Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
File: niAdSREFvoeXxfKjhatFb18K8Fs.mft (raw, json)
Hash identifier: zlCs2FntuSRD8VF1hIplgastXf70Ey1b9eHXHDCMeqk=
Subject key identifier: BF:EC:DD:82:3E:0A:E0:88:F0:2D:F9:EA:B9:9C:93:49:0A:47:08:F8
Authority key identifier: 9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
Certificate issuer: /CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Certificate serial: 01964CD94C94BEFF57B34DDE69B2770E88AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
Manifest number: 05CE
Signing time: Sat 19 Apr 2025 07:00:31 +0000
Manifest this update: Sat 19 Apr 2025 07:00:31 +0000
Manifest next update: Sun 20 Apr 2025 07:00:31 +0000
Files and hashes: 1: niAdSREFvoeXxfKjhatFb18K8Fs.crl (hash: Z6tnw8KAJHRZiCbpSlRzsFCPgwsKRnPljHua13Qartg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:4c:94:be:ff:57:b3:4d:de:69:b2:77:0e:88:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Validity
Not Before: Apr 19 07:00:31 2025 GMT
Not After : Apr 20 07:00:31 2025 GMT
Subject: CN=bfecdd823e0ae088f02df9eab99c93490a4708f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:ad:dc:f3:34:8b:75:b9:93:cd:cb:70:3d:
ec:3c:29:7f:53:70:72:e8:dc:7a:c4:f0:95:55:1e:
74:97:60:23:2c:23:ac:cc:c8:7f:3a:a5:f5:1d:4f:
34:28:7d:9b:0a:7b:1d:1a:37:44:e4:4d:c5:cc:dc:
24:46:7f:9f:71:8d:f7:49:2e:62:4d:f2:d6:0b:70:
49:dd:3e:1f:20:2b:36:27:b9:57:6a:fc:d1:9e:50:
4c:24:0b:ce:1c:c9:bd:fb:62:8c:90:4c:96:24:ea:
10:5c:c2:0f:23:19:06:f7:0f:c8:d3:1b:e2:65:90:
5c:c0:35:a7:bf:6d:ee:e0:af:38:52:82:a3:ad:1d:
08:dd:7f:9e:1e:41:b4:ec:7f:47:49:0a:93:96:5e:
9d:6a:57:f6:04:45:ae:44:b3:09:07:6e:fa:34:69:
c3:00:ff:9e:ee:f7:62:bb:cc:91:98:a3:ba:69:06:
a6:cd:5b:72:a1:1f:28:5a:c9:ff:31:e9:f4:06:dd:
e9:d4:b2:0d:ca:c0:39:58:d6:f9:a7:2a:3b:54:94:
72:e8:52:d2:3f:f3:9c:d7:4d:07:3e:81:e8:17:d7:
db:16:8f:f6:87:15:af:0f:37:b9:36:f5:82:75:6e:
65:c5:39:00:9a:79:f5:e0:4d:03:86:ed:1c:a7:aa:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EC:DD:82:3E:0A:E0:88:F0:2D:F9:EA:B9:9C:93:49:0A:47:08:F8
X509v3 Authority Key Identifier:
keyid:9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d2:e4:8e:f8:84:db:7f:05:ec:3f:a3:05:50:9a:52:56:f4:
34:cb:0c:09:e5:12:8e:8a:d2:64:19:73:ca:6f:ca:ed:94:f1:
6a:c5:44:6d:4e:ca:48:f8:0d:f7:92:7a:6a:c9:be:de:33:10:
d3:c5:f5:04:7f:44:c2:aa:fb:71:ee:78:5d:1d:9a:e3:58:21:
36:54:e4:72:87:05:a3:74:54:b9:39:be:b8:10:39:f1:13:c3:
de:6d:d2:b2:39:c0:88:82:ad:f2:10:3b:77:f7:da:c7:b0:9d:
64:22:87:7a:6b:92:0e:d4:33:62:41:39:9a:64:31:67:4c:50:
8c:44:45:29:c7:26:f2:92:c9:ae:12:25:af:1a:39:47:26:30:
56:14:95:75:75:c8:a9:cc:f8:1d:ab:99:c2:24:1e:dc:ae:9f:
d4:0c:6e:6d:08:be:db:7d:57:fe:8b:75:7c:d2:6c:b5:ec:92:
1c:8f:44:05:4d:81:74:ca:89:a2:5d:a0:bc:30:0e:bc:1b:dd:
80:44:ee:da:bb:c6:70:5d:9b:ad:cd:d6:5a:50:63:4a:dc:36:
21:57:8f:93:5d:d5:df:10:21:8c:3b:a6:db:55:c8:56:64:13:
e4:9a:7d:8a:cf:db:63:42:ab:22:96:9b:4a:cf:11:6f:a6:83:
fc:a3:d8:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2UyUvv9Xs03eabJ3DoitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMjAxZDQ5MTEwNWJlODc5N2M1ZjJhMzg1YWI0NTZmNWYw
YWYwNWIwHhcNMjUwNDE5MDcwMDMxWhcNMjUwNDIwMDcwMDMxWjAzMTEwLwYDVQQD
EyhiZmVjZGQ4MjNlMGFlMDg4ZjAyZGY5ZWFiOTljOTM0OTBhNDcwOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20Ct3PM0i3W5k83LcD3sPCl/U3By
6Nx6xPCVVR50l2AjLCOszMh/OqX1HU80KH2bCnsdGjdE5E3FzNwkRn+fcY33SS5i
TfLWC3BJ3T4fICs2J7lXavzRnlBMJAvOHMm9+2KMkEyWJOoQXMIPIxkG9w/I0xvi
ZZBcwDWnv23u4K84UoKjrR0I3X+eHkG07H9HSQqTll6dalf2BEWuRLMJB276NGnD
AP+e7vdiu8yRmKO6aQamzVtyoR8oWsn/Men0Bt3p1LINysA5WNb5pyo7VJRy6FLS
P/Oc100HPoHoF9fbFo/2hxWvDze5NvWCdW5lxTkAmnn14E0Dhu0cp6oYNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/s3YI+CuCI8C356rmck0kKRwj4MB8GA1UdIwQY
MBaAFJ4gHUkRBb6Hl8Xyo4WrRW9fCvBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmlBZFNSRUZ2b2VYeGZLamhhdEZiMThLOEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMWRkZWItMmU5Yi00MmJiLTkyNTEt
ZGY0OTFiZDAzNzRlLzEvbmlBZFNSRUZ2b2VYeGZLamhhdEZiMThLOEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jMWRkZWItMmU5Yi00MmJiLTkyNTEtZGY0OTFiZDAzNzRl
LzEvbmlBZFNSRUZ2b2VYeGZLamhhdEZiMThLOEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9LkjviE
238F7D+jBVCaUlb0NMsMCeUSjorSZBlzym/K7ZTxasVEbU7KSPgN95J6asm+3jMQ
08X1BH9Ewqr7ce54XR2a41ghNlTkcocFo3RUuTm+uBA58RPD3m3SsjnAiIKt8hA7
d/fax7CdZCKHemuSDtQzYkE5mmQxZ0xQjERFKccm8pLJrhIlrxo5RyYwVhSVdXXI
qcz4HauZwiQe3K6f1AxubQi+231X/ot1fNJsteySHI9EBU2BdMqJol2gvDAOvBvd
gETu2rvGcF2brc3WWlBjStw2IVePk13V3xAhjDum21XIVmQT5Jp9is/bY0KrIpab
Ss8Rb6aD/KPYJw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:15:10 2025 by rpki-client