Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
File: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json)
Hash identifier: OxD5sUQfC5PLqKdxyOZltoxFJso7B9Qbr5VcqS4hpps=
Subject key identifier: EA:B3:37:45:67:A0:5B:E0:AD:0A:F7:BD:0A:FA:87:F4:4F:08:7C:AA
Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Certificate serial: 019686FFFA953F6ED99C7DBBB44BB7BC02EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 14:00:44 +0000
Manifest this update: Wed 30 Apr 2025 14:00:44 +0000
Manifest next update: Thu 01 May 2025 14:00:44 +0000
Files and hashes: 1: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: fRmg3c+yjeRsaPtIDk53id+McW0SaJojKbuybhtOVc0=)
2: Tz8QjBgBmzpa68NzWLRe2iAGU-U.roa (hash: juEtxBf0oAaQHOnDE0wzOzsnnb3wMIZXnN/0qajABas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:fa:95:3f:6e:d9:9c:7d:bb:b4:4b:b7:bc:02:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Validity
Not Before: Apr 30 14:00:44 2025 GMT
Not After : May 1 14:00:44 2025 GMT
Subject: CN=eab3374567a05be0ad0af7bd0afa87f44f087caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a4:0e:2b:73:c8:f3:6f:d3:58:1c:3c:67:77:
7e:87:27:4c:a4:ee:e8:12:76:43:d0:96:46:6e:0f:
35:ee:29:dc:c0:4a:0b:a0:ca:e3:f3:d5:aa:32:52:
d6:5f:65:1f:e2:6d:4f:95:6f:15:5a:b8:12:03:d0:
d5:e8:df:8e:d1:c4:42:53:42:1f:13:66:01:04:90:
1e:95:1f:a9:b5:ef:0d:9d:35:ba:ca:6b:d2:af:32:
c8:34:00:91:b8:1c:76:dc:e2:2f:97:5d:9b:ad:4b:
fe:15:12:55:cd:96:9a:eb:48:d8:9e:3b:cf:a1:8e:
7c:5e:00:d9:ec:88:63:ec:f7:73:c6:2d:81:97:eb:
06:6b:d4:05:17:4d:40:23:74:d0:5c:6d:78:ae:b6:
57:16:80:d8:6d:a2:77:83:43:93:a5:ad:35:54:4c:
be:8d:57:b5:88:9f:4b:0c:d0:d5:cc:e1:b9:74:25:
03:0d:29:77:91:1d:11:fe:d1:b3:ba:d0:22:9b:15:
0a:81:a0:26:a8:f7:39:9b:62:64:ba:53:f1:0a:24:
4b:77:05:96:44:56:73:be:b4:64:15:fd:c4:f3:b9:
40:10:c0:55:3b:19:f6:69:e2:5f:23:8b:a4:6f:bd:
95:a2:ed:60:96:4b:6b:2f:ee:7c:2f:cb:be:b5:6c:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B3:37:45:67:A0:5B:E0:AD:0A:F7:BD:0A:FA:87:F4:4F:08:7C:AA
X509v3 Authority Key Identifier:
keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b8:46:c6:d5:04:c8:18:f3:16:a1:38:11:50:28:c1:79:ed:
6a:6e:8b:17:53:34:10:df:1e:a5:2d:2e:1a:ac:86:24:82:25:
b4:fd:3f:f4:53:0d:e0:f5:45:25:f4:7c:f2:23:4b:f3:04:8d:
a5:f8:c1:4c:6f:a0:4a:b0:7a:68:7e:1e:86:06:61:a8:3b:eb:
85:37:64:aa:cd:aa:88:90:3e:99:be:b7:e5:51:5f:40:62:45:
89:0c:e5:40:0e:62:bd:b4:20:ba:45:21:b2:9c:4f:52:59:bd:
77:10:a7:dc:09:e7:80:dc:5f:10:05:d8:55:a1:81:f1:25:f1:
63:34:34:d2:1e:c5:44:63:5e:a1:a2:43:46:76:59:37:a8:f9:
00:72:76:f3:29:34:b9:48:92:70:2c:fe:a3:9b:04:cf:fb:e9:
11:ea:9d:2d:aa:ae:36:76:e1:0d:5e:92:c1:b0:8e:a9:f9:69:
a5:7e:de:0a:49:e8:53:bc:41:ad:cd:da:c4:b9:ff:ea:4d:94:
65:9c:77:17:f5:c2:d6:ed:cc:6f:76:66:66:aa:00:45:f6:70:
99:5b:52:5f:68:7c:ef:f7:a5:d1:3d:28:af:78:f5:b5:a2:82:
2c:1b:f9:bc:b9:43:21:0b:76:f2:9a:08:14:b7:3e:96:84:60:
8a:28:4c:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaG//qVP27ZnH27tEu3vALvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YWFmYTVjM2YyZjhlNGEwODNmODFmMGNiODdiYzdhZWE0
NDg5MWYwHhcNMjUwNDMwMTQwMDQ0WhcNMjUwNTAxMTQwMDQ0WjAzMTEwLwYDVQQD
EyhlYWIzMzc0NTY3YTA1YmUwYWQwYWY3YmQwYWZhODdmNDRmMDg3Y2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aQOK3PI82/TWBw8Z3d+hydMpO7o
EnZD0JZGbg817incwEoLoMrj89WqMlLWX2Uf4m1PlW8VWrgSA9DV6N+O0cRCU0If
E2YBBJAelR+pte8NnTW6ymvSrzLINACRuBx23OIvl12brUv+FRJVzZaa60jYnjvP
oY58XgDZ7Ihj7Pdzxi2Bl+sGa9QFF01AI3TQXG14rrZXFoDYbaJ3g0OTpa01VEy+
jVe1iJ9LDNDVzOG5dCUDDSl3kR0R/tGzutAimxUKgaAmqPc5m2JkulPxCiRLdwWW
RFZzvrRkFf3E87lAEMBVOxn2aeJfI4ukb72Vou1glktrL+58L8u+tWxIZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqzN0VnoFvgrQr3vQr6h/RPCHyqMB8GA1UdIwQY
MBaAFDaq+lw/L45KCD+B8MuHvHrqRIkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4Mjkt
MTUyYTU5NDc5ZTY5LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4MjktMTUyYTU5NDc5ZTY5
LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLhGxtUE
yBjzFqE4EVAowXntam6LF1M0EN8epS0uGqyGJIIltP0/9FMN4PVFJfR88iNL8wSN
pfjBTG+gSrB6aH4ehgZhqDvrhTdkqs2qiJA+mb635VFfQGJFiQzlQA5ivbQgukUh
spxPUlm9dxCn3AnngNxfEAXYVaGB8SXxYzQ00h7FRGNeoaJDRnZZN6j5AHJ28yk0
uUiScCz+o5sEz/vpEeqdLaquNnbhDV6SwbCOqflppX7eCknoU7xBrc3axLn/6k2U
ZZx3F/XC1u3Mb3ZmZqoARfZwmVtSX2h87/el0T0or3j1taKCLBv5vLlDIQt28poI
FLc+loRgiihMFg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:12:58 2025 by rpki-client