Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: tFqFOe1PBe6g7K2ksJf0Sla0bNgrJnlNsLzkHeslqlo=
Subject key identifier: 22:80:6D:AE:EF:1E:42:78:9A:81:B4:36:D1:AF:73:50:B6:91:B0:40
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 0196556E9CE0E7C02F65AD2C1BF35ADF276D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 1490
Signing time: Sun 20 Apr 2025 23:00:34 +0000
Manifest this update: Sun 20 Apr 2025 23:00:34 +0000
Manifest next update: Mon 21 Apr 2025 23:00:34 +0000
Files and hashes: 1: Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa (hash: r74V+TICXc97SHMOMlLlN4zJGa1Cwt8Y3q6l6hYrpFg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: ii1P0KM4kaXwCFBRJHOTiVsXdjTN1b9bxrXxkDDu2kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:9c:e0:e7:c0:2f:65:ad:2c:1b:f3:5a:df:27:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Apr 20 23:00:34 2025 GMT
Not After : Apr 21 23:00:34 2025 GMT
Subject: CN=22806daeef1e42789a81b436d1af7350b691b040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:3f:a4:ae:bc:26:27:a6:e1:84:7b:b2:2f:
4d:3e:47:6d:a1:27:f3:4d:d5:e3:37:68:32:61:c5:
e0:7f:a4:f8:a3:ad:08:a2:40:fd:20:c2:3c:9a:d4:
07:d2:0f:71:ad:a2:6e:98:24:93:d4:24:c9:1c:42:
04:e3:ac:fc:b2:7f:13:57:8e:bd:aa:a0:d4:55:ed:
44:5d:e3:fc:f8:eb:0c:5e:ce:2d:72:f6:ab:03:49:
b2:ec:82:33:59:62:4a:af:e0:91:ef:ad:fb:72:2a:
f2:42:00:05:32:c6:14:94:3b:1e:87:74:80:36:58:
01:f3:0b:e3:48:2f:ce:df:2b:0a:2a:f5:a9:84:83:
9e:7b:95:09:7f:1e:13:74:d0:14:b3:2f:73:85:33:
a4:8b:19:bf:92:60:58:61:f1:3e:62:ee:68:ec:47:
25:4d:ef:1d:a0:84:64:0a:15:c8:da:80:47:dc:61:
cf:16:97:2e:a6:f9:f0:b7:88:82:fd:83:1d:68:ec:
2d:d3:01:e0:31:d5:4e:89:8d:d8:e8:1e:d5:7f:19:
25:0b:20:7e:3d:2c:c7:b9:f1:76:a7:d8:02:94:2b:
fb:79:70:8c:6c:be:2d:84:c3:c7:42:a7:b1:e9:87:
7b:31:be:78:f3:6b:3b:d5:96:e6:73:41:85:b5:32:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:80:6D:AE:EF:1E:42:78:9A:81:B4:36:D1:AF:73:50:B6:91:B0:40
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fa:ad:42:b0:24:d6:c3:ab:7f:d0:f5:ba:31:7f:c3:b0:36:
61:dc:fc:71:a3:31:e4:eb:40:7f:6d:68:2b:a6:2c:89:11:24:
3b:d4:0f:91:18:90:63:af:04:db:68:1e:83:8f:d3:60:06:d9:
5b:28:53:b4:21:69:2a:8d:00:1b:49:d9:4a:ad:50:db:12:5c:
60:e1:ff:c7:7b:78:06:4f:4a:dc:b1:58:23:be:55:7c:9f:1e:
9b:25:94:35:e4:1a:ba:d3:64:ad:53:84:07:1f:30:d8:38:97:
1b:df:4f:66:f4:f4:6a:9c:d0:64:b3:06:82:38:ed:dc:0d:b8:
03:5c:87:23:ce:57:5a:b3:b8:e7:b7:fd:87:95:2b:2e:9d:ce:
90:53:4f:b8:1a:18:2e:11:b9:4e:e8:8a:43:9c:1d:67:96:4a:
33:95:c1:df:e9:f3:4f:57:4a:31:e9:f5:1e:37:88:88:68:ee:
de:2c:48:9c:cd:ff:82:bc:e6:d2:3a:e1:2f:c2:fb:4b:81:fb:
b1:90:6b:bb:d0:f7:d7:05:ae:6f:c7:4c:be:a6:77:ee:e5:b5:
0a:c0:9e:26:a4:43:b6:af:5d:c3:fd:f0:13:cc:80:aa:5e:1d:
fc:9f:8f:f5:f8:2f:11:4a:6a:85:e8:d0:66:27:d9:f3:d5:82:
9c:36:7a:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbpzg58AvZa0sG/Na3ydtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlN2E4ZDdkYjMyYTQwZDRlMWQwMDI4YTdjZmQwODE0YjY1
MGY0MjIwHhcNMjUwNDIwMjMwMDM0WhcNMjUwNDIxMjMwMDM0WjAzMTEwLwYDVQQD
EygyMjgwNmRhZWVmMWU0Mjc4OWE4MWI0MzZkMWFmNzM1MGI2OTFiMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBU/pK68Jiem4YR7si9NPkdtoSfz
TdXjN2gyYcXgf6T4o60IokD9IMI8mtQH0g9xraJumCST1CTJHEIE46z8sn8TV469
qqDUVe1EXeP8+OsMXs4tcvarA0my7IIzWWJKr+CR7637ciryQgAFMsYUlDseh3SA
NlgB8wvjSC/O3ysKKvWphIOee5UJfx4TdNAUsy9zhTOkixm/kmBYYfE+Yu5o7Ecl
Te8doIRkChXI2oBH3GHPFpcupvnwt4iC/YMdaOwt0wHgMdVOiY3Y6B7VfxklCyB+
PSzHufF2p9gClCv7eXCMbL4thMPHQqex6Yd7Mb5482s71Zbmc0GFtTJoUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKAba7vHkJ4moG0NtGvc1C2kbBAMB8GA1UdIwQY
MBaAFP56jX2zKkDU4dACinz9CBS2UPQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmIt
YjEyYTY5MzNmODI5LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmItYjEyYTY5MzNmODI5
LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfqtQrAk
1sOrf9D1ujF/w7A2Ydz8caMx5OtAf21oK6YsiREkO9QPkRiQY68E22geg4/TYAbZ
WyhTtCFpKo0AG0nZSq1Q2xJcYOH/x3t4Bk9K3LFYI75VfJ8emyWUNeQautNkrVOE
Bx8w2DiXG99PZvT0apzQZLMGgjjt3A24A1yHI85XWrO457f9h5UrLp3OkFNPuBoY
LhG5TuiKQ5wdZ5ZKM5XB3+nzT1dKMen1HjeIiGju3ixInM3/grzm0jrhL8L7S4H7
sZBru9D31wWub8dMvqZ37uW1CsCeJqRDtq9dw/3wE8yAql4d/J+P9fgvEUpqhejQ
ZifZ89WCnDZ6cA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:34 2025 by rpki-client