Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: EpLnNrmfMBRteG3MhHlmkIUe0fK/yhMx+Mwqceu7mqo=
Subject key identifier: 6C:27:29:12:15:A9:47:BB:8A:23:B5:98:FD:F7:7A:DB:28:EE:4C:03
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 0195127E1AB5EFF2095D5A5069C3170217B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 131F
Signing time: Mon 17 Feb 2025 06:00:09 +0000
Manifest this update: Mon 17 Feb 2025 06:00:09 +0000
Manifest next update: Tue 18 Feb 2025 06:00:09 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: gHRJEW+L9q+8+GMIQn0KwYRIXAoqvC48yEQootfjjro=)
2: i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa (hash: F0HuxkG9RZJHtx6EFFj7jJPD9PIqUuIoXshg3545UXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:1a:b5:ef:f2:09:5d:5a:50:69:c3:17:02:17:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Feb 17 06:00:09 2025 GMT
Not After : Feb 18 06:00:09 2025 GMT
Subject: CN=6c27291215a947bb8a23b598fdf77adb28ee4c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:32:9a:32:09:dc:c4:0c:11:71:02:da:24:
56:9a:ec:0b:d1:d2:e6:7d:1f:91:4f:70:99:87:1a:
fc:21:80:a6:e2:fe:7f:a4:9f:68:20:bf:18:ea:f8:
0f:fe:87:37:aa:3e:1f:13:97:da:77:74:43:39:f3:
2f:71:9c:33:03:b1:cd:fd:16:ac:9b:5f:43:2d:6a:
47:95:af:91:d5:9b:11:35:c5:e2:db:ef:cb:24:e3:
4e:5b:ab:98:07:c2:07:fa:b7:f1:41:fd:ab:5e:80:
6b:dd:be:88:27:a2:98:ae:a3:6b:0d:d1:41:5f:0e:
e3:f0:b3:4a:02:d1:cf:3c:d2:ef:0b:00:6c:8b:43:
21:86:77:0e:2d:19:40:3b:85:a2:d9:de:cf:38:92:
98:9b:3b:b1:7e:14:d3:22:ec:f4:78:7c:c5:05:5d:
9d:f7:bf:ef:3e:f1:61:51:9d:6d:24:ca:05:f2:b2:
d1:08:dd:78:b5:e2:6e:64:bd:9e:65:99:81:c1:ad:
09:ad:ba:e5:41:13:75:56:d3:0a:0f:4b:d8:f2:fe:
fd:97:eb:f1:be:48:0a:6f:43:1a:0d:78:25:6d:9c:
e2:0f:bc:c7:5d:84:97:db:93:f9:87:0b:9a:fa:ea:
4b:8d:8c:51:90:95:bc:ce:08:35:44:24:41:c9:b9:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:27:29:12:15:A9:47:BB:8A:23:B5:98:FD:F7:7A:DB:28:EE:4C:03
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:da:a1:29:94:48:4e:4d:86:e0:eb:c6:68:1f:3f:08:54:35:
7e:28:cd:5f:be:a7:1c:8a:42:0b:16:06:ec:16:0e:ed:46:8c:
e6:40:8b:a1:d1:3d:6a:9c:71:18:c3:ce:e8:fe:f6:d3:8c:4b:
11:40:d4:1b:b0:aa:08:85:e9:f0:e2:be:2f:8f:eb:3e:02:59:
4d:00:63:a1:6b:dd:30:a0:c7:f5:cf:cb:0d:e8:9c:76:40:4d:
48:92:96:cc:a5:69:dd:04:8e:c2:af:af:ae:a0:c3:40:e7:84:
3e:15:5a:c8:b7:9c:44:fd:26:e8:97:bc:d0:ad:e0:40:44:5d:
bc:5c:ae:8a:09:d3:19:d2:e8:e8:97:f4:7d:79:56:02:df:8c:
60:3e:03:dd:ee:19:5a:68:c4:5c:23:fd:e9:31:3c:d7:d2:1d:
30:98:08:39:55:d8:ed:59:cd:aa:c8:ad:2a:87:e6:4a:bf:ae:
41:c4:07:c0:d3:64:74:af:24:7b:bc:e3:7e:b6:7b:99:2a:f1:
3a:bc:26:7a:b8:52:f5:9d:c9:23:7d:33:fb:d3:08:f6:e1:05:
7b:67:13:c8:3a:f7:e7:ac:e7:8a:6a:a0:7c:9c:4a:6d:28:2e:
89:cd:75:6e:43:7e:6e:65:6b:b0:46:70:58:b3:69:ea:ec:ca:
3c:b4:d0:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfhq17/IJXVpQacMXAhe3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MDA0NWY3ZDgzY2ViMTMwZDhkNjk1ZmZlN2Q0M2RiMzgx
OWRlNTUwHhcNMjUwMjE3MDYwMDA5WhcNMjUwMjE4MDYwMDA5WjAzMTEwLwYDVQQD
Eyg2YzI3MjkxMjE1YTk0N2JiOGEyM2I1OThmZGY3N2FkYjI4ZWU0YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWQymjIJ3MQMEXEC2iRWmuwL0dLm
fR+RT3CZhxr8IYCm4v5/pJ9oIL8Y6vgP/oc3qj4fE5fad3RDOfMvcZwzA7HN/Ras
m19DLWpHla+R1ZsRNcXi2+/LJONOW6uYB8IH+rfxQf2rXoBr3b6IJ6KYrqNrDdFB
Xw7j8LNKAtHPPNLvCwBsi0MhhncOLRlAO4Wi2d7POJKYmzuxfhTTIuz0eHzFBV2d
97/vPvFhUZ1tJMoF8rLRCN14teJuZL2eZZmBwa0JrbrlQRN1VtMKD0vY8v79l+vx
vkgKb0MaDXglbZziD7zHXYSX25P5hwua+upLjYxRkJW8zgg1RCRBybnXpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwnKRIVqUe7iiO1mP33etso7kwDMB8GA1UdIwQY
MBaAFDUARffYPOsTDY1pX/59Q9s4Gd5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQt
NDhlMzBlMmY3YzM2LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQtNDhlMzBlMmY3YzM2
LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtqhKZRI
Tk2G4OvGaB8/CFQ1fijNX76nHIpCCxYG7BYO7UaM5kCLodE9apxxGMPO6P7204xL
EUDUG7CqCIXp8OK+L4/rPgJZTQBjoWvdMKDH9c/LDeicdkBNSJKWzKVp3QSOwq+v
rqDDQOeEPhVayLecRP0m6Je80K3gQERdvFyuignTGdLo6Jf0fXlWAt+MYD4D3e4Z
WmjEXCP96TE819IdMJgIOVXY7VnNqsitKofmSr+uQcQHwNNkdK8ke7zjfrZ7mSrx
OrwmerhS9Z3JI30z+9MI9uEFe2cTyDr356znimqgfJxKbSguic11bkN+bmVrsEZw
WLNp6uzKPLTQWQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:56 2025 by rpki-client