Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: H+q3pTf3K8JBvU9uNCZglex3CKzJE/jmoSBysbiamvc=
Subject key identifier: 09:75:26:88:2A:D7:D1:96:EB:45:98:9C:FA:29:E1:76:AF:67:D9:6B
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 01965725C6BEE6AE8C74FCA8FBE944D830C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0B40
Signing time: Mon 21 Apr 2025 07:00:15 +0000
Manifest this update: Mon 21 Apr 2025 07:00:15 +0000
Manifest next update: Tue 22 Apr 2025 07:00:15 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: E5c8Ua8PLvx+gQ0kEuzs5pZ5xBd9qZwoPp9cBwLwLvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:c6:be:e6:ae:8c:74:fc:a8:fb:e9:44:d8:30:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Apr 21 07:00:15 2025 GMT
Not After : Apr 22 07:00:15 2025 GMT
Subject: CN=097526882ad7d196eb45989cfa29e176af67d96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:d8:90:0a:f0:2a:14:7d:bc:79:79:28:7d:
e2:56:69:f9:d2:e3:1f:77:4b:c3:d2:ad:c9:67:c8:
fc:ad:47:5f:b4:45:a6:05:3e:5d:07:e7:48:fc:5c:
04:7a:4d:00:42:66:9e:ff:e8:2a:95:85:90:86:9b:
a8:ed:98:cb:aa:f2:6c:11:73:a0:e4:c2:db:81:5f:
67:0a:d4:40:c2:d8:5e:5c:2a:da:de:20:26:fd:32:
5f:f9:7e:02:17:c9:24:89:02:94:bc:11:ca:96:8b:
cd:c3:55:a4:0c:eb:96:6f:1c:d5:a3:37:62:5d:25:
1b:77:49:6e:43:40:e9:1d:c9:cb:ca:5b:ab:6a:94:
e0:10:42:92:95:7b:cd:dd:34:48:a4:54:d5:33:27:
66:a6:25:ce:44:ef:28:3f:de:36:22:7f:3d:b1:7d:
e3:39:95:8b:6f:29:61:e6:3f:8c:60:bf:39:eb:90:
c5:69:5e:48:99:a4:54:8a:c8:bb:50:d5:fe:ad:19:
c2:d8:e1:9c:ee:ec:81:74:08:f4:ec:14:c4:b9:c9:
90:60:9a:29:34:91:f9:c0:b6:d0:c3:7e:59:8e:64:
b0:ca:bf:42:1b:00:c4:59:97:c5:ba:09:59:7c:4c:
c2:0d:fd:2f:8d:4a:67:22:50:ec:3d:d6:2d:8d:f3:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:75:26:88:2A:D7:D1:96:EB:45:98:9C:FA:29:E1:76:AF:67:D9:6B
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9e:9d:b2:be:a7:0f:23:86:ef:d8:8f:10:2d:1f:a3:61:5f:
eb:20:7a:16:35:67:8b:c5:d7:51:52:70:2d:3b:93:0e:d8:39:
32:cf:eb:4d:a3:e8:0e:e2:ef:b1:5d:cd:84:7f:bf:ef:aa:b4:
0a:be:64:25:1e:10:c0:7b:3f:49:f0:5f:24:7e:0e:ff:dc:e4:
e9:60:10:39:0c:fa:a4:ac:a1:1a:a0:55:e4:a1:15:fe:a1:e2:
c9:44:ed:5d:72:b3:8b:9b:1a:bd:2a:6d:6c:0b:f6:b1:19:e7:
8a:b2:aa:b6:4a:8d:c5:11:42:5a:fc:71:99:4b:e4:df:ed:02:
ae:58:5c:fc:4d:52:a7:a8:7d:09:13:98:ed:49:dd:15:5c:d0:
fe:a6:48:c5:4f:4d:a9:2c:ae:31:21:94:bc:04:f7:1e:a6:e5:
48:43:36:e0:26:69:7e:b2:2d:ea:f7:d0:fa:b8:9a:26:9b:d8:
c8:e7:f3:1a:ee:59:b9:59:cf:ae:8b:a7:13:da:a6:bb:8b:c2:
95:71:b6:f7:7a:af:ea:9f:c3:e5:5b:9d:e5:92:db:b9:53:c0:
0c:46:0d:20:9f:7b:8e:0e:c5:99:c6:91:43:ea:a5:52:3f:01:
07:40:50:ac:96:a0:63:12:75:0e:f9:9e:22:fc:f8:e4:34:ad:
b0:f2:b4:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJca+5q6MdPyo++lE2DDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2M4MDJiZTZiNGM0MDEwYzc2Y2U4ZTQ4NGU0ZGU3ZjU1
NDdiMmYwHhcNMjUwNDIxMDcwMDE1WhcNMjUwNDIyMDcwMDE1WjAzMTEwLwYDVQQD
EygwOTc1MjY4ODJhZDdkMTk2ZWI0NTk4OWNmYTI5ZTE3NmFmNjdkOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsjYkArwKhR9vHl5KH3iVmn50uMf
d0vD0q3JZ8j8rUdftEWmBT5dB+dI/FwEek0AQmae/+gqlYWQhpuo7ZjLqvJsEXOg
5MLbgV9nCtRAwtheXCra3iAm/TJf+X4CF8kkiQKUvBHKlovNw1WkDOuWbxzVozdi
XSUbd0luQ0DpHcnLylurapTgEEKSlXvN3TRIpFTVMydmpiXORO8oP942In89sX3j
OZWLbylh5j+MYL8565DFaV5ImaRUisi7UNX+rRnC2OGc7uyBdAj07BTEucmQYJop
NJH5wLbQw35ZjmSwyr9CGwDEWZfFuglZfEzCDf0vjUpnIlDsPdYtjfMnzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAl1Jogq19GW60WYnPop4XavZ9lrMB8GA1UdIwQY
MBaAFDbMgCvmtMQBDHbOjkhOTef1VHsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMt
OGFiYTg1Y2JkODE4LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81MWNhMzUtZTNhMS00NTc0LWJmNGMtOGFiYTg1Y2JkODE4
LzEvTnN5QUstYTB4QUVNZHM2T1NFNU41X1ZVZXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJ6dsr6n
DyOG79iPEC0fo2Ff6yB6FjVni8XXUVJwLTuTDtg5Ms/rTaPoDuLvsV3NhH+/76q0
Cr5kJR4QwHs/SfBfJH4O/9zk6WAQOQz6pKyhGqBV5KEV/qHiyUTtXXKzi5savSpt
bAv2sRnnirKqtkqNxRFCWvxxmUvk3+0Crlhc/E1Sp6h9CROY7UndFVzQ/qZIxU9N
qSyuMSGUvAT3HqblSEM24CZpfrIt6vfQ+riaJpvYyOfzGu5ZuVnProunE9qmu4vC
lXG293qv6p/D5Vud5ZLbuVPADEYNIJ97jg7FmcaRQ+qlUj8BB0BQrJagYxJ1Dvme
Ivz45DStsPK0mQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:00 2025 by rpki-client