Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier: +qZsHsViTbJErPoddVYw24aE3jYxuqs1Fg+id6gIaZk=
Subject key identifier: CE:C3:C7:3F:24:01:8B:D6:2C:4D:C7:1F:E5:5D:7E:7F:B1:2E:F6:8E
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 01962B97E2CCE321CAE9E11DA786388B484E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number: 14EE
Signing time: Sat 12 Apr 2025 20:01:36 +0000
Manifest this update: Sat 12 Apr 2025 20:01:36 +0000
Manifest next update: Sun 13 Apr 2025 20:01:36 +0000
Files and hashes: 1: 3-Pz_ACqotf_1pTiM38rfDDW65c.roa (hash: +6mxaP3CNTwVlIYMhWG+20r4HZR/llgs3lm8STPmGs0=)
2: 9kX4GrtqMRWRvdlXwe-ZIc9Ou2o.roa (hash: 6kYLXGHct4tBz4Kt7RTp0Yq24Dr5ZTh8EftVQx18Anw=)
3: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: q6KXJg0Km1ZTRXRf665i47fPnU8LN922HsK9ZxRGqWQ=)
4: PuYFjQeAMPYTJknY4a9xdl9WjmI.roa (hash: E2/hGT1MU9NO8befK4BGLovPtwxuEyai1B8Xt8zA7+A=)
5: QRbrmHMbnacFIghz2vQJ1iEwIPo.roa (hash: gpC7d4/OhCyOZcpUbHREfEufrTPs9FXkeTxWhp4MXlw=)
6: avUi3YjwZnz0yzUPnJu4Y8PDkW0.roa (hash: mWS6jEEzpU5C/mf65CgMVs1ygfIg+nXboKeBb7STrRk=)
7: nTWU5WV73x998fb6pecneWzKHj0.roa (hash: m9Al1FOb5Ruq1WL/BIhpl9I/8AOLD6hHB+5Qi5PqY4A=)
8: pnddHirjNCKxYSqPtn_sWaDmNxU.roa (hash: HVJptrd3yeSfrIUH7AUm9UPFYH8L+twTA4AttYwqX2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:97:e2:cc:e3:21:ca:e9:e1:1d:a7:86:38:8b:48:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Apr 12 20:01:36 2025 GMT
Not After : Apr 13 20:01:36 2025 GMT
Subject: CN=cec3c73f24018bd62c4dc71fe55d7e7fb12ef68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ff:a9:54:38:d4:9e:b1:af:ab:d4:01:78:44:
05:2a:df:64:8f:5b:ae:17:12:d9:1a:24:d3:31:ab:
e1:c5:6e:6e:30:ec:12:15:c6:f3:ae:e5:f3:61:29:
03:aa:68:03:c4:49:74:f6:f3:32:46:db:c1:03:97:
a6:6d:18:46:ce:c3:41:93:9d:23:8d:b2:1a:0c:86:
08:44:38:95:fe:c8:87:96:49:71:a6:d0:2b:0c:76:
1b:54:9e:b7:67:77:db:12:e1:e6:f0:fc:93:cf:7c:
1d:05:fb:ff:35:72:60:ff:4c:78:15:6d:1e:d3:fb:
0d:6f:a1:68:a7:e6:88:19:93:21:98:0d:4a:d6:4b:
6e:ce:aa:4b:f3:76:2e:df:b5:e3:99:d1:86:1b:b2:
d9:22:e7:9d:af:6e:98:3a:3a:df:bc:42:23:35:60:
89:e0:2f:6c:3f:58:e9:3c:c7:77:34:94:ab:76:2f:
a0:25:ce:cb:96:5a:9c:e8:a9:93:d5:d8:d1:6e:3a:
2e:95:b6:3d:0b:f6:8e:08:d8:de:1d:60:20:65:9d:
7c:6f:7c:db:b3:aa:7f:62:e4:45:0d:26:b3:75:d9:
22:2f:d2:a7:72:ad:1d:9b:a2:82:73:bb:fa:05:44:
