Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: A68qPEcXjTvuVcabfq4OwnWRZ3RmA7OF3+oH4LcDrhY=
Subject key identifier: 2F:C9:72:A4:CD:58:DD:BF:CF:A1:81:55:B8:DB:AE:F3:27:91:9D:71
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 01968F9566FEC87717AAD242C6FD6885DC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 0908
Signing time: Fri 02 May 2025 06:00:55 +0000
Manifest this update: Fri 02 May 2025 06:00:55 +0000
Manifest next update: Sat 03 May 2025 06:00:55 +0000
Files and hashes: 1: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: WJcbyuPmZK28Kho6v8DsIfeCslxcGsjCt7lDi/90UQI=)
2: O5DiGBxXgxkBCTZNGMQgecNF7aI.roa (hash: 0ahwaWUfVDJYD2wF/x/njO0sF76KorNYpLUQSfP42Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:66:fe:c8:77:17:aa:d2:42:c6:fd:68:85:dc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: May 2 06:00:55 2025 GMT
Not After : May 3 06:00:55 2025 GMT
Subject: CN=2fc972a4cd58ddbfcfa18155b8dbaef327919d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:cb:f4:39:77:d5:ff:99:8d:ae:47:be:56:
15:5f:b7:43:35:d0:7a:ea:e8:22:5e:29:28:c6:67:
17:38:6a:00:d7:ce:cd:b4:76:e0:d9:09:00:22:5f:
a7:f6:8c:c0:2f:ab:4e:2c:e8:57:78:6c:9a:ab:9c:
05:4e:a1:55:05:29:14:a4:c5:35:2c:f6:ac:8f:00:
0d:72:b6:e8:2f:ac:f1:50:74:08:4a:90:09:ea:72:
f2:5c:97:87:1b:a6:78:f0:14:21:ce:7d:c8:fb:9c:
f4:7f:26:6d:6d:bb:e3:5c:b1:72:49:f7:77:29:4f:
a8:cc:de:f7:f4:6d:97:09:be:61:0f:72:b9:41:3c:
ad:03:75:e1:24:75:25:de:e0:fd:71:56:b0:f9:08:
61:9c:70:f2:75:47:5d:0a:cf:f2:cf:dd:22:dd:7c:
87:0c:91:0c:ad:55:2d:48:df:9d:06:b7:66:b2:c4:
80:13:82:2a:ce:ef:89:92:f1:55:5f:a5:77:4a:e4:
2b:52:8a:39:8b:64:f2:5e:58:8e:c2:9b:dc:94:2a:
ce:29:f9:d0:51:2e:bf:b9:23:b0:81:f9:09:bb:2d:
c8:09:81:a1:b6:4d:5b:11:a3:00:2a:5b:94:e5:20:
df:9e:42:0b:32:90:85:6d:5b:23:d7:75:ba:bf:06:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C9:72:A4:CD:58:DD:BF:CF:A1:81:55:B8:DB:AE:F3:27:91:9D:71
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:af:da:41:82:6c:a8:43:d4:1d:fe:9b:a1:9e:48:df:1f:8e:
9e:52:19:8b:bb:0f:29:ba:84:f0:3a:06:a8:2c:b8:23:97:47:
e0:aa:b1:72:3c:ba:a0:52:27:f7:12:bb:f4:e9:e3:87:a9:9e:
95:92:d5:6a:90:e4:a2:18:2f:c4:b2:75:05:da:41:aa:ca:b3:
64:39:eb:83:a5:5f:9c:38:3e:57:12:2a:f9:22:98:84:97:d6:
16:dc:d0:16:46:ff:48:01:75:cb:fe:cd:e5:c1:ed:fe:7b:0f:
bf:73:56:c1:d3:a8:ee:cf:6a:7f:26:72:29:1f:73:90:f9:f0:
95:b4:96:81:80:69:6c:6b:1f:c1:96:05:a9:8f:c9:0f:0d:a7:
50:06:3c:23:3f:8e:9f:48:52:ec:8c:42:5c:0c:68:a4:0a:72:
72:28:fd:ad:f6:49:e9:5c:e3:55:95:4e:4d:0d:ad:e9:af:6e:
e1:85:bb:1a:db:83:70:9d:90:51:a0:32:b2:0a:d2:89:2d:95:
26:81:2b:5c:60:f4:f7:8c:76:0a:4e:49:ce:4f:da:4a:6d:25:
12:4e:77:97:52:92:9c:d3:18:47:d9:8e:12:e0:96:01:11:0d:
26:b8:1c:b3:f6:ab:3b:6f:98:6a:c0:5a:ef:6a:3d:8e:10:68:
30:c7:55:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPlWb+yHcXqtJCxv1ohdw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDc5MTNjZTNhMTE1ODhiNTljM2M5ZjlkYTlmZjc3ZjI0
OGFjMTIwHhcNMjUwNTAyMDYwMDU1WhcNMjUwNTAzMDYwMDU1WjAzMTEwLwYDVQQD
EygyZmM5NzJhNGNkNThkZGJmY2ZhMTgxNTViOGRiYWVmMzI3OTE5ZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3/L9Dl31f+Zja5HvlYVX7dDNdB6
6ugiXikoxmcXOGoA187NtHbg2QkAIl+n9ozAL6tOLOhXeGyaq5wFTqFVBSkUpMU1
LPasjwANcrboL6zxUHQISpAJ6nLyXJeHG6Z48BQhzn3I+5z0fyZtbbvjXLFySfd3
KU+ozN739G2XCb5hD3K5QTytA3XhJHUl3uD9cVaw+QhhnHDydUddCs/yz90i3XyH
DJEMrVUtSN+dBrdmssSAE4Iqzu+JkvFVX6V3SuQrUoo5i2TyXliOwpvclCrOKfnQ
US6/uSOwgfkJuy3ICYGhtk1bEaMAKluU5SDfnkILMpCFbVsj13W6vwYaKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/JcqTNWN2/z6GBVbjbrvMnkZ1xMB8GA1UdIwQY
MBaAFDVHkTzjoRWItZw8n52p/3fySKwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wY2RhNzQtYzliYi00ZDkyLTllNmYt
Mzg5OTc4MjFmZmNlLzEvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wY2RhNzQtYzliYi00ZDkyLTllNmYtMzg5OTc4MjFmZmNl
LzEvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgq/aQYJs
qEPUHf6boZ5I3x+OnlIZi7sPKbqE8DoGqCy4I5dH4Kqxcjy6oFIn9xK79Onjh6me
lZLVapDkohgvxLJ1BdpBqsqzZDnrg6VfnDg+VxIq+SKYhJfWFtzQFkb/SAF1y/7N
5cHt/nsPv3NWwdOo7s9qfyZyKR9zkPnwlbSWgYBpbGsfwZYFqY/JDw2nUAY8Iz+O
n0hS7IxCXAxopApycij9rfZJ6VzjVZVOTQ2t6a9u4YW7GtuDcJ2QUaAysgrSiS2V
JoErXGD094x2Ck5Jzk/aSm0lEk53l1KSnNMYR9mOEuCWARENJrgcs/arO2+YasBa
72o9jhBoMMdVuQ==
-----END CERTIFICATE-----
Generated at Fri May 2 11:12:00 2025 by rpki-client