Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: BCI+g9bfhEtPm37RrKAKELRkNws6CJvVZB5DalM5EIk=
Subject key identifier: E2:A8:FA:5D:40:6C:61:E1:77:7D:26:9A:60:73:54:D3:DA:A5:46:C9
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 019676B0AAAF39F513185094E9483D9B17C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 6E
Signing time: Sun 27 Apr 2025 10:00:11 +0000
Manifest this update: Sun 27 Apr 2025 10:00:11 +0000
Manifest next update: Mon 28 Apr 2025 10:00:11 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: 6NE/CL/E804GBXiyi3+EJt84VRl5+EMeOHHQQ72+03w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:aa:af:39:f5:13:18:50:94:e9:48:3d:9b:17:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Apr 27 10:00:11 2025 GMT
Not After : Apr 28 10:00:11 2025 GMT
Subject: CN=e2a8fa5d406c61e1777d269a607354d3daa546c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:d2:a1:8b:8e:db:61:6b:ce:c8:f3:06:39:
32:6a:f6:3c:b3:29:51:60:6b:19:93:42:19:ff:c6:
d6:5a:0d:0d:d0:e9:77:a8:36:64:72:da:43:f7:bc:
4b:11:10:8c:57:09:11:7a:de:49:d0:49:53:dd:4e:
70:9c:50:39:ea:b0:d8:36:a5:19:aa:13:42:1e:85:
ce:d5:e8:98:c2:2c:30:f9:26:69:7d:83:40:cf:b5:
22:a4:bd:30:4a:65:cf:8b:57:a1:56:88:1d:41:03:
79:72:46:23:89:f0:e7:dd:0a:a4:07:e1:1c:b2:5e:
30:6e:6a:72:65:7a:a7:35:b7:3d:cf:93:02:45:62:
7b:f4:22:a5:5b:b2:18:57:c2:74:07:e0:16:76:78:
0d:27:77:32:a4:36:59:c5:56:4b:d9:e5:97:68:e8:
fe:28:47:ef:52:41:55:42:65:5e:ef:9f:09:ff:1e:
36:f3:61:fa:43:ec:de:35:ea:88:e0:4d:af:da:ae:
c6:8c:38:b6:d5:9b:9b:28:e4:2d:16:cc:eb:81:04:
36:30:2b:7e:e0:9f:40:9d:32:ff:c5:75:fb:57:82:
9d:ef:0b:5f:be:9d:de:89:e1:c5:f8:bc:66:61:c5:
2a:f7:ae:33:5d:7c:02:7f:78:84:c3:60:42:7a:bc:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A8:FA:5D:40:6C:61:E1:77:7D:26:9A:60:73:54:D3:DA:A5:46:C9
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:df:cc:7a:f4:2b:2b:97:12:3a:c6:0b:b7:76:00:ba:48:81:
8d:85:0d:7e:3f:d4:d2:f6:54:95:00:77:08:31:80:dd:f8:67:
ae:45:ec:02:9b:92:31:70:1f:3d:2c:c5:07:67:67:4a:ed:07:
bc:88:69:c7:ca:12:3e:f9:7c:e7:c0:19:ee:8a:dd:9f:ec:9e:
48:56:4d:1b:bd:29:60:f8:7e:ea:54:4e:15:76:60:cc:98:a4:
1f:b3:70:57:30:83:b0:e6:93:96:63:78:42:16:3b:32:7a:82:
8e:0a:40:1a:59:3a:26:e9:de:17:cb:50:be:a9:ec:3e:11:52:
ab:1b:26:06:83:0a:a7:b6:40:88:5a:f8:e4:c6:92:f5:e7:1c:
fe:f6:1e:62:33:50:cc:1a:a6:b2:6a:2a:b6:3f:42:89:89:1c:
8e:97:c2:c0:71:40:21:09:32:24:d6:68:32:fa:5f:28:7d:5c:
36:52:df:ee:6c:7e:a4:63:4c:61:4c:1a:69:14:b3:b0:17:9e:
e0:dc:02:9b:24:c8:ed:75:50:8d:2e:5d:47:47:bf:bf:5b:c2:
34:d0:c5:6f:b0:4d:f0:d5:a3:21:b2:a1:52:5a:0b:7d:0a:f6:
ed:8e:e7:fd:81:f8:86:bc:9e:2e:9c:98:5c:25:41:b2:42:fc:
cd:e3:aa:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sKqvOfUTGFCU6Ug9mxfHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZjFkNTY3NmJkZDcwNDMzNGIyZGIzNGNhOTA0ZDc3Y2Rk
MmJhY2EwHhcNMjUwNDI3MTAwMDExWhcNMjUwNDI4MTAwMDExWjAzMTEwLwYDVQQD
EyhlMmE4ZmE1ZDQwNmM2MWUxNzc3ZDI2OWE2MDczNTRkM2RhYTU0NmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFzSoYuO22FrzsjzBjkyavY8sylR
YGsZk0IZ/8bWWg0N0Ol3qDZkctpD97xLERCMVwkRet5J0ElT3U5wnFA56rDYNqUZ
qhNCHoXO1eiYwiww+SZpfYNAz7UipL0wSmXPi1ehVogdQQN5ckYjifDn3QqkB+Ec
sl4wbmpyZXqnNbc9z5MCRWJ79CKlW7IYV8J0B+AWdngNJ3cypDZZxVZL2eWXaOj+
KEfvUkFVQmVe758J/x4282H6Q+zeNeqI4E2v2q7GjDi21ZubKOQtFszrgQQ2MCt+
4J9AnTL/xXX7V4Kd7wtfvp3eieHF+LxmYcUq964zXXwCf3iEw2BCerxSCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKo+l1AbGHhd30mmmBzVNPapUbJMB8GA1UdIwQY
MBaAFDbx1Wdr3XBDNLLbNMqQTXfN0rrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80ZDg2NWMtNzBmNS00NGI5LTg4YTYt
ZWE4YWZlNjc4OTcwLzEvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS80ZDg2NWMtNzBmNS00NGI5LTg4YTYtZWE4YWZlNjc4OTcw
LzEvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAct/MevQr
K5cSOsYLt3YAukiBjYUNfj/U0vZUlQB3CDGA3fhnrkXsApuSMXAfPSzFB2dnSu0H
vIhpx8oSPvl858AZ7ordn+yeSFZNG70pYPh+6lROFXZgzJikH7NwVzCDsOaTlmN4
QhY7MnqCjgpAGlk6JuneF8tQvqnsPhFSqxsmBoMKp7ZAiFr45MaS9ecc/vYeYjNQ
zBqmsmoqtj9CiYkcjpfCwHFAIQkyJNZoMvpfKH1cNlLf7mx+pGNMYUwaaRSzsBee
4NwCmyTI7XVQjS5dR0e/v1vCNNDFb7BN8NWjIbKhUloLfQr27Y7n/YH4hryeLpyY
XCVBskL8zeOqeA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:45:39 2025 by rpki-client