e1:1a:f2:ba:d4:98:e0:ce:09:2a:f8:8c:26:86:4b:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C3:C7:3F:24:01:8B:D6:2C:4D:C7:1F:E5:5D:7E:7F:B1:2E:F6:8E
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8a:96:00:7a:8b:5f:15:28:5f:28:6e:79:5a:d7:1e:e1:ee:
d3:8c:0b:dd:67:b8:43:49:ba:ee:6f:2c:1c:8d:7d:9c:88:b1:
ab:dd:04:c6:f7:ef:9e:98:63:8d:60:0e:2f:80:64:50:dc:d2:
77:81:c6:9f:d1:e2:a3:20:60:e5:1d:10:8e:1e:a4:b2:fa:31:
59:40:ec:ca:fa:17:67:79:bb:0a:fe:0a:13:56:28:11:04:10:
15:aa:8a:0a:07:c6:cf:f0:1f:4f:fe:12:10:90:a4:b0:20:3c:
b4:b4:41:60:e4:3f:2a:1c:52:0c:05:89:e7:18:62:a9:07:5b:
66:29:2e:86:5f:53:fa:f6:96:60:7d:00:75:bb:9a:10:f4:d0:
db:5e:64:c2:35:d7:2b:66:e8:d8:8c:ec:7f:49:f9:de:db:bd:
af:67:f4:e9:e4:a9:6c:26:f5:aa:fd:c8:1b:80:e8:8b:4c:1b:
9b:c6:3f:0b:4a:9d:d8:32:54:e7:f7:48:b8:8d:7b:6f:f0:af:
50:31:37:33:3d:55:2d:2d:f4:e8:ee:7c:f8:bf:28:8e:76:2e:
6d:8c:ec:3a:26:98:b4:8b:02:30:13:d6:c0:e7:5a:14:90:df:
85:8d:c6:18:1d:bb:21:11:6b:bf:a5:12:a3:a7:93:14:25:0d:
aa:6a:66:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYrl+LM4yHK6eEdp4Y4i0hOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmIwMDRlMzk3ZGRmMDRlN2QwNWYzNjQzYTAzNmYyMTgz
NmZmMTAwHhcNMjUwNDEyMjAwMTM2WhcNMjUwNDEzMjAwMTM2WjAzMTEwLwYDVQQD
EyhjZWMzYzczZjI0MDE4YmQ2MmM0ZGM3MWZlNTVkN2U3ZmIxMmVmNjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8f+pVDjUnrGvq9QBeEQFKt9kj1uu
FxLZGiTTMavhxW5uMOwSFcbzruXzYSkDqmgDxEl09vMyRtvBA5embRhGzsNBk50j
jbIaDIYIRDiV/siHlklxptArDHYbVJ63Z3fbEuHm8PyTz3wdBfv/NXJg/0x4FW0e
0/sNb6Fop+aIGZMhmA1K1ktuzqpL83Yu37XjmdGGG7LZIuedr26YOjrfvEIjNWCJ
4C9sP1jpPMd3NJSrdi+gJc7Lllqc6KmT1djRbjoulbY9C/aOCNjeHWAgZZ18b3zb
s6p/YuRFDSazddkiL9Kncq0dm6KCc7v6BUThGvK61Jjgzgkq+IwmhktBCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7Dxz8kAYvWLE3HH+Vdfn+xLvaOMB8GA1UdIwQY
MBaAFDf7AE45fd8E59BfNkOgNvIYNv8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEt
YjUzYjY0Y2YwZDk1LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEtYjUzYjY0Y2YwZDk1
LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4qWAHqL
XxUoXyhueVrXHuHu04wL3We4Q0m67m8sHI19nIixq90ExvfvnphjjWAOL4BkUNzS
d4HGn9HioyBg5R0Qjh6ksvoxWUDsyvoXZ3m7Cv4KE1YoEQQQFaqKCgfGz/AfT/4S
EJCksCA8tLRBYOQ/KhxSDAWJ5xhiqQdbZikuhl9T+vaWYH0AdbuaEPTQ215kwjXX
K2bo2Izsf0n53tu9r2f06eSpbCb1qv3IG4Doi0wbm8Y/C0qd2DJU5/dIuI17b/Cv
UDE3Mz1VLS306O58+L8ojnYubYzsOiaYtIsCMBPWwOdaFJDfhY3GGB27IRFrv6US
o6eTFCUNqmpmqA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:12:17 2025 by rpki-client