Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
File: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft (raw, json)
Hash identifier: pYYx7CJ6LibBQw1N0uTMcx3Z/E7pfrid6CwvFoFf+Dw=
Subject key identifier: F0:92:B6:3C:1C:B5:5D:62:B9:14:CB:F4:EE:E3:59:4E:44:B7:78:30
Authority key identifier: 35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
Certificate issuer: /CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Certificate serial: 01968E82AFF20D0E33870756EF192A1D45C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
Manifest number: 08C8
Signing time: Fri 02 May 2025 01:00:51 +0000
Manifest this update: Fri 02 May 2025 01:00:51 +0000
Manifest next update: Sat 03 May 2025 01:00:51 +0000
Files and hashes: 1: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl (hash: ltmr5MyfA5PD7WVUoSJFoHqctZm3t85eMCAvouUGrTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:af:f2:0d:0e:33:87:07:56:ef:19:2a:1d:45:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Validity
Not Before: May 2 01:00:51 2025 GMT
Not After : May 3 01:00:51 2025 GMT
Subject: CN=f092b63c1cb55d62b914cbf4eee3594e44b77830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:cf:6d:63:82:3f:13:77:9f:87:78:50:1a:
8d:0e:98:29:16:a2:8c:5f:d3:80:0b:6c:36:ff:3a:
4f:ac:f3:86:c7:6b:d9:1a:71:a4:78:0a:62:53:5d:
9d:a7:d7:08:bb:8f:21:b0:2f:66:0f:eb:bf:76:95:
a1:8a:dc:9e:76:16:45:d7:2f:a1:b3:29:61:63:f5:
76:5e:1c:93:0b:b8:94:3b:eb:3c:a9:b3:03:0d:ce:
33:1d:c2:6d:84:61:be:26:b1:59:ca:44:52:71:1d:
42:94:41:66:f7:88:e5:b2:ff:96:e8:95:52:a6:bc:
b6:e8:b2:d2:4e:50:19:b6:91:4a:72:99:7f:a4:87:
86:60:2b:8d:8e:ed:5a:e3:df:ae:49:0e:52:36:00:
28:d0:99:32:0f:90:c9:16:be:bc:28:60:5c:52:c5:
77:75:5f:ee:76:a2:e1:b6:b6:20:fb:5a:57:f1:e9:
5d:17:26:82:1a:51:63:76:63:0d:28:04:c3:b8:67:
a3:34:b7:56:93:f1:3c:51:f6:1a:6f:32:8d:d1:a3:
10:b7:67:b3:c4:06:d2:4d:7d:89:af:a3:17:d7:9c:
f3:35:37:34:ed:21:40:ad:57:55:90:d1:98:c3:82:
c9:9b:52:36:02:ec:3a:bc:ee:63:08:bc:1a:e0:d6:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:92:B6:3C:1C:B5:5D:62:B9:14:CB:F4:EE:E3:59:4E:44:B7:78:30
X509v3 Authority Key Identifier:
keyid:35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:52:37:83:21:04:3a:8b:87:e0:2f:89:96:3e:1a:0c:5c:84:
22:d2:f3:61:87:e1:29:f9:d4:aa:35:29:7f:fc:7f:81:c8:06:
7c:fd:03:4d:70:05:f6:96:7f:33:3b:08:2e:f5:7c:56:ae:fc:
a4:ad:98:96:89:c8:8a:a4:d0:16:f8:9b:d7:3b:76:68:34:01:
14:ef:e7:f9:7c:e9:07:b1:d1:02:42:49:b0:70:9f:fd:53:6c:
45:bd:8b:5d:f4:b6:c0:9e:54:57:85:80:ad:59:f6:d7:f3:e8:
09:c8:d1:69:4a:f9:28:cc:12:e4:fe:0f:31:d4:c3:81:e8:2e:
46:47:92:c2:f3:c7:d8:a2:dc:40:ab:a3:69:b3:b7:35:21:a9:
8a:d9:9f:4f:05:3c:2e:66:4d:56:70:93:bf:f3:be:66:9c:ea:
b3:22:86:dd:ce:db:f5:ad:4c:16:18:06:59:87:cd:59:ec:36:
52:ca:01:a8:0a:88:b4:dd:a8:31:43:9c:55:ab:48:8e:f7:c8:
b5:16:36:ec:fd:81:5e:9f:ab:6c:cf:b9:fb:0f:5f:e4:03:73:
5d:b6:fe:eb:e0:2c:11:86:47:75:e4:e5:95:30:d3:2f:a4:69:
d3:43:8c:54:99:e0:35:f6:bd:70:eb:61:96:e0:77:8d:62:05:
82:a4:99:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaOgq/yDQ4zhwdW7xkqHUXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YTU1NWUxNDZiZTRhZTVmN2NjZmU1YTNjMTJkM2YyYTI1
NDNiMDUwHhcNMjUwNTAyMDEwMDUxWhcNMjUwNTAzMDEwMDUxWjAzMTEwLwYDVQQD
EyhmMDkyYjYzYzFjYjU1ZDYyYjkxNGNiZjRlZWUzNTk0ZTQ0Yjc3ODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBHPbWOCPxN3n4d4UBqNDpgpFqKM
X9OAC2w2/zpPrPOGx2vZGnGkeApiU12dp9cIu48hsC9mD+u/dpWhityedhZF1y+h
sylhY/V2XhyTC7iUO+s8qbMDDc4zHcJthGG+JrFZykRScR1ClEFm94jlsv+W6JVS
pry26LLSTlAZtpFKcpl/pIeGYCuNju1a49+uSQ5SNgAo0JkyD5DJFr68KGBcUsV3
dV/udqLhtrYg+1pX8eldFyaCGlFjdmMNKATDuGejNLdWk/E8UfYabzKN0aMQt2ez
xAbSTX2Jr6MX15zzNTc07SFArVdVkNGYw4LJm1I2Auw6vO5jCLwa4NZKUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCStjwctV1iuRTL9O7jWU5Et3gwMB8GA1UdIwQY
MBaAFDWlVeFGvkrl98z+WjwS0/KiVDsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81NDk3NDQtYmRkZS00MmU4LTg3YTgt
MDUxY2QzMGNiY2YxLzEvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81NDk3NDQtYmRkZS00MmU4LTg3YTgtMDUxY2QzMGNiY2Yx
LzEvTmFWVjRVYS1TdVgzelA1YVBCTFQ4cUpVT3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFI3gyEE
OouH4C+Jlj4aDFyEItLzYYfhKfnUqjUpf/x/gcgGfP0DTXAF9pZ/MzsILvV8Vq78
pK2YlonIiqTQFvib1zt2aDQBFO/n+XzpB7HRAkJJsHCf/VNsRb2LXfS2wJ5UV4WA
rVn21/PoCcjRaUr5KMwS5P4PMdTDgeguRkeSwvPH2KLcQKujabO3NSGpitmfTwU8
LmZNVnCTv/O+ZpzqsyKG3c7b9a1MFhgGWYfNWew2UsoBqAqItN2oMUOcVatIjvfI
tRY27P2BXp+rbM+5+w9f5ANzXbb+6+AsEYZHdeTllTDTL6Rp00OMVJngNfa9cOth
luB3jWIFgqSZ1w==
-----END CERTIFICATE-----
Generated at Fri May 2 12:03:18 2025 by rpki-client