Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File: nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier: dqSOlIMCf8h4Sf7mY4iclZJTZW3n2v1dadKCdGzDsKU=
Subject key identifier: 17:03:31:96:78:E7:78:C3:CC:43:9C:27:DB:3B:1A:F9:3B:34:61:34
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer: /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial: 019650B696AE606EC4BF8CFEA58BA3633697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number: 01F3
Signing time: Sun 20 Apr 2025 01:01:05 +0000
Manifest this update: Sun 20 Apr 2025 01:01:05 +0000
Manifest next update: Mon 21 Apr 2025 01:01:05 +0000
Files and hashes: 1: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: l1N3/vEMYnhALEMXRqFFLz00Pgvjv7oT1grwRBynmSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:96:ae:60:6e:c4:bf:8c:fe:a5:8b:a3:63:36:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Validity
Not Before: Apr 20 01:01:05 2025 GMT
Not After : Apr 21 01:01:05 2025 GMT
Subject: CN=1703319678e778c3cc439c27db3b1af93b346134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:50:b8:31:9e:3a:ec:ac:98:db:be:df:b1:
e5:f5:2b:54:91:21:f9:40:37:ba:0e:30:46:8e:d5:
88:86:2c:d3:96:4f:bf:ad:f1:86:6b:28:f2:e7:b8:
2f:04:34:d3:0b:c8:a5:4a:e3:21:5b:be:52:de:2b:
8a:2d:af:b8:b6:6b:a9:00:79:dd:59:97:7e:ee:32:
71:7a:ee:2b:d5:11:35:8e:2e:d2:49:db:c6:bb:9d:
c8:5b:2f:3a:6d:be:0c:98:f0:15:4d:11:8b:49:da:
f3:d9:e7:8b:d8:d1:ae:d2:c6:4e:26:e0:ad:18:95:
99:92:d9:1b:5c:7f:86:90:5f:5d:33:0a:5a:8f:a8:
97:10:dc:39:bc:4e:f6:da:fb:23:81:40:3d:58:5b:
df:d8:73:3f:f2:79:cf:db:ef:93:55:56:f1:03:73:
56:79:30:53:32:6a:3f:30:22:db:ec:22:d9:f8:a0:
01:04:6f:9c:fe:83:d6:41:41:ce:a0:7c:ee:a4:ea:
99:23:ae:b4:94:66:d1:c3:b4:df:26:42:9b:3f:bc:
8c:b7:f5:85:c6:23:3c:af:ee:97:a0:37:1a:76:be:
fd:ad:c5:5c:79:9a:ee:c3:44:81:77:64:e9:e4:6f:
3f:37:93:db:2e:5b:c7:15:1a:32:23:d6:1c:68:3f:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:03:31:96:78:E7:78:C3:CC:43:9C:27:DB:3B:1A:F9:3B:34:61:34
X509v3 Authority Key Identifier:
keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:28:92:de:45:86:21:22:6a:36:1b:13:de:15:ce:8c:f4:94:
50:cf:c2:b5:62:0c:c1:24:9a:b9:fa:29:c7:ae:55:cb:aa:7c:
cb:09:c5:78:f9:e5:38:02:16:20:b3:99:8b:02:4c:94:ba:4a:
ca:2c:8e:e4:c4:5f:c8:13:6c:c9:73:43:71:54:28:6c:7c:5d:
6e:56:d5:89:09:4f:ca:48:c6:e6:6b:1f:d4:c9:1a:2c:bf:24:
14:33:0f:28:44:6f:90:b0:6c:5d:48:8b:e5:21:f9:99:93:11:
4e:fa:3c:62:57:b2:41:db:5f:0b:36:af:da:cb:12:55:c5:46:
63:0e:fa:bf:57:73:5c:75:d6:7b:5c:93:55:ab:9c:a5:74:0b:
81:c1:b5:35:cb:68:b4:22:0d:f3:9a:c1:e3:82:12:2e:d8:00:
07:e2:9f:bb:1b:e1:2b:97:c6:a5:98:17:ea:f5:50:14:db:00:
e9:1f:de:f6:bc:77:6e:fc:dc:cf:44:68:b0:56:9e:cf:f3:ab:
81:d6:ac:66:62:5d:5b:68:86:af:1f:e9:9f:bc:6a:60:45:da:
fd:ea:b8:e1:a9:b1:ea:09:42:8e:bf:82:fc:68:92:cb:1f:ea:
0c:81:aa:6c:fc:e2:a3:d0:b4:14:9a:4e:e9:1a:46:dd:36:28:
d1:a4:fe:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQtpauYG7Ev4z+pYujYzaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNTJiODNiMTJmYThhMDcxMzJjYzgwODMzYTEwM2UwOWQ4
YmQwNGYwHhcNMjUwNDIwMDEwMTA1WhcNMjUwNDIxMDEwMTA1WjAzMTEwLwYDVQQD
EygxNzAzMzE5Njc4ZTc3OGMzY2M0MzljMjdkYjNiMWFmOTNiMzQ2MTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWNQuDGeOuysmNu+37Hl9StUkSH5
QDe6DjBGjtWIhizTlk+/rfGGayjy57gvBDTTC8ilSuMhW75S3iuKLa+4tmupAHnd
WZd+7jJxeu4r1RE1ji7SSdvGu53IWy86bb4MmPAVTRGLSdrz2eeL2NGu0sZOJuCt
GJWZktkbXH+GkF9dMwpaj6iXENw5vE722vsjgUA9WFvf2HM/8nnP2++TVVbxA3NW
eTBTMmo/MCLb7CLZ+KABBG+c/oPWQUHOoHzupOqZI660lGbRw7TfJkKbP7yMt/WF
xiM8r+6XoDcadr79rcVceZruw0SBd2Tp5G8/N5PbLlvHFRoyI9YcaD8l4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcDMZZ453jDzEOcJ9s7Gvk7NGE0MB8GA1UdIwQY
MBaAFJ1SuDsS+ooHEyzICDOhA+Cdi9BPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQt
ZTRiNmE5ZGY5YTM0LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQtZTRiNmE5ZGY5YTM0
LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiiS3kWG
ISJqNhsT3hXOjPSUUM/CtWIMwSSaufopx65Vy6p8ywnFePnlOAIWILOZiwJMlLpK
yiyO5MRfyBNsyXNDcVQobHxdblbViQlPykjG5msf1MkaLL8kFDMPKERvkLBsXUiL
5SH5mZMRTvo8YleyQdtfCzav2ssSVcVGYw76v1dzXHXWe1yTVaucpXQLgcG1Ncto
tCIN85rB44ISLtgAB+KfuxvhK5fGpZgX6vVQFNsA6R/e9rx3bvzcz0RosFaez/Or
gdasZmJdW2iGrx/pn7xqYEXa/eq44amx6glCjr+C/GiSyx/qDIGqbPzio9C0FJpO
6RpG3TYo0aT++w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:51:02 2025 by rpki-client