Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
File: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft (raw, json)
Hash identifier: s+U9fuCQHNEkbJmSDJfj9B34DlsbbSbXLUrV7sP0+Ws=
Subject key identifier: E9:BE:47:EC:27:E8:61:8C:D1:46:2A:11:C3:C7:38:F1:05:93:76:A6
Authority key identifier: 35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
Certificate issuer: /CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Certificate serial: 01968F952660830BA81E8999D39B2E86D60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
Manifest number: 02E7
Signing time: Fri 02 May 2025 06:00:38 +0000
Manifest this update: Fri 02 May 2025 06:00:38 +0000
Manifest next update: Sat 03 May 2025 06:00:38 +0000
Files and hashes: 1: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl (hash: qn0jR/EGLFQd3mmHfFWm6XLKMQFnfakbQUJ2+o/SqPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:26:60:83:0b:a8:1e:89:99:d3:9b:2e:86:d6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Validity
Not Before: May 2 06:00:38 2025 GMT
Not After : May 3 06:00:38 2025 GMT
Subject: CN=e9be47ec27e8618cd1462a11c3c738f1059376a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:17:9b:da:33:06:7a:07:41:82:f6:fa:5c:
f3:68:bd:0e:c9:90:bb:71:fc:91:a4:65:ff:01:17:
4f:12:af:b0:63:6b:55:c3:ea:7f:6a:1e:a5:86:36:
45:04:f9:c4:33:c6:f4:af:be:eb:23:0c:ec:f4:00:
8c:fa:8e:2f:eb:bd:6a:3c:5f:22:77:31:88:eb:0c:
58:e3:1b:a4:29:33:ea:f3:97:7c:94:78:ff:5e:fa:
71:57:53:52:3c:07:7a:30:35:32:12:1c:db:78:26:
89:cd:40:47:a2:38:da:2b:19:e4:67:95:a5:43:bf:
b2:4f:87:22:5a:03:81:4c:de:74:df:e9:b4:ff:75:
b9:e3:ef:70:c5:0c:e6:7a:ec:38:99:65:50:da:a9:
c6:70:a1:0f:a3:7e:63:c5:19:c2:94:ef:7e:23:97:
2e:38:49:a4:ea:80:30:4c:e6:cf:7a:a1:94:d6:74:
af:be:a7:b5:6b:5e:ac:54:e3:a4:bc:0f:b0:06:6b:
da:65:0f:1d:6d:fa:73:0d:77:56:9f:ad:ff:72:09:
7f:b5:95:39:d8:f2:98:e7:85:2f:c6:ce:c3:2d:eb:
a8:7c:8c:ea:40:f8:c0:43:d4:c9:e6:3f:97:e9:57:
3f:85:c3:ab:5f:fb:fd:2b:c8:c3:4a:29:ab:a6:24:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BE:47:EC:27:E8:61:8C:D1:46:2A:11:C3:C7:38:F1:05:93:76:A6
X509v3 Authority Key Identifier:
keyid:35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:47:00:d1:4a:18:d2:32:6e:bc:09:a4:c2:b5:99:a4:62:64:
74:ff:1f:68:86:1f:37:8b:6e:88:8e:ad:05:0f:13:ed:72:0e:
07:ce:46:6e:e0:79:50:8e:78:7a:d4:f3:6c:b3:92:54:3b:06:
3f:56:f2:bb:19:57:69:c1:b7:78:e6:ff:c6:4d:f4:dd:9f:7d:
23:bd:b3:f7:c1:98:9e:a8:75:a7:78:3f:ec:d2:0f:4a:ff:69:
09:80:1a:79:52:fe:ee:eb:02:c7:fd:09:5e:bd:ef:12:9e:b9:
91:40:f2:20:ac:d7:06:01:0e:13:e1:45:f5:42:d2:55:4c:4c:
26:89:31:c8:0f:de:4b:9a:68:3d:0d:34:54:2c:80:fa:e7:d7:
50:ff:12:12:18:e0:3b:c9:51:f0:67:33:26:ea:4b:35:99:3e:
de:18:59:c3:86:ea:28:77:ce:b1:e6:19:5b:e3:04:14:67:3d:
65:6f:bd:77:7b:45:4d:9b:7d:01:bb:5f:43:85:60:0a:0f:29:
1c:bd:48:85:4d:fa:2e:5a:75:f2:08:a3:5a:10:a9:61:11:a6:
a6:f1:24:69:5e:2a:a9:35:2e:21:f2:1e:a1:29:9f:78:9b:40:
5c:ff:1a:76:13:e7:28:12:10:9c:fd:ea:85:63:d8:09:18:c5:
71:15:5c:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPlSZggwuoHomZ05suhtYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZmM3NGI1Nzk4YzcwNWIzMGJkMGVhZmE5OGZmZDNkNWJk
NDIyYjAwHhcNMjUwNTAyMDYwMDM4WhcNMjUwNTAzMDYwMDM4WjAzMTEwLwYDVQQD
EyhlOWJlNDdlYzI3ZTg2MThjZDE0NjJhMTFjM2M3MzhmMTA1OTM3NmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hUXm9ozBnoHQYL2+lzzaL0OyZC7
cfyRpGX/ARdPEq+wY2tVw+p/ah6lhjZFBPnEM8b0r77rIwzs9ACM+o4v671qPF8i
dzGI6wxY4xukKTPq85d8lHj/XvpxV1NSPAd6MDUyEhzbeCaJzUBHojjaKxnkZ5Wl
Q7+yT4ciWgOBTN503+m0/3W54+9wxQzmeuw4mWVQ2qnGcKEPo35jxRnClO9+I5cu
OEmk6oAwTObPeqGU1nSvvqe1a16sVOOkvA+wBmvaZQ8dbfpzDXdWn63/cgl/tZU5
2PKY54Uvxs7DLeuofIzqQPjAQ9TJ5j+X6Vc/hcOrX/v9K8jDSimrpiSMuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOm+R+wn6GGM0UYqEcPHOPEFk3amMB8GA1UdIwQY
MBaAFDX8dLV5jHBbML0Or6mP/T1b1CKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmZ4MHRYbU1jRnN3dlE2dnFZXzlQVnZVSXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xMTVjZDAtMDhkZC00N2FjLTk4NDgt
Y2RkY2QxODM1NTE2LzEvTmZ4MHRYbU1jRnN3dlE2dnFZXzlQVnZVSXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xMTVjZDAtMDhkZC00N2FjLTk4NDgtY2RkY2QxODM1NTE2
LzEvTmZ4MHRYbU1jRnN3dlE2dnFZXzlQVnZVSXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEcA0UoY
0jJuvAmkwrWZpGJkdP8faIYfN4tuiI6tBQ8T7XIOB85GbuB5UI54etTzbLOSVDsG
P1byuxlXacG3eOb/xk303Z99I72z98GYnqh1p3g/7NIPSv9pCYAaeVL+7usCx/0J
Xr3vEp65kUDyIKzXBgEOE+FF9ULSVUxMJokxyA/eS5poPQ00VCyA+ufXUP8SEhjg
O8lR8GczJupLNZk+3hhZw4bqKHfOseYZW+MEFGc9ZW+9d3tFTZt9AbtfQ4VgCg8p
HL1IhU36Llp18gijWhCpYRGmpvEkaV4qqTUuIfIeoSmfeJtAXP8adhPnKBIQnP3q
hWPYCRjFcRVc9g==
-----END CERTIFICATE-----
Generated at Fri May 2 16:28:36 2025 by rpki-client