Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft
File: pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft (raw, json)
Hash identifier: M62n3h0ml8/HVAuZuXafymK+WxPIK54EKNkaBLNWhJw=
Subject key identifier: 4E:65:4E:78:EC:AB:28:DD:DE:F4:E2:03:10:4B:70:33:CF:DA:49:B0
Authority key identifier: A4:D3:80:41:AE:4E:73:15:77:24:AA:9F:3E:E0:43:05:E5:F1:28:34
Certificate issuer: /CN=a4d38041ae4e73157724aa9f3ee04305e5f12834
Certificate serial: 01965B030EA845948415E69A77CC7026C940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft
Manifest number: 14D1
Signing time: Tue 22 Apr 2025 01:00:49 +0000
Manifest this update: Tue 22 Apr 2025 01:00:49 +0000
Manifest next update: Wed 23 Apr 2025 01:00:49 +0000
Files and hashes: 1: pNOAQa5OcxV3JKqfPuBDBeXxKDQ.crl (hash: OhjFjVsInL/I2Nzn6XwehemMze7knqpuTX4syb6i6As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:0e:a8:45:94:84:15:e6:9a:77:cc:70:26:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d38041ae4e73157724aa9f3ee04305e5f12834
Validity
Not Before: Apr 22 01:00:49 2025 GMT
Not After : Apr 23 01:00:49 2025 GMT
Subject: CN=4e654e78ecab28dddef4e203104b7033cfda49b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:f4:d2:11:da:41:bf:07:e7:59:7f:b7:28:
c9:8a:68:2d:00:72:a7:a8:a1:7b:53:dd:71:3d:bc:
84:78:1c:d8:a1:0f:b1:0b:73:bd:5d:ee:3c:f2:46:
03:1d:44:4a:b2:43:0c:8d:da:a0:25:8d:28:ba:eb:
a3:e1:dd:27:16:4c:ae:b5:a4:84:6c:97:39:b5:05:
99:65:f1:71:a7:ff:28:69:28:31:f5:96:44:c8:29:
6e:50:de:61:d6:a9:5c:06:bb:65:2c:90:41:31:fe:
13:58:9d:a2:3c:df:c4:55:e8:da:7c:1a:66:9e:f3:
47:8c:48:59:34:cb:d6:b2:84:5f:d4:d8:62:21:2f:
92:3b:8d:8f:24:66:4d:af:99:6b:6a:95:f6:a5:16:
c8:1b:4e:bf:a7:73:6f:df:50:47:fa:f6:b8:54:b4:
7e:37:78:3b:46:5f:d9:ed:aa:a0:f3:91:b9:35:ea:
85:de:eb:f3:b3:ca:b7:50:da:1f:ae:ff:d6:61:13:
2c:24:70:bb:5b:e9:cb:83:45:ca:89:2d:7f:c1:2c:
d0:31:d2:89:c4:e9:2c:5a:54:92:2c:02:95:89:16:
bd:a7:03:92:de:d7:de:c6:d3:c6:76:37:cf:86:ff:
fd:bf:68:85:00:90:16:31:18:0a:3e:ad:dc:74:17:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:65:4E:78:EC:AB:28:DD:DE:F4:E2:03:10:4B:70:33:CF:DA:49:B0
X509v3 Authority Key Identifier:
keyid:A4:D3:80:41:AE:4E:73:15:77:24:AA:9F:3E:E0:43:05:E5:F1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2e:a9:86:1c:2d:10:2d:d8:9e:ce:60:c5:4d:a5:8b:9d:9c:
74:15:29:86:d0:f0:f1:59:dc:8a:1b:79:26:9c:ce:cb:aa:27:
