Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json)
Hash identifier: z2PD4BbUAWmHLqMY5c2TYJirTr9POuhIBhSFjcfu1IE=
Subject key identifier: D6:68:E7:98:0D:23:30:AD:57:EA:6E:F0:1A:15:8D:E2:3E:55:D9:9A
Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c
Certificate serial: 019646D733923102215293F378661C6D3546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
Manifest number: 0225
Signing time: Fri 18 Apr 2025 03:00:30 +0000
Manifest this update: Fri 18 Apr 2025 03:00:30 +0000
Manifest next update: Sat 19 Apr 2025 03:00:30 +0000
Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: 3j4lOjXHBNGm5VCesEEgjYjK69aT6de4M46rKuTOfuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:33:92:31:02:21:52:93:f3:78:66:1c:6d:35:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c
Validity
Not Before: Apr 18 03:00:30 2025 GMT
Not After : Apr 19 03:00:30 2025 GMT
Subject: CN=d668e7980d2330ad57ea6ef01a158de23e55d99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:37:58:c2:1b:99:f3:cb:0a:ff:f8:0a:f4:66:
fa:9a:ad:4b:a7:26:b5:4a:5c:ca:16:9b:92:02:0b:
82:f4:c4:8a:0d:40:e1:32:bf:4a:25:c3:9b:6e:de:
c6:cd:a2:81:60:02:74:77:ad:07:7e:89:7d:08:77:
54:69:f0:97:89:9c:6b:0d:b7:04:54:74:45:bf:dd:
07:e7:e9:5a:dc:91:67:29:9b:63:44:d9:a8:71:98:
23:4e:e1:50:6f:1a:f4:97:3b:35:08:a5:93:5b:c1:
cc:45:96:57:ae:18:1c:9c:a1:8d:67:09:dc:73:07:
0c:88:7d:9f:1a:6f:37:a7:f3:54:89:6c:ff:1a:21:
be:f9:3b:84:4c:9b:f1:d7:b7:74:b3:e9:83:fd:7b:
17:60:cc:49:bd:26:b5:cf:2e:7a:5c:73:bf:fb:5e:
8d:50:2a:a7:8b:f5:69:ba:72:a7:13:39:34:66:bf:
88:77:36:80:ca:63:a1:24:84:92:e6:44:b9:c2:ef:
cc:8f:5c:05:dc:64:86:06:19:7c:4d:cc:57:70:0a:
fd:3b:46:aa:bc:ed:c3:4d:b5:bf:1d:c7:8d:8b:1b:
4d:d1:d5:2b:50:02:08:2c:67:95:12:7c:cc:b9:22:
e3:37:97:7d:81:89:6e:f1:1f:8d:b6:42:9d:6a:01:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:68:E7:98:0D:23:30:AD:57:EA:6E:F0:1A:15:8D:E2:3E:55:D9:9A
X509v3 Authority Key Identifier:
keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1f:3b:87:1c:80:24:86:3e:11:16:01:da:f6:64:6b:23:f8:
e2:d7:f3:69:48:59:29:03:c3:cf:bc:9a:06:d7:e1:06:52:c7:
81:c6:88:62:dc:e2:75:68:33:0a:46:27:99:fa:41:91:07:b3:
35:e5:a1:1e:83:52:26:63:13:68:28:72:c8:80:da:a8:0b:e6:
73:3a:89:aa:77:82:97:0d:62:98:72:8a:06:56:94:05:dd:70:
d7:20:5d:bc:dc:e4:81:94:44:53:20:5b:83:7b:ea:37:fc:cc:
7d:0c:87:13:e2:1f:7b:5d:dd:e8:be:46:66:04:8e:70:a7:e6:
d8:39:44:eb:00:d5:27:b5:ac:31:b9:af:fc:e4:d9:a0:09:95:
9f:7e:29:78:29:f2:25:de:8d:f0:61:9b:35:ce:7e:1d:ec:80:
8a:a7:82:b3:e2:dd:6b:3a:6e:a7:82:f8:df:c0:a8:aa:86:dc:
8d:b9:20:46:40:bd:24:c9:66:df:f4:f7:05:6c:c3:2a:d3:1d:
68:db:21:7d:23:03:4f:1b:4d:55:d0:4e:4f:e2:04:dc:f4:f5:
8c:67:05:1d:8a:70:b2:01:d7:0f:9c:e8:23:18:cd:e5:ba:d6:
37:0b:8e:41:1e:74:b9:d7:d9:1b:7a:98:01:5e:2e:d8:c2:ef:
d8:16:a1:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZG1zOSMQIhUpPzeGYcbTVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllM2YxNTc5YWUxNzY2NjJkNjYzYTM4MzRjMGZlZjgyNGNl
ZTAzM2MwHhcNMjUwNDE4MDMwMDMwWhcNMjUwNDE5MDMwMDMwWjAzMTEwLwYDVQQD
EyhkNjY4ZTc5ODBkMjMzMGFkNTdlYTZlZjAxYTE1OGRlMjNlNTVkOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTdYwhuZ88sK//gK9Gb6mq1Lpya1
SlzKFpuSAguC9MSKDUDhMr9KJcObbt7GzaKBYAJ0d60Hfol9CHdUafCXiZxrDbcE
VHRFv90H5+la3JFnKZtjRNmocZgjTuFQbxr0lzs1CKWTW8HMRZZXrhgcnKGNZwnc
cwcMiH2fGm83p/NUiWz/GiG++TuETJvx17d0s+mD/XsXYMxJvSa1zy56XHO/+16N
UCqni/VpunKnEzk0Zr+IdzaAymOhJISS5kS5wu/Mj1wF3GSGBhl8TcxXcAr9O0aq
vO3DTbW/HceNixtN0dUrUAIILGeVEnzMuSLjN5d9gYlu8R+NtkKdagF2dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZo55gNIzCtV+pu8BoVjeI+VdmaMB8GA1UdIwQY
MBaAFJ4/FXmuF2Zi1mOjg0wP74JM7gM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NjI4NDAtNTE2OS00ZmYzLTg5Zjkt
NDgwNzM0ZTM4ZGE4LzEvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85NjI4NDAtNTE2OS00ZmYzLTg5ZjktNDgwNzM0ZTM4ZGE4
LzEvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKB87hxyA
JIY+ERYB2vZkayP44tfzaUhZKQPDz7yaBtfhBlLHgcaIYtzidWgzCkYnmfpBkQez
NeWhHoNSJmMTaChyyIDaqAvmczqJqneClw1imHKKBlaUBd1w1yBdvNzkgZREUyBb
g3vqN/zMfQyHE+Ife13d6L5GZgSOcKfm2DlE6wDVJ7WsMbmv/OTZoAmVn34peCny
Jd6N8GGbNc5+HeyAiqeCs+Ldazpup4L438CoqobcjbkgRkC9JMlm3/T3BWzDKtMd
aNshfSMDTxtNVdBOT+IE3PT1jGcFHYpwsgHXD5zoIxjN5brWNwuOQR50udfZG3qY
AV4u2MLv2BahZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:52:30 2025 by rpki-client