Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier: 59QiL1Ewc3LRyiiaFHKn0zpcF8hNGl13FQHCFzk4ldk=
Subject key identifier: D9:11:9C:B6:6D:B4:6B:27:1F:B2:CF:A4:FD:3C:5F:8A:C7:D3:21:87
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial: 01964FDA2BFCC5734EB910C1832D2CE39D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number: 01E9
Signing time: Sat 19 Apr 2025 21:00:20 +0000
Manifest this update: Sat 19 Apr 2025 21:00:20 +0000
Manifest next update: Sun 20 Apr 2025 21:00:20 +0000
Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: xbZ1Rwj2ehbjScgYntOARhfBcl6GpwGWvpf8oEMwLKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:2b:fc:c5:73:4e:b9:10:c1:83:2d:2c:e3:9d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Validity
Not Before: Apr 19 21:00:20 2025 GMT
Not After : Apr 20 21:00:20 2025 GMT
Subject: CN=d9119cb66db46b271fb2cfa4fd3c5f8ac7d32187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:21:04:ef:54:b6:92:db:00:01:52:ba:58:
2e:6e:fa:1b:91:bc:08:49:59:b0:47:78:d9:97:f6:
1f:03:2c:54:8e:36:ae:83:77:c2:ff:cd:91:d8:d3:
52:2f:20:a1:af:f3:03:69:a0:de:6e:09:4a:ed:94:
d7:fb:0a:18:10:dd:e4:fa:d7:80:16:8b:c6:1b:bc:
a8:94:bd:11:8d:df:a3:4e:4f:4c:43:c3:65:53:f4:
fe:61:c6:f0:4b:d8:f1:a0:fd:c8:69:bf:d4:21:0c:
c7:1c:88:17:fa:55:99:0c:10:d6:52:94:cd:08:48:
0e:45:e8:f4:c5:01:54:8a:e8:72:2d:59:ff:98:08:
2b:49:18:cd:65:de:62:eb:a5:06:33:5c:37:91:3c:
ac:3a:4b:65:58:ea:11:6e:48:8b:86:9f:3b:d0:d9:
d7:30:31:fe:56:0a:e0:fd:4f:3b:a2:fd:26:9c:ee:
34:a4:dd:cf:31:d6:2f:08:fd:f5:8e:43:15:60:95:
e5:0e:6f:c8:b6:5a:9d:39:12:ba:0a:21:49:06:91:
34:67:2e:60:81:ac:0a:d1:44:f4:36:bf:73:a0:cc:
1f:8d:20:6f:6b:41:a5:94:a0:0d:cc:cc:95:07:5f:
e9:9e:1b:c0:4b:63:44:20:76:a9:c6:db:98:3f:1e:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:11:9C:B6:6D:B4:6B:27:1F:B2:CF:A4:FD:3C:5F:8A:C7:D3:21:87
X509v3 Authority Key Identifier:
keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bd:36:35:cf:ce:44:6f:4d:73:c9:aa:eb:68:fe:e2:ae:a6:
0a:3c:31:b4:6d:b9:ae:b7:e4:50:fd:4e:7f:31:21:68:94:84:
c9:dc:6b:ec:72:75:65:96:58:57:48:86:b5:f6:98:48:86:68:
81:53:43:22:7c:06:8b:38:29:81:3a:7a:2f:da:86:9e:82:3c:
c4:a0:c2:84:c5:39:7e:8a:93:89:5b:94:bb:78:18:cd:ac:50:
12:b9:9b:bf:ef:9b:dc:bd:4e:72:1a:79:c5:29:54:b6:30:e8:
d5:85:ef:dd:16:ec:23:cb:c7:2a:d7:bb:74:47:8e:13:ac:1f:
f1:f4:b2:bf:11:04:aa:98:91:07:f0:bf:92:bd:67:0b:7f:15:
36:73:4c:7a:ff:da:19:21:84:36:e7:51:8f:d2:eb:70:16:be:
cc:48:c7:ad:a9:5e:02:99:6f:a8:c3:85:61:4f:4f:6b:59:3d:
87:8a:e1:ee:dd:0f:db:f6:be:28:b6:79:05:81:3c:c0:d0:27:
11:e3:f9:d3:e4:07:44:26:bb:58:bc:05:5f:f6:71:b7:99:5b:
2f:f5:49:d4:43:cc:2b:3e:ec:28:a8:c4:c1:ab:c0:3d:f4:1d:
0f:43:55:04:2a:d1:dc:14:51:59:03:a3:de:2c:df:d2:41:3e:
71:6b:bd:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZP2iv8xXNOuRDBgy0s450DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NmZhMGNhMThhZmYyMTRlYzA1YjVkNDc4MGViM2M2ZWVl
NjZlM2UwHhcNMjUwNDE5MjEwMDIwWhcNMjUwNDIwMjEwMDIwWjAzMTEwLwYDVQQD
EyhkOTExOWNiNjZkYjQ2YjI3MWZiMmNmYTRmZDNjNWY4YWM3ZDMyMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+ohBO9UtpLbAAFSulgubvobkbwI
SVmwR3jZl/YfAyxUjjaug3fC/82R2NNSLyChr/MDaaDebglK7ZTX+woYEN3k+teA
FovGG7yolL0Rjd+jTk9MQ8NlU/T+YcbwS9jxoP3Iab/UIQzHHIgX+lWZDBDWUpTN
CEgORej0xQFUiuhyLVn/mAgrSRjNZd5i66UGM1w3kTysOktlWOoRbkiLhp870NnX
MDH+Vgrg/U87ov0mnO40pN3PMdYvCP31jkMVYJXlDm/ItlqdORK6CiFJBpE0Zy5g
gawK0UT0Nr9zoMwfjSBva0GllKANzMyVB1/pnhvAS2NEIHapxtuYPx7QAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkRnLZttGsnH7LPpP08X4rH0yGHMB8GA1UdIwQY
MBaAFDZvoMoYr/IU7AW11HgOs8bu5m4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm0tZ3loaXY4aFRzQmJYVWVBNnp4dTdtYmo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82NTQ0ODctOWEyZC00ZjY3LThmNzMt
ODZlMzY0MmMwNTIzLzEvTm0tZ3loaXY4aFRzQmJYVWVBNnp4dTdtYmo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS82NTQ0ODctOWEyZC00ZjY3LThmNzMtODZlMzY0MmMwNTIz
LzEvTm0tZ3loaXY4aFRzQmJYVWVBNnp4dTdtYmo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeL02Nc/O
RG9Nc8mq62j+4q6mCjwxtG25rrfkUP1OfzEhaJSEydxr7HJ1ZZZYV0iGtfaYSIZo
gVNDInwGizgpgTp6L9qGnoI8xKDChMU5foqTiVuUu3gYzaxQErmbv++b3L1Ochp5
xSlUtjDo1YXv3RbsI8vHKte7dEeOE6wf8fSyvxEEqpiRB/C/kr1nC38VNnNMev/a
GSGENudRj9LrcBa+zEjHraleAplvqMOFYU9Pa1k9h4rh7t0P2/a+KLZ5BYE8wNAn
EeP50+QHRCa7WLwFX/Zxt5lbL/VJ1EPMKz7sKKjEwavAPfQdD0NVBCrR3BRRWQOj
3izf0kE+cWu9TA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:11:14 2025 by rpki-client