Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
File: Nv7S1etbPFJmq6phfJYHA8VdB4U.mft (raw, json)
Hash identifier: nV1OgJ+IngI6k7yRbyqbJ08YHB3RWB8vxVGFiw/EaoQ=
Subject key identifier: FF:73:C0:42:70:71:5F:08:5E:DF:EF:58:FA:CA:D2:26:79:A4:FF:79
Authority key identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
Certificate issuer: /CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Certificate serial: 0196846CB17C2930542333EF8B030013F41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 02:00:37 +0000
Manifest this update: Wed 30 Apr 2025 02:00:37 +0000
Manifest next update: Thu 01 May 2025 02:00:37 +0000
Files and hashes: 1: 8_VDYxYfQ3xVlWP15Ma3Tw9vIZY.roa (hash: p9ujQLih3FUP7R7lN/a7zNvyvlVnBJRzQXMR2O0trWo=)
2: Nv7S1etbPFJmq6phfJYHA8VdB4U.crl (hash: NpRDt47Ws6L8/fwccMicfNSXNYTSoWtHuHFrUnyzqKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:b1:7c:29:30:54:23:33:ef:8b:03:00:13:f4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Validity
Not Before: Apr 30 02:00:37 2025 GMT
Not After : May 1 02:00:37 2025 GMT
Subject: CN=ff73c04270715f085edfef58facad22679a4ff79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:40:b6:27:26:b9:5c:a7:34:24:12:11:3d:
f0:a2:87:90:3f:c3:06:80:15:60:16:ef:26:ae:ee:
63:9f:2f:c3:23:6a:97:34:6a:15:5e:d8:cf:8a:3e:
d6:50:3e:40:15:43:17:cf:ff:50:fe:b7:cb:74:40:
aa:5a:16:b3:94:3a:06:c1:32:1b:08:5b:ec:56:87:
bc:15:2b:1d:47:2e:23:b3:d7:a4:d5:e3:1b:fc:fa:
41:fd:7a:40:c2:16:2b:7b:0e:95:9d:47:96:32:3d:
c8:1b:b8:14:96:45:01:d3:42:a8:9c:b2:cd:e3:04:
ce:05:d6:ae:1b:c0:8f:6d:4d:3a:7e:d3:e6:f5:44:
86:44:7d:7d:a1:aa:54:23:57:0c:f2:01:fb:b2:72:
22:f0:07:90:5e:b1:14:e1:73:88:ce:34:68:8e:e9:
76:64:c7:49:f2:ba:6c:55:ef:eb:87:be:d4:a2:76:
46:03:bf:99:09:a2:81:70:cc:5b:10:5f:76:46:3c:
71:42:81:75:cb:a0:b2:6a:52:99:52:8b:2a:fa:07:
28:a2:0f:dd:ee:1b:33:6c:76:62:41:94:5e:ef:03:
10:d1:d1:7a:f8:fe:b7:70:76:d6:fb:fb:f0:02:73:
04:13:61:8f:c3:c2:48:33:c9:95:c9:c2:b5:0f:f2:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:C0:42:70:71:5F:08:5E:DF:EF:58:FA:CA:D2:26:79:A4:FF:79
X509v3 Authority Key Identifier:
keyid:36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2e:fa:44:4c:fb:cb:b1:93:71:57:86:12:d0:c9:ce:12:5d:
80:32:d1:f8:c6:ea:65:ea:e8:99:91:d0:a7:b5:db:6c:2d:00:
09:3a:c5:3f:7b:25:0f:0a:5c:42:40:65:c6:c2:2b:29:a7:f4:
