Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: 3jV9wGuEc/4jJfpP/35OPMMYrBGGsZXh/I8vURtDXq8=
Subject key identifier: 56:8C:CB:99:C1:CB:BE:14:5D:7C:AF:4D:75:52:86:6D:4E:DE:81:88
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019687DB6A252DC4ED82219BDCDFE87536C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 18:00:25 +0000
Manifest this update: Wed 30 Apr 2025 18:00:25 +0000
Manifest next update: Thu 01 May 2025 18:00:25 +0000
Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: HTV48EkWR6fNCecJ+aSQicazxQhIuWjIq9R0QN63nXM=)
2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=)
3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:6a:25:2d:c4:ed:82:21:9b:dc:df:e8:75:36:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Apr 30 18:00:25 2025 GMT
Not After : May 1 18:00:25 2025 GMT
Subject: CN=568ccb99c1cbbe145d7caf4d7552866d4ede8188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:f8:a7:09:bd:1c:f5:7d:56:02:1d:03:14:
36:6e:96:24:0c:49:b0:ee:d6:a3:85:95:5d:c3:66:
3b:35:1f:fe:38:b4:96:da:86:da:e4:6b:e6:29:87:
9a:fb:a2:0c:6a:48:79:c9:94:a7:5d:4c:11:29:d4:
32:ec:87:0a:7a:37:ed:45:78:23:a9:0d:f5:d4:b8:
d7:08:7b:fe:f9:9f:2a:af:2e:b1:a4:16:8f:6e:5c:
17:e5:4e:d1:0c:fb:29:e5:07:6a:fa:13:91:88:1f:
1d:f1:91:88:5d:d3:79:ab:43:3b:aa:e9:c3:b0:8d:
97:f9:77:06:ce:19:8a:53:d8:10:9f:f1:94:ff:f9:
de:40:03:85:57:b5:9c:3a:4c:72:1b:b5:9d:df:8e:
8f:97:fc:67:78:aa:5e:c9:0b:db:58:cf:af:01:17:
41:91:ba:af:28:af:f3:26:eb:91:47:bd:46:6f:da:
c3:79:91:43:a7:b3:ab:9c:80:f0:3c:23:6b:ad:4d:
e5:07:09:e8:e4:b9:28:fb:a7:6e:9e:81:72:2c:05:
54:b7:58:f8:b3:b6:a0:e0:e9:7f:06:b1:39:e2:b8:
d0:dd:cd:10:39:32:af:cc:65:d8:48:15:af:d8:70:
63:57:a0:7f:c6:e7:51:21:92:c8:cf:0b:50:0b:b7:
55:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8C:CB:99:C1:CB:BE:14:5D:7C:AF:4D:75:52:86:6D:4E:DE:81:88
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e5:9d:01:12:74:ea:bf:10:5c:ee:0f:eb:0a:6d:09:d7:fb:
ce:83:7a:78:b1:a0:2b:36:e4:58:7d:62:07:5f:c3:fc:ab:a3:
e6:13:06:6e:14:57:dd:20:86:4d:1f:f1:3d:ce:bf:5d:fe:03:
cc:78:04:b4:ed:8e:6c:8b:a2:39:a6:3a:5e:14:f1:0c:6f:1c:
02:a9:fa:75:2a:26:28:a2:78:25:77:e5:a0:bd:43:44:7f:93:
93:9f:a2:78:cb:4a:b1:3a:2d:43:8c:37:c8:99:a0:19:85:af:
97:ab:db:c5:e0:90:1f:f6:48:93:af:26:16:7d:cf:0e:72:47:
40:40:58:1d:de:20:29:92:ed:21:83:88:59:ec:2e:f6:36:fc:
0b:1b:41:f9:17:74:8c:bc:9a:13:5c:58:38:a7:08:80:99:45:
96:09:2e:03:a2:84:03:2c:9d:da:d5:97:2d:9d:bc:97:6b:20:
f1:be:63:69:fd:8b:f6:1a:36:f9:76:1a:7d:42:2a:64:9f:c5:
39:2e:d2:db:19:54:73:86:ca:55:1e:6d:98:17:4d:4c:a0:c7:
f4:62:6d:4f:c3:88:f6:02:57:b2:28:ed:da:b0:04:ce:cc:cf:
24:cc:ad:af:6c:d8:b5:de:a5:e1:ad:07:98:f9:a6:1c:f4:3b:
6d:ee:32:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaH22olLcTtgiGb3N/odTbDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj
MDgxOTAwHhcNMjUwNDMwMTgwMDI1WhcNMjUwNTAxMTgwMDI1WjAzMTEwLwYDVQQD
Eyg1NjhjY2I5OWMxY2JiZTE0NWQ3Y2FmNGQ3NTUyODY2ZDRlZGU4MTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi74pwm9HPV9VgIdAxQ2bpYkDEmw
7tajhZVdw2Y7NR/+OLSW2oba5GvmKYea+6IMakh5yZSnXUwRKdQy7IcKejftRXgj
qQ311LjXCHv++Z8qry6xpBaPblwX5U7RDPsp5Qdq+hORiB8d8ZGIXdN5q0M7qunD
sI2X+XcGzhmKU9gQn/GU//neQAOFV7WcOkxyG7Wd346Pl/xneKpeyQvbWM+vARdB
kbqvKK/zJuuRR71Gb9rDeZFDp7OrnIDwPCNrrU3lBwno5Lko+6dunoFyLAVUt1j4
s7ag4Ol/BrE54rjQ3c0QOTKvzGXYSBWv2HBjV6B/xudRIZLIzwtQC7dV/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaMy5nBy74UXXyvTXVShm1O3oGIMB8GA1UdIwQY
MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt
MzkzNjk2ODlmMjdlLzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl
LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPuWdARJ0
6r8QXO4P6wptCdf7zoN6eLGgKzbkWH1iB1/D/Kuj5hMGbhRX3SCGTR/xPc6/Xf4D
zHgEtO2ObIuiOaY6XhTxDG8cAqn6dSomKKJ4JXfloL1DRH+Tk5+ieMtKsTotQ4w3
yJmgGYWvl6vbxeCQH/ZIk68mFn3PDnJHQEBYHd4gKZLtIYOIWewu9jb8CxtB+Rd0
jLyaE1xYOKcIgJlFlgkuA6KEAyyd2tWXLZ28l2sg8b5jaf2L9ho2+XYafUIqZJ/F
OS7S2xlUc4bKVR5tmBdNTKDH9GJtT8OI9gJXsijt2rAEzszPJMytr2zYtd6l4a0H
mPmmHPQ7be4yqA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:34:05 2025 by rpki-client