:00:23 +0000
Manifest this update: Sun 27 Apr 2025 11:00:23 +0000
Manifest next update: Mon 28 Apr 2025 11:00:23 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: iPGmthmzSeQG73unDy/2kVc+X+Z/f28PHXeLsYW7OPs=)
2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:c7:2a:42:17:0f:ac:86:9c:96:3a:bb:b4:9d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Apr 27 11:00:23 2025 GMT
Not After : Apr 28 11:00:23 2025 GMT
Subject: CN=8f1669b81c5d733cf90564eb9576b313ca933457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:a3:f0:93:b6:81:6f:d0:17:87:9c:c6:29:
ea:d2:37:a2:1c:36:86:35:a2:17:d3:80:d5:69:30:
1a:9a:da:51:f3:97:fb:a4:ef:b8:8e:e6:7b:c7:a9:
be:c9:eb:8f:d8:7d:2e:0e:a4:4e:0b:4d:33:ef:07:
05:99:f9:52:f1:c9:2e:52:16:31:7d:8d:a5:d8:e0:
e9:1f:a6:4e:2a:78:4c:bc:37:8f:2b:78:db:de:20:
66:5a:8d:31:41:c7:28:8c:18:5b:39:8e:f7:81:c0:
dd:8b:b6:e2:1f:8e:62:c8:66:a9:69:b2:be:c8:f8:
30:87:cc:0a:de:87:0e:60:57:61:f3:24:0a:87:c0:
7b:89:20:f6:fc:4f:56:a7:b7:6d:6e:01:ed:91:f8:
01:04:4d:87:76:75:55:2f:3d:a1:b6:1b:33:1f:89:
2d:0a:c8:17:53:5f:13:d2:13:9b:cb:1f:ec:fc:17:
9b:8a:67:ad:c7:c3:b0:95:f8:52:96:12:88:85:d8:
33:ac:e4:ee:3f:21:ed:6a:ff:ed:73:40:98:c6:8e:
b0:fc:77:50:48:2e:c1:a4:40:a4:88:00:91:4f:b8:
c7:32:23:0d:c9:15:c4:f4:a1:8b:a8:8b:a0:95:16:
d4:77:49:f2:8f:00:d4:a0:3b:f4:d5:26:fd:c1:d5:
b8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:16:69:B8:1C:5D:73:3C:F9:05:64:EB:95:76:B3:13:CA:93:34:57
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:df:78:18:c2:8a:06:b8:75:c4:1a:51:02:44:dc:63:62:1c:
c3:f0:33:78:4a:42:54:78:c3:8a:63:97:f8:eb:ce:6f:75:80:
38:b5:96:c2:4e:f0:c2:11:0f:96:3e:59:35:81:15:b7:03:90:
ad:c5:4e:c1:f8:9d:4b:90:ea:b1:7e:30:7a:80:0d:9e:f9:48:
c6:95:0c:b9:9d:d2:8d:5c:e8:13:ea:a2:f3:cb:8e:82:8d:5b:
56:75:b7:53:32:2c:bf:5e:d5:6c:5b:17:29:17:4f:0f:23:1b:
40:68:41:4e:e1:1e:a6:fb:ca:cd:00:24:49:f3:01:c8:c0:9e:
46:68:93:f4:74:e4:10:20:2e:5b:1c:dd:f0:fd:eb:15:98:2d:
c6:40:d3:c0:c3:66:1e:1e:08:75:98:e2:e1:b0:9a:ba:36:dc:
a6:97:62:0c:43:02:90:d1:ac:99:64:14:60:5a:98:94:a5:dc:
67:12:f7:f7:eb:57:87:cc:6f:08:1f:0d:8b:e3:9b:c7:2e:1a:
a0:51:44:12:2a:28:06:6a:43:d1:f1:a2:48:f4:58:c3:d3:c8:
02:6a:4a:88:3f:fb:fe:f6:6b:9e:94:2c:23:95:81:b8:c6:88:
18:67:85:1c:b7:f5:34:e0:bb:1a:75:13:7a:dc:aa:67:bc:39:
59:d2:60:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ258cqQhcPrIacljq7tJ1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzQ2NWZmZGJhM2MwNWMyMWJlNWIxNWYwZDkxNWVmY2Ni
MDY5ZTUwHhcNMjUwNDI3MTEwMDIzWhcNMjUwNDI4MTEwMDIzWjAzMTEwLwYDVQQD
Eyg4ZjE2NjliODFjNWQ3MzNjZjkwNTY0ZWI5NTc2YjMxM2NhOTMzNDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDaj8JO2gW/QF4ecxinq0jeiHDaG
NaIX04DVaTAamtpR85f7pO+4juZ7x6m+yeuP2H0uDqROC00z7wcFmflS8ckuUhYx
fY2l2ODpH6ZOKnhMvDePK3jb3iBmWo0xQccojBhbOY73gcDdi7biH45iyGapabK+
yPgwh8wK3ocOYFdh8yQKh8B7iSD2/E9Wp7dtbgHtkfgBBE2HdnVVLz2hthszH4kt
CsgXU18T0hObyx/s/Bebimetx8OwlfhSlhKIhdgzrOTuPyHtav/tc0CYxo6w/HdQ
SC7BpECkiACRT7jHMiMNyRXE9KGLqIuglRbUd0nyjwDUoDv01Sb9wdW4UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8WabgcXXM8+QVk65V2sxPKkzRXMB8GA1UdIwQY
MBaAFDZ0Zf/bo8BcIb5bFfDZFe/MsGnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEt
NWU0N2NmMTk5ZGZmLzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEtNWU0N2NmMTk5ZGZm
LzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ994GMKK
Brh1xBpRAkTcY2Icw/AzeEpCVHjDimOX+OvOb3WAOLWWwk7wwhEPlj5ZNYEVtwOQ
rcVOwfidS5DqsX4weoANnvlIxpUMuZ3SjVzoE+qi88uOgo1bVnW3UzIsv17VbFsX
KRdPDyMbQGhBTuEepvvKzQAkSfMByMCeRmiT9HTkECAuWxzd8P3rFZgtxkDTwMNm
Hh4IdZji4bCaujbcppdiDEMCkNGsmWQUYFqYlKXcZxL39+tXh8xvCB8Ni+Obxy4a
oFFEEiooBmpD0fGiSPRYw9PIAmpKiD/7/vZrnpQsI5WBuMaIGGeFHLf1NOC7GnUT
etyqZ7w5WdJgnA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:53 2025 by rpki-client