Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
File: nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json)
Hash identifier: s1OT2WtTlCdobsZe+jmyKJeswfBYYyx11FoEHPwpzqk=
Subject key identifier: 22:5F:AC:38:9A:43:9A:56:C7:29:7B:FA:78:91:2B:64:6D:47:90:60
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial: 01965EA886C9BB06A5B44A1997B978631D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
Manifest number: 0FDB
Signing time: Tue 22 Apr 2025 18:00:24 +0000
Manifest this update: Tue 22 Apr 2025 18:00:24 +0000
Manifest next update: Wed 23 Apr 2025 18:00:24 +0000
Files and hashes: 1: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: 7y2E46s3n/qQmCTwk7FXmGfoLcbmDSe9rHa7fuyESew=)
2: qI02I2WeIbyQJXU2kKmSYDmuGmg.roa (hash: +/v2LoWNQyCo7X5QXEt3nR9mBWrSzfmyTw/jlV14U04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:86:c9:bb:06:a5:b4:4a:19:97:b9:78:63:1d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
Validity
Not Before: Apr 22 18:00:24 2025 GMT
Not After : Apr 23 18:00:24 2025 GMT
Subject: CN=225fac389a439a56c7297bfa78912b646d479060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:62:c7:db:f2:96:14:3f:67:6c:cc:19:63:
b1:d7:ea:2e:fe:ca:f9:24:36:ff:38:6d:87:a4:fd:
97:d8:42:35:e0:98:fa:14:56:02:40:81:43:0b:06:
9b:c0:53:7a:de:ec:d3:9b:20:1e:df:89:ca:41:ab:
b5:a2:64:2e:cd:5d:d1:f9:2e:d8:5e:eb:5c:c3:59:
4a:61:c7:55:24:14:61:d7:55:27:65:03:82:fd:b3:
d3:00:59:e9:aa:95:cc:be:12:5a:46:60:69:9a:2b:
3b:2b:f7:d0:4c:53:4e:80:f5:9f:62:70:60:24:e1:
cc:54:c5:94:72:b5:2d:66:64:c5:a4:c8:25:26:99:
94:4c:32:c7:2d:ac:f1:97:f0:53:d5:9d:f6:29:92:
9b:b0:c2:9d:ce:97:16:11:0e:fa:b3:27:6d:b7:b8:
52:1f:75:62:da:d6:91:71:ce:8d:f4:de:b2:b9:a7:
dc:ef:50:2c:cd:42:ed:9d:68:6f:59:08:ce:27:88:
0b:a4:e3:1e:e8:7f:bf:29:e8:9a:39:ed:3d:2a:90:
be:95:35:a0:42:38:a5:7b:62:6c:47:6e:30:df:6d:
ce:9f:af:61:f8:5e:a4:bb:17:d7:e0:d8:86:16:0a:
6c:8b:7f:da:fb:54:47:a5:80:ec:1a:ac:95:e8:62:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5F:AC:38:9A:43:9A:56:C7:29:7B:FA:78:91:2B:64:6D:47:90:60
X509v3 Authority Key Identifier:
keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:27:bf:1b:64:b5:05:3e:68:c9:3e:1d:62:a6:9b:a2:00:c2:
67:0e:be:99:b1:ca:bc:b0:13:00:27:8c:56:8e:2a:6f:ec:0e:
36:b8:3b:99:19:05:ff:84:bb:c2:51:d2:a2:ce:d0:eb:dd:72:
b3:30:ed:a3:60:89:5c:0a:73:54:cf:6b:88:4c:2d:54:fa:2d:
20:9a:03:56:af:2b:ca:61:9d:fc:8e:f3:aa:e0:51:ca:c5:cb:
14:ab:8f:34:a6:d5:29:c3:1c:6d:6c:bb:47:12:6a:2f:8e:dc:
93:10:76:2d:25:10:6f:24:11:f3:10:d5:9f:64:68:bd:a1:b7:
05:9b:28:2a:e8:39:84:bd:57:9a:21:85:37:80:ba:72:65:da:
69:e8:26:0d:18:c0:2a:61:e7:7a:af:b7:de:bd:ae:e9:69:4c:
20:79:02:fa:20:e2:38:68:02:40:d2:98:61:9d:36:d1:0b:cb:
fa:cf:bb:0f:26:6c:94:9d:23:d2:f1:70:60:3d:9b:cf:29:f1:
7b:20:48:69:55:3f:8b:69:91:e5:cf:b4:ce:7e:85:ec:85:18:
2a:f5:c1:23:c3:0e:ff:4d:a6:c9:96:16:ef:1b:79:da:eb:7a:
18:8d:e6:90:1f:ab:a5:66:bd:73:44:34:60:4d:0e:be:14:41:
0f:d4:71:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZeqIbJuwaltEoZl7l4Yx1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjQ1ZTAwYWUxNjRlNjdhYTEzNTQ4NTcyMzdkMDlhZGYy
N2M5NTIwHhcNMjUwNDIyMTgwMDI0WhcNMjUwNDIzMTgwMDI0WjAzMTEwLwYDVQQD
EygyMjVmYWMzODlhNDM5YTU2YzcyOTdiZmE3ODkxMmI2NDZkNDc5MDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw5ix9vylhQ/Z2zMGWOx1+ou/sr5
JDb/OG2HpP2X2EI14Jj6FFYCQIFDCwabwFN63uzTmyAe34nKQau1omQuzV3R+S7Y
Xutcw1lKYcdVJBRh11UnZQOC/bPTAFnpqpXMvhJaRmBpmis7K/fQTFNOgPWfYnBg
JOHMVMWUcrUtZmTFpMglJpmUTDLHLazxl/BT1Z32KZKbsMKdzpcWEQ76sydtt7hS
H3Vi2taRcc6N9N6yuafc71AszULtnWhvWQjOJ4gLpOMe6H+/KeiaOe09KpC+lTWg
Qjile2JsR24w323On69h+F6kuxfX4NiGFgpsi3/a+1RHpYDsGqyV6GKliQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJfrDiaQ5pWxyl7+niRK2RtR5BgMB8GA1UdIwQY
MBaAFJz0XgCuFk5nqhNUhXI30JrfJ8lSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmIt
NWFkNWQyOWQ3MmRkLzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmItNWFkNWQyOWQ3MmRk
LzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJye/G2S1
BT5oyT4dYqabogDCZw6+mbHKvLATACeMVo4qb+wONrg7mRkF/4S7wlHSos7Q691y
szDto2CJXApzVM9riEwtVPotIJoDVq8rymGd/I7zquBRysXLFKuPNKbVKcMcbWy7
RxJqL47ckxB2LSUQbyQR8xDVn2RovaG3BZsoKug5hL1XmiGFN4C6cmXaaegmDRjA
KmHneq+33r2u6WlMIHkC+iDiOGgCQNKYYZ020QvL+s+7DyZslJ0j0vFwYD2bzynx
eyBIaVU/i2mR5c+0zn6F7IUYKvXBI8MO/02myZYW7xt52ut6GI3mkB+rpWa9c0Q0
YE0OvhRBD9RxSA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:17:59 2025 by rpki-client