bd:a2:f6:c0:fd:02:bb:7e:f7:c3:54:23:88:55:37:45:6a:75:
c2:d8:f8:9c:07:d8:47:b4:85:59:41:d6:9e:89:cb:34:ad:63:
d7:38:78:e5:fd:c9:7a:6f:4a:2c:c1:8a:c3:0e:42:4e:bd:92:
f7:11:b3:09:4c:1c:07:59:aa:cd:71:df:24:0e:37:5f:87:c7:
4c:2a:7a:18:d1:03:b8:a2:b3:13:a7:a0:e5:f1:c5:65:ca:ec:
18:f6:f0:8d:c4:5e:cd:13:cb:fb:06:12:f9:1d:8e:fb:c2:4d:
4f:35:0d:29:4d:e2:7c:96:81:c7:e7:5b:d9:d9:9b:77:f5:c6:
69:c1:ff:4c:f9:f5:ee:f2:43:71:30:87:90:c3:f1:7e:e8:5f:
9f:36:25:a4:5e:7e:97:f0:ab:ad:fe:74:d7:e5:6c:1b:1c:51:
96:62:25:69:31:d2:ab:8b:78:f2:45:62:b2:1a:32:ef:18:f0:
6d:19:d1:6b:fa:96:78:07:7c:71:e7:5e:5f:ff:c8:f3:c0:7e:
48:60:1c:c2:dd:da:44:e8:4c:1b:dd:c9:10:85:84:e3:4b:22:
eb:ba:26:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbAw6oRZSEFeaad8xwJslAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZDM4MDQxYWU0ZTczMTU3NzI0YWE5ZjNlZTA0MzA1ZTVm
MTI4MzQwHhcNMjUwNDIyMDEwMDQ5WhcNMjUwNDIzMDEwMDQ5WjAzMTEwLwYDVQQD
Eyg0ZTY1NGU3OGVjYWIyOGRkZGVmNGUyMDMxMDRiNzAzM2NmZGE0OWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVf00hHaQb8H51l/tyjJimgtAHKn
qKF7U91xPbyEeBzYoQ+xC3O9Xe488kYDHURKskMMjdqgJY0ouuuj4d0nFkyutaSE
bJc5tQWZZfFxp/8oaSgx9ZZEyCluUN5h1qlcBrtlLJBBMf4TWJ2iPN/EVejafBpm
nvNHjEhZNMvWsoRf1NhiIS+SO42PJGZNr5lrapX2pRbIG06/p3Nv31BH+va4VLR+
N3g7Rl/Z7aqg85G5NeqF3uvzs8q3UNofrv/WYRMsJHC7W+nLg0XKiS1/wSzQMdKJ
xOksWlSSLAKViRa9pwOS3tfextPGdjfPhv/9v2iFAJAWMRgKPq3cdBcUHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5lTnjsqyjd3vTiAxBLcDPP2kmwMB8GA1UdIwQY
MBaAFKTTgEGuTnMVdySqnz7gQwXl8Sg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE5PQVFhNU9jeFYzSktxZlB1QkRCZVh4S0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YjQ4ZjMtODgwOC00NzNkLWE3ZTYt
MTg2YjI4Njg1NGJlLzEvcE5PQVFhNU9jeFYzSktxZlB1QkRCZVh4S0RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80YjQ4ZjMtODgwOC00NzNkLWE3ZTYtMTg2YjI4Njg1NGJl
LzEvcE5PQVFhNU9jeFYzSktxZlB1QkRCZVh4S0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATC6phhwt
EC3Yns5gxU2li52cdBUphtDw8Vnciht5JpzOy6onvaL2wP0Cu373w1QjiFU3RWp1
wtj4nAfYR7SFWUHWnonLNK1j1zh45f3Jem9KLMGKww5CTr2S9xGzCUwcB1mqzXHf
JA43X4fHTCp6GNEDuKKzE6eg5fHFZcrsGPbwjcRezRPL+wYS+R2O+8JNTzUNKU3i
fJaBx+db2dmbd/XGacH/TPn17vJDcTCHkMPxfuhfnzYlpF5+l/Crrf501+VsGxxR
lmIlaTHSq4t48kVishoy7xjwbRnRa/qWeAd8cedeX//I88B+SGAcwt3aROhMG93J
EIWE40si67ompw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:44:20 2025 by rpki-client