Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
File: N0u2qfskWk-vy41iHRx19Z1uyhk.mft (raw, json)
Hash identifier: 5mY1g5My/vm//b9gJo3Rata4rX11pma9OUFeivcDLLU=
Subject key identifier: AE:66:A6:6D:FA:97:CF:ED:21:E1:64:82:29:01:CB:42:68:5D:75:58
Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
Certificate issuer: /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Certificate serial: 01962CAAF04DB52379441CDE201FEB0084F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
Manifest number: 036E
Signing time: Sun 13 Apr 2025 01:02:02 +0000
Manifest this update: Sun 13 Apr 2025 01:02:02 +0000
Manifest next update: Mon 14 Apr 2025 01:02:02 +0000
Files and hashes: 1: N0u2qfskWk-vy41iHRx19Z1uyhk.crl (hash: zhxvlnRucHYojsEv1gE/xsCq9xLyFwud7kxF4Upsqyk=)
2: W09Hs7YV_rlCMmFfP5OjxUCv0DQ.roa (hash: zUsXUKlv5KVQErO/W3pmAzbRpm0hLO9n4LhnJ2Df8ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:aa:f0:4d:b5:23:79:44:1c:de:20:1f:eb:00:84:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Validity
Not Before: Apr 13 01:02:02 2025 GMT
Not After : Apr 14 01:02:02 2025 GMT
Subject: CN=ae66a66dfa97cfed21e164822901cb42685d7558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:37:68:ad:c5:cf:b2:8d:0b:43:1d:5c:ed:
68:f3:1d:14:5c:d3:1d:0c:f2:fb:16:7b:ce:01:0a:
47:ce:58:d1:db:fb:96:e3:79:bc:a5:08:06:62:96:
19:6c:59:52:d0:47:db:c8:43:71:34:c4:50:7f:b2:
2a:f4:7d:37:6c:fe:d7:a9:dd:76:f2:6d:c6:70:ac:
45:c0:ab:4f:e8:49:36:49:7f:69:21:00:fb:97:80:
e7:c0:55:49:42:64:33:44:8a:c5:c2:83:99:f3:55:
b3:6a:9f:bc:15:13:27:e1:86:14:d7:3a:8e:27:72:
d7:a0:3f:9a:5c:94:df:fb:72:11:75:ce:93:dc:1e:
10:f5:b7:03:a4:c2:9b:81:25:b3:6a:83:1b:04:b4:
cb:57:ec:c6:66:e5:9d:c9:04:e4:25:38:de:2f:ec:
51:c9:69:03:08:a4:1f:c4:79:3c:d2:3e:03:33:5c:
6f:d9:ba:8b:f6:c2:ba:5b:8d:2d:80:4b:e3:4d:08:
0d:0d:15:41:47:74:a7:b4:d7:7e:d1:d2:0b:3c:43:
93:2c:c7:fc:b7:2d:77:07:f1:7b:3d:df:0c:8f:ac:
ab:2a:2e:9b:43:1d:35:f1:89:8f:52:09:0f:67:a5:
9f:32:5e:21:c7:f8:c6:f7:f5:d5:b5:1f:4e:9e:17:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:66:A6:6D:FA:97:CF:ED:21:E1:64:82:29:01:CB:42:68:5D:75:58
X509v3 Authority Key Identifier:
keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:be:f2:d7:87:f4:fc:5d:bc:8f:88:79:75:56:7b:cb:7f:04:
24:1d:98:72:f5:d9:6a:f0:4e:e6:c5:65:f0:ab:52:3b:2b:4e:
ce:89:a5:91:de:52:2a:b5:be:4d:09:5e:41:2e:50:5f:59:87:
2a:e4:a8:ac:69:90:a4:d5:48:3f:15:6b:96:29:8c:aa:5a:19:
8c:7d:8f:cd:36:d5:39:73:0a:84:a9:a7:22:10:05:f8:e3:8e:
1e:61:ea:77:c7:6c:d3:48:d1:9f:90:2b:01:46:e0:a0:aa:49:
bd:65:44:bf:e7:7c:25:a9:b6:b0:e5:7c:cc:da:5f:96:9e:10:
fd:44:e8:71:2b:b1:ab:4e:60:f5:30:00:4b:ae:d8:53:f6:99:
d3:b3:f7:42:67:b0:85:a9:04:de:0e:cf:e6:f9:c1:a6:34:29:
2c:30:57:0f:81:d3:9c:26:49:f8:cc:9f:61:5f:a6:72:94:6b:
b6:e9:a5:68:5c:43:05:7a:f4:7c:29:20:29:81:d2:b2:43:eb:
9a:b0:10:78:4c:9f:4c:92:4d:1c:2f:76:72:f7:82:85:f3:87:
c4:a1:b0:3a:7e:ef:e1:ea:b0:5a:21:75:d6:d3:30:ed:43:e4:
b5:88:7f:4d:24:e2:62:b8:b8:ec:40:54:09:ff:27:4e:8a:64:
08:1f:6b:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYsqvBNtSN5RBzeIB/rAIT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGJiNmE5ZmIyNDVhNGZhZmNiOGQ2MjFkMWM3NWY1OWQ2
ZWNhMTkwHhcNMjUwNDEzMDEwMjAyWhcNMjUwNDE0MDEwMjAyWjAzMTEwLwYDVQQD
EyhhZTY2YTY2ZGZhOTdjZmVkMjFlMTY0ODIyOTAxY2I0MjY4NWQ3NTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6k3aK3Fz7KNC0MdXO1o8x0UXNMd
DPL7FnvOAQpHzljR2/uW43m8pQgGYpYZbFlS0EfbyENxNMRQf7Iq9H03bP7Xqd12
8m3GcKxFwKtP6Ek2SX9pIQD7l4DnwFVJQmQzRIrFwoOZ81Wzap+8FRMn4YYU1zqO
J3LXoD+aXJTf+3IRdc6T3B4Q9bcDpMKbgSWzaoMbBLTLV+zGZuWdyQTkJTjeL+xR
yWkDCKQfxHk80j4DM1xv2bqL9sK6W40tgEvjTQgNDRVBR3SntNd+0dILPEOTLMf8
ty13B/F7Pd8Mj6yrKi6bQx018YmPUgkPZ6WfMl4hx/jG9/XVtR9OnhemAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5mpm36l8/tIeFkgikBy0JoXXVYMB8GA1UdIwQY
MBaAFDdLtqn7JFpPr8uNYh0cdfWdbsoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTIt
ZjIyNmIxNDRhODlhLzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTItZjIyNmIxNDRhODlh
LzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD77y14f0
/F28j4h5dVZ7y38EJB2YcvXZavBO5sVl8KtSOytOzomlkd5SKrW+TQleQS5QX1mH
KuSorGmQpNVIPxVrlimMqloZjH2PzTbVOXMKhKmnIhAF+OOOHmHqd8ds00jRn5Ar
AUbgoKpJvWVEv+d8Jam2sOV8zNpflp4Q/UTocSuxq05g9TAAS67YU/aZ07P3Qmew
hakE3g7P5vnBpjQpLDBXD4HTnCZJ+MyfYV+mcpRrtumlaFxDBXr0fCkgKYHSskPr
mrAQeEyfTJJNHC92cveChfOHxKGwOn7v4eqwWiF11tMw7UPktYh/TSTiYri47EBU
Cf8nTopkCB9r0g==
-----END CERTIFICATE-----
Generated at Sun Apr 13 05:34:14 2025 by rpki-client