Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json)
Hash identifier: eHbWhV2TgyoixayNIyJF2z1B6yqFx2hBOVmwQdNgDHI=
Subject key identifier: 6A:52:80:E1:2D:87:7B:53:DF:C9:35:89:CA:64:37:3E:31:70:2D:E3
Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Certificate serial: 01958F2AD4273ED3DB9AE7E8994C64D94B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
Manifest number: 1495
Signing time: Thu 13 Mar 2025 11:01:43 +0000
Manifest this update: Thu 13 Mar 2025 11:01:43 +0000
Manifest next update: Fri 14 Mar 2025 11:01:43 +0000
Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: dQLtJkXY8YVfXK7/b8C5oSbK7ku4lxsNN2agixLhvYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:d4:27:3e:d3:db:9a:e7:e8:99:4c:64:d9:4b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Validity
Not Before: Mar 13 11:01:43 2025 GMT
Not After : Mar 14 11:01:43 2025 GMT
Subject: CN=6a5280e12d877b53dfc93589ca64373e31702de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:30:5e:b8:5c:8c:e7:8d:2c:57:ae:53:64:
e2:5b:45:5f:db:80:1b:f0:b3:11:6b:bd:5c:5f:89:
c8:65:67:40:cb:19:7e:10:bc:0b:3f:22:10:06:2a:
40:bf:73:1b:50:14:a2:8e:f7:ca:d4:2f:df:87:83:
b7:22:19:f5:97:b1:eb:93:c2:5b:ba:ef:8a:2b:b0:
3e:65:15:33:95:c8:c2:ad:bb:0e:e1:91:49:6f:28:
e3:44:11:00:77:07:74:e3:3c:05:7c:69:d5:39:d1:
73:bd:21:18:c4:85:62:cd:27:e1:80:c7:37:f3:1f:
5d:3f:42:b6:89:a4:94:9f:7d:e8:ff:b2:02:60:d8:
51:af:ce:83:75:da:b4:da:a0:be:a8:18:28:93:21:
18:01:67:b3:b3:b1:22:03:52:c9:8d:7f:02:02:68:
81:92:d3:f5:5a:49:67:28:66:6c:7f:61:d7:ce:9b:
ca:34:11:b8:03:ed:eb:de:68:81:0c:37:a6:79:e2:
dd:39:ad:25:2e:f6:aa:0c:4d:dd:68:36:d5:b9:58:
e1:51:88:73:eb:a0:d9:45:c4:bd:72:b6:dc:23:12:
f7:e8:8a:0e:6b:5c:62:86:89:33:70:2d:f7:f3:3c:
18:00:2e:9f:40:a5:ea:3e:56:4b:a0:6d:30:22:5d:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:52:80:E1:2D:87:7B:53:DF:C9:35:89:CA:64:37:3E:31:70:2D:E3
X509v3 Authority Key Identifier:
keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4a:be:f8:81:4e:1f:5e:88:57:bd:02:81:ac:dc:36:e2:9f:
8c:ae:ed:ca:ab:f3:22:45:d5:c5:c0:17:f9:5a:7b:a8:8f:70:
c7:33:b5:ed:b6:08:6d:ee:6c:d8:55:4c:9a:47:36:95:8b:a0:
ce:4d:39:91:8e:1f:4c:c1:65:fb:a8:38:8b:c4:6f:4b:05:f1:
d8:e3:70:40:4d:b6:f5:e6:ee:d5:13:d1:27:c0:ad:9b:ab:67:
12:0d:e7:72:dc:1a:92:8a:fd:02:d6:55:0c:76:04:52:48:d5:
60:4a:c5:38:d6:57:ce:3d:6f:96:54:50:23:22:63:90:ae:ba:
4c:72:f5:48:4b:dd:96:0f:ff:a7:38:2d:4f:41:29:02:7f:20:
ef:57:48:e1:93:81:59:34:d4:aa:b0:b7:37:d3:aa:4b:90:f5:
ef:69:90:95:de:9e:93:9b:ca:8b:ad:69:ed:fc:1d:00:f4:84:
a6:04:40:69:d9:ad:16:bc:3f:f9:24:1e:33:89:ce:b1:14:59:
87:42:c3:c2:10:6c:c1:80:b0:78:68:79:8e:1e:93:62:c0:69:
2c:78:d4:83:1a:69:5b:57:1c:84:25:b4:cb:57:ff:d5:35:f8:
a7:80:e3:93:c6:bd:f9:74:7d:6f:ec:c6:48:c2:8c:2d:61:22:
ba:e4:cd:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPKtQnPtPbmufomUxk2UtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjM1OTY1NDZkNDYyMGIwMmE5NjQyZjA4Yjc3Y2ZlNjUw
MmFlOTkwHhcNMjUwMzEzMTEwMTQzWhcNMjUwMzE0MTEwMTQzWjAzMTEwLwYDVQQD
Eyg2YTUyODBlMTJkODc3YjUzZGZjOTM1ODljYTY0MzczZTMxNzAyZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rMwXrhcjOeNLFeuU2TiW0Vf24Ab
8LMRa71cX4nIZWdAyxl+ELwLPyIQBipAv3MbUBSijvfK1C/fh4O3Ihn1l7Hrk8Jb
uu+KK7A+ZRUzlcjCrbsO4ZFJbyjjRBEAdwd04zwFfGnVOdFzvSEYxIVizSfhgMc3
8x9dP0K2iaSUn33o/7ICYNhRr86Dddq02qC+qBgokyEYAWezs7EiA1LJjX8CAmiB
ktP1WklnKGZsf2HXzpvKNBG4A+3r3miBDDemeeLdOa0lLvaqDE3daDbVuVjhUYhz
66DZRcS9crbcIxL36IoOa1xihokzcC338zwYAC6fQKXqPlZLoG0wIl0k/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpSgOEth3tT38k1icpkNz4xcC3jMB8GA1UdIwQY
MBaAFK/zWWVG1GILAqlkLwi3fP5lAq6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wMjk5ZjQtZDAwZC00NTdjLWJiNjct
MmFiOWFmOTM4NDM0LzEvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wMjk5ZjQtZDAwZC00NTdjLWJiNjctMmFiOWFmOTM4NDM0
LzEvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkq++IFO
H16IV70CgazcNuKfjK7tyqvzIkXVxcAX+Vp7qI9wxzO17bYIbe5s2FVMmkc2lYug
zk05kY4fTMFl+6g4i8RvSwXx2ONwQE229ebu1RPRJ8Ctm6tnEg3nctwakor9AtZV
DHYEUkjVYErFONZXzj1vllRQIyJjkK66THL1SEvdlg//pzgtT0EpAn8g71dI4ZOB
WTTUqrC3N9OqS5D172mQld6ek5vKi61p7fwdAPSEpgRAadmtFrw/+SQeM4nOsRRZ
h0LDwhBswYCweGh5jh6TYsBpLHjUgxppW1cchCW0y1f/1TX4p4Djk8a9+XR9b+zG
SMKMLWEiuuTN3A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:34 2025 by rpki-client