Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
File: NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json)
Hash identifier: kGe6YQf2yfBHHjuw5EmQ1slVdGLYH4hiVzXc4vHXRvc=
Subject key identifier: 2B:65:A0:E5:0F:62:4A:4B:28:E9:59:EA:AF:2B:BB:EB:B7:BB:6C:3A
Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
Certificate issuer: /CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Certificate serial: 019657267224F635179E3263895E120F7107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
Manifest number: 148F
Signing time: Mon 21 Apr 2025 07:00:59 +0000
Manifest this update: Mon 21 Apr 2025 07:00:59 +0000
Manifest next update: Tue 22 Apr 2025 07:00:59 +0000
Files and hashes: 1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: ZGln9YEJVkHyVkBUFCw0Z9VDRutmVHXUOYm9OgjCdYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:72:24:f6:35:17:9e:32:63:89:5e:12:0f:71:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Validity
Not Before: Apr 21 07:00:59 2025 GMT
Not After : Apr 22 07:00:59 2025 GMT
Subject: CN=2b65a0e50f624a4b28e959eaaf2bbbebb7bb6c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:09:61:4d:08:83:f0:62:0b:a0:a8:cf:7d:
51:08:93:fa:af:ea:8b:25:ed:39:c0:fd:80:20:38:
c3:24:88:af:38:e2:fe:11:4c:9a:51:63:ef:90:b6:
33:71:86:74:14:43:4a:e2:f8:bd:21:ee:b7:77:94:
28:b1:28:cf:7c:58:da:00:6f:0a:f5:43:35:59:1d:
c0:66:d1:a2:9b:3a:95:51:ae:df:94:f2:36:68:b3:
f3:a5:ac:63:a8:3c:3b:7b:be:a5:20:14:4e:d6:dd:
86:ee:4f:bd:66:5e:e9:6a:8e:94:2e:41:ed:c1:94:
0e:eb:e3:07:e7:b3:58:a9:28:8f:ad:88:13:b5:20:
81:37:89:46:8d:28:a8:4f:a8:c9:67:98:ec:c9:7b:
45:5b:65:e1:fe:a0:16:40:8d:16:1d:cd:c2:83:e9:
d4:ad:70:78:c1:25:54:47:60:2b:71:0e:ab:cc:6b:
84:6e:73:c6:6f:a6:9e:7e:9a:9c:a8:e4:87:b6:cf:
00:12:a9:7e:84:1a:0e:8b:65:8c:c3:90:8f:e3:ea:
a4:58:d4:c7:72:63:bc:f5:3b:39:1c:c7:f9:bf:c4:
90:23:8d:e0:b0:f5:f5:b3:61:18:b9:5f:00:3a:28:
0d:bf:d0:3d:79:4a:9a:7d:9e:6a:2f:3d:8e:97:51:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:65:A0:E5:0F:62:4A:4B:28:E9:59:EA:AF:2B:BB:EB:B7:BB:6C:3A
X509v3 Authority Key Identifier:
keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:48:4f:ff:c2:f9:8c:d2:85:f3:de:d4:4c:5d:f3:09:e0:28:
a8:e2:27:e0:cf:05:7e:d2:2f:57:7e:6e:5f:fc:8b:ea:ff:2c:
e5:1b:01:99:87:81:dc:de:eb:aa:64:29:4c:a0:52:23:9a:de:
49:68:7e:20:d8:f8:4d:56:9a:1d:39:3a:ae:3e:11:9f:5b:04:
3e:d7:51:bb:73:f2:1a:3e:31:e1:14:44:b0:a0:25:31:8f:b6:
6a:31:58:9e:41:37:c6:fa:16:cb:3f:1e:45:b5:0e:d4:f9:13:
d8:fd:0d:3d:32:e7:d9:1b:94:fd:9c:ca:48:a8:22:10:97:bb:
74:8a:88:3f:30:20:e4:81:64:6b:ce:e5:7f:15:ab:2d:78:da:
31:c8:2b:d6:82:a7:d8:17:50:b5:0b:ac:83:3f:d5:6a:be:dc:
c5:41:ab:4d:55:f9:0a:9d:79:e7:2e:cf:58:db:73:7c:74:4c:
a3:2f:32:e4:04:84:a5:04:9a:77:81:25:e5:9a:89:fb:a3:8b:
f6:2b:2e:7d:19:f3:00:03:73:72:fb:bb:08:83:08:c8:ad:fa:
4d:eb:c1:67:1c:3e:b8:97:0f:2f:b2:b7:1d:81:3d:44:36:34:
24:72:f7:65:f6:cf:4b:3e:90:48:b2:ac:bf:16:ff:b7:3b:df:
f6:37:ff:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJnIk9jUXnjJjiV4SD3EHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MzEwYTk1OTQ4OWQxYWM1Yjg3OTZhZjYyNmUwN2MzZjFj
MTcxZjMwHhcNMjUwNDIxMDcwMDU5WhcNMjUwNDIyMDcwMDU5WjAzMTEwLwYDVQQD
EygyYjY1YTBlNTBmNjI0YTRiMjhlOTU5ZWFhZjJiYmJlYmI3YmI2YzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVIJYU0Ig/BiC6Coz31RCJP6r+qL
Je05wP2AIDjDJIivOOL+EUyaUWPvkLYzcYZ0FENK4vi9Ie63d5QosSjPfFjaAG8K
9UM1WR3AZtGimzqVUa7flPI2aLPzpaxjqDw7e76lIBRO1t2G7k+9Zl7pao6ULkHt
wZQO6+MH57NYqSiPrYgTtSCBN4lGjSioT6jJZ5jsyXtFW2Xh/qAWQI0WHc3Cg+nU
rXB4wSVUR2ArcQ6rzGuEbnPGb6aefpqcqOSHts8AEql+hBoOi2WMw5CP4+qkWNTH
cmO89Ts5HMf5v8SQI43gsPX1s2EYuV8AOigNv9A9eUqafZ5qLz2Ol1HGoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtloOUPYkpLKOlZ6q8ru+u3u2w6MB8GA1UdIwQY
MBaAFDYxCpWUidGsW4eWr2JuB8PxwXHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85M2Y2ZGYtYzNmNS00MDEzLWE3ZmMt
YmQ1YzNiYzExY2ZhLzEvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85M2Y2ZGYtYzNmNS00MDEzLWE3ZmMtYmQ1YzNiYzExY2Zh
LzEvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEhP/8L5
jNKF897UTF3zCeAoqOIn4M8FftIvV35uX/yL6v8s5RsBmYeB3N7rqmQpTKBSI5re
SWh+INj4TVaaHTk6rj4Rn1sEPtdRu3PyGj4x4RREsKAlMY+2ajFYnkE3xvoWyz8e
RbUO1PkT2P0NPTLn2RuU/ZzKSKgiEJe7dIqIPzAg5IFka87lfxWrLXjaMcgr1oKn
2BdQtQusgz/Var7cxUGrTVX5Cp155y7PWNtzfHRMoy8y5ASEpQSad4El5ZqJ+6OL
9isufRnzAANzcvu7CIMIyK36TevBZxw+uJcPL7K3HYE9RDY0JHL3ZfbPSz6QSLKs
vxb/tzvf9jf/wg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:03 2025 by rpki-client