e5:4c:b7:64:94:30:b7:ee:9e:7b:d7:09:a7:2c:4d:3e:b3:7a:
a8:16:37:ea:4d:fd:d2:3a:3c:ca:04:2c:fd:91:68:41:08:cd:
10:43:e2:ae:fa:78:de:11:58:86:26:b6:e9:96:10:04:b3:52:
b8:19:fa:37:46:f5:b4:00:f4:4f:99:4a:c8:59:ac:e8:98:b9:
a1:b8:bf:4c:d5:7b:0f:34:9e:8d:a6:be:a2:2d:3a:5d:19:f6:
83:c3:c0:07:f6:65:0d:ac:a7:ba:92:5e:88:9b:fb:b6:da:65:
b3:6c:c6:b4:b7:58:96:71:b2:96:b3:2c:19:d8:dd:cd:18:85:
36:75:29:23:ed:a0:0f:39:12:f1:84:00:74:b4:07:d5:7b:86:
10:c2:88:98:07:60:f4:11:b3:1a:c8:63:83:ac:ce:c2:af:f6:
fd:76:b3:f2:df:d3:a9:e9:f5:ae:9c:7d:f3:9d:e2:1a:65:a5:
07:83:2f:db:f9:07:fa:31:3a:0d:42:f5:3d:85:67:43:e3:a3:
e3:c7:c3:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEbLF8KTBUIzPviwMAE/QfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZmVkMmQ1ZWI1YjNjNTI2NmFiYWE2MTdjOTYwNzAzYzU1
ZDA3ODUwHhcNMjUwNDMwMDIwMDM3WhcNMjUwNTAxMDIwMDM3WjAzMTEwLwYDVQQD
EyhmZjczYzA0MjcwNzE1ZjA4NWVkZmVmNThmYWNhZDIyNjc5YTRmZjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+NAticmuVynNCQSET3wooeQP8MG
gBVgFu8mru5jny/DI2qXNGoVXtjPij7WUD5AFUMXz/9Q/rfLdECqWhazlDoGwTIb
CFvsVoe8FSsdRy4js9ek1eMb/PpB/XpAwhYrew6VnUeWMj3IG7gUlkUB00KonLLN
4wTOBdauG8CPbU06ftPm9USGRH19oapUI1cM8gH7snIi8AeQXrEU4XOIzjRojul2
ZMdJ8rpsVe/rh77UonZGA7+ZCaKBcMxbEF92RjxxQoF1y6CyalKZUosq+gcoog/d
7hszbHZiQZRe7wMQ0dF6+P63cHbW+/vwAnMEE2GPw8JIM8mVycK1D/KHYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9zwEJwcV8IXt/vWPrK0iZ5pP95MB8GA1UdIwQY
MBaAFDb+0tXrWzxSZquqYXyWBwPFXQeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnY3UzFldGJQRkptcTZwaGZKWUhBOFZkQjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81MzI0YmQtNzkyNi00NTEzLWJkMWYt
NjhlZjMyMzhhNzJlLzEvTnY3UzFldGJQRkptcTZwaGZKWUhBOFZkQjRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81MzI0YmQtNzkyNi00NTEzLWJkMWYtNjhlZjMyMzhhNzJl
LzEvTnY3UzFldGJQRkptcTZwaGZKWUhBOFZkQjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoi76REz7
y7GTcVeGEtDJzhJdgDLR+MbqZeromZHQp7XbbC0ACTrFP3slDwpcQkBlxsIrKaf0
5Uy3ZJQwt+6ee9cJpyxNPrN6qBY36k390jo8ygQs/ZFoQQjNEEPirvp43hFYhia2
6ZYQBLNSuBn6N0b1tAD0T5lKyFms6Ji5obi/TNV7DzSejaa+oi06XRn2g8PAB/Zl
DaynupJeiJv7ttpls2zGtLdYlnGylrMsGdjdzRiFNnUpI+2gDzkS8YQAdLQH1XuG
EMKImAdg9BGzGshjg6zOwq/2/Xaz8t/Tqen1rpx9853iGmWlB4Mv2/kH+jE6DUL1
PYVnQ+Oj48fD9Q==
-----END CERTIFICATE-----
Generated at Wed Apr 30 10:15:36 2025 by rpki-client