Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json)
Hash identifier: owTGJgXWnsdLZeZp+93jtSHpTwAUpM9pMa2TLfw1En4=
Subject key identifier: 81:CB:81:16:B9:5C:6B:54:7A:88:94:68:79:F3:2E:FF:A8:C3:7B:CA
Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Certificate serial: 01965B706E420AFFB4412E6AF58EAFCB4B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
Manifest number: 08ED
Signing time: Tue 22 Apr 2025 03:00:16 +0000
Manifest this update: Tue 22 Apr 2025 03:00:16 +0000
Manifest next update: Wed 23 Apr 2025 03:00:16 +0000
Files and hashes: 1: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: Wgra1hAKhaHTYMY7++uvGBMKix4UEpHo/3Rj9XC/Igg=)
2: O5DiGBxXgxkBCTZNGMQgecNF7aI.roa (hash: 0ahwaWUfVDJYD2wF/x/njO0sF76KorNYpLUQSfP42Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:6e:42:0a:ff:b4:41:2e:6a:f5:8e:af:cb:4b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12
Validity
Not Before: Apr 22 03:00:16 2025 GMT
Not After : Apr 23 03:00:16 2025 GMT
Subject: CN=81cb8116b95c6b547a88946879f32effa8c37bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:64:15:42:ea:99:7e:0f:36:c0:0a:bd:48:
47:7c:d6:b6:43:a5:eb:d3:bd:8c:53:cf:9e:d2:e2:
73:d4:a6:10:7b:9a:df:75:65:49:fa:c9:30:cf:18:
17:a9:16:cd:84:38:ef:89:67:62:e1:63:dc:3f:75:
14:31:09:af:12:f7:c0:34:1b:b5:de:37:32:08:01:
b2:93:7f:ba:05:a7:6f:62:91:ec:93:92:db:96:5c:
e0:41:f4:93:d5:4c:6e:25:75:62:f6:ae:5e:bc:4c:
4b:14:fa:2b:37:74:61:40:7b:02:6a:66:42:b9:44:
61:f6:cb:a2:71:26:c4:69:cf:54:d8:a4:a0:67:b4:
2d:60:bb:0f:e8:89:e0:c6:cc:25:99:15:bb:a9:84:
2e:0a:b3:3f:2c:8c:dc:d4:fb:30:06:ed:af:83:7f:
20:c2:98:e6:20:17:08:ae:96:70:98:bc:6f:77:76:
8a:e9:b9:1a:6c:fe:b7:6f:47:a0:be:92:b8:cb:b3:
e7:63:6f:57:83:3c:e0:bc:b0:bf:36:85:8e:64:74:
eb:15:25:7d:46:da:5f:3d:f2:41:e1:59:25:e5:1e:
cf:11:e4:2e:5a:44:fb:df:64:c8:7c:96:6d:7e:94:
c9:a5:0a:cc:d6:ef:3a:40:1b:a4:f7:80:51:11:4c:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CB:81:16:B9:5C:6B:54:7A:88:94:68:79:F3:2E:FF:A8:C3:7B:CA
X509v3 Authority Key Identifier:
keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b7:bc:f2:3a:59:7d:ef:6b:c5:37:83:f3:c0:b4:2e:17:2f:
1f:17:7b:8c:3b:dd:fd:a3:fe:00:7d:94:c7:2a:e1:f3:89:e0:
64:f0:82:88:cf:46:2b:ba:6f:52:fc:0b:49:fd:04:4a:b0:ec:
b0:d8:21:3a:91:04:7c:75:32:85:27:b6:b0:16:72:96:d5:65:
8c:f2:c0:d7:3f:ee:1b:18:02:9e:40:73:6b:ed:79:10:d4:92:
e6:fc:8f:2f:36:ab:6e:b9:5c:7c:20:11:a3:47:52:9b:1b:18:
72:54:fd:62:20:13:ea:05:63:13:35:42:8d:58:8d:c8:2b:c4:
6a:90:f5:a9:28:c9:11:b4:34:36:f7:d3:26:fb:fc:b5:aa:47:
3e:82:8c:64:ff:fc:aa:8c:cf:6c:46:b3:fa:22:8f:4b:40:71:
09:a9:0b:4a:e5:92:aa:27:17:2e:a9:f8:62:c5:c7:6c:38:7b:
6e:69:fc:f8:8c:30:c9:1e:45:cd:e0:a3:5d:8e:36:6a:40:76:
df:b7:df:6f:cd:5d:7c:34:d3:c1:4c:0d:19:12:18:b5:ec:4f:
d9:44:94:50:f6:05:f6:ad:a0:4e:92:85:1c:40:d7:1e:97:12:
72:f0:03:68:46:a5:4a:86:b9:f2:28:db:b5:0d:3a:ce:30:c7:
ca:ef:cb:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbcG5CCv+0QS5q9Y6vy0uUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDc5MTNjZTNhMTE1ODhiNTljM2M5ZjlkYTlmZjc3ZjI0
OGFjMTIwHhcNMjUwNDIyMDMwMDE2WhcNMjUwNDIzMDMwMDE2WjAzMTEwLwYDVQQD
Eyg4MWNiODExNmI5NWM2YjU0N2E4ODk0Njg3OWYzMmVmZmE4YzM3YmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttdkFULqmX4PNsAKvUhHfNa2Q6Xr
072MU8+e0uJz1KYQe5rfdWVJ+skwzxgXqRbNhDjviWdi4WPcP3UUMQmvEvfANBu1
3jcyCAGyk3+6BadvYpHsk5LbllzgQfST1UxuJXVi9q5evExLFPorN3RhQHsCamZC
uURh9suicSbEac9U2KSgZ7QtYLsP6IngxswlmRW7qYQuCrM/LIzc1PswBu2vg38g
wpjmIBcIrpZwmLxvd3aK6bkabP63b0egvpK4y7PnY29XgzzgvLC/NoWOZHTrFSV9
RtpfPfJB4Vkl5R7PEeQuWkT732TIfJZtfpTJpQrM1u86QBuk94BREUxDbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHLgRa5XGtUeoiUaHnzLv+ow3vKMB8GA1UdIwQY
MBaAFDVHkTzjoRWItZw8n52p/3fySKwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wY2RhNzQtYzliYi00ZDkyLTllNmYt
Mzg5OTc4MjFmZmNlLzEvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wY2RhNzQtYzliYi00ZDkyLTllNmYtMzg5OTc4MjFmZmNl
LzEvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7e88jpZ
fe9rxTeD88C0LhcvHxd7jDvd/aP+AH2Uxyrh84ngZPCCiM9GK7pvUvwLSf0ESrDs
sNghOpEEfHUyhSe2sBZyltVljPLA1z/uGxgCnkBza+15ENSS5vyPLzarbrlcfCAR
o0dSmxsYclT9YiAT6gVjEzVCjViNyCvEapD1qSjJEbQ0NvfTJvv8tapHPoKMZP/8
qozPbEaz+iKPS0BxCakLSuWSqicXLqn4YsXHbDh7bmn8+IwwyR5FzeCjXY42akB2
37ffb81dfDTTwUwNGRIYtexP2USUUPYF9q2gTpKFHEDXHpcScvADaEalSoa58ijb
tQ06zjDHyu/LsQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:30:25 2025 by rpki-client