Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File: nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier: nd8kgByBRp31/aJfc/ZRWXmFIy70AT/BG8XoZBvoFXo=
Subject key identifier: BF:72:B1:1F:16:EC:E9:75:5B:95:83:E3:FB:87:AD:C3:AF:65:F7:EE
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial: 01964FA37BA93AEF58F10C1C133BE6001FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 20:00:36 +0000
Manifest this update: Sat 19 Apr 2025 20:00:36 +0000
Manifest next update: Sun 20 Apr 2025 20:00:36 +0000
Files and hashes: 1: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: NTANfwiM+37RvCV8vemRKw6k0GFz54xS3D2TAIxF+tc=)
2: pbhnhbhAo7f81mspcf47i1RiwC4.roa (hash: cy6NBeCA9q+KpxmPFPQqLF3HwYWfNZwADzV/UaXEKik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:7b:a9:3a:ef:58:f1:0c:1c:13:3b:e6:00:1f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
Validity
Not Before: Apr 19 20:00:36 2025 GMT
Not After : Apr 20 20:00:36 2025 GMT
Subject: CN=bf72b11f16ece9755b9583e3fb87adc3af65f7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:b8:57:b5:27:5a:fc:39:58:26:7a:92:ef:
5a:96:c0:4d:a8:f7:12:0f:4b:bf:a2:af:1f:85:46:
d8:54:80:4e:53:0a:65:e7:e1:4b:42:05:43:4d:ab:
7f:8c:5c:f9:14:a6:3e:25:4f:c1:02:a5:a9:1c:06:
9e:17:bb:f8:ca:a8:96:41:4d:da:38:7d:54:71:51:
ac:36:87:45:db:6c:77:66:36:6a:9f:db:e4:d8:51:
8f:20:2a:50:08:e5:5b:27:21:5c:0d:50:d3:90:29:
5c:f2:25:1e:a9:17:7f:8a:6b:3a:72:bf:d9:17:c0:
5b:7d:30:48:48:de:1d:c2:de:62:9d:05:ae:db:d5:
55:2f:cd:cb:aa:82:9f:e2:1c:1d:86:d7:80:46:df:
a9:3d:78:7c:53:ac:38:54:4e:a1:6e:e6:89:72:13:
5e:65:ff:9c:5c:11:bf:d3:3b:1a:f6:0f:dd:26:e1:
ec:db:03:0e:48:6a:ca:7e:90:80:72:c9:3d:94:65:
c4:aa:61:05:e7:d7:96:2f:84:c3:a0:e2:92:97:15:
7d:81:27:fa:32:7f:ca:2f:f6:a0:33:48:ae:ea:8b:
cf:29:d3:b6:76:80:c8:49:2a:19:61:7b:84:f4:fa:
17:12:6a:c1:9e:71:ff:2b:f3:ab:42:b2:2d:2a:83:
ae:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:72:B1:1F:16:EC:E9:75:5B:95:83:E3:FB:87:AD:C3:AF:65:F7:EE
X509v3 Authority Key Identifier:
keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:32:44:27:1d:51:f8:aa:19:c1:f0:d8:5c:f2:46:b7:c5:57:
d2:dd:d5:45:59:ce:ce:c4:10:18:cc:d4:65:90:71:05:fb:df:
46:b5:50:70:dd:fe:23:5b:46:82:3f:97:f3:9a:a9:46:8b:9d:
33:ef:95:50:bd:7b:a1:4c:dd:95:d2:55:49:75:f9:57:2b:9e:
16:90:8a:5b:3e:b1:a4:03:68:7b:e9:7a:f8:9b:4c:e4:d9:63:
f8:85:e7:8c:96:27:aa:aa:5a:a3:99:82:eb:72:5c:00:82:d3:
ad:80:fa:1c:37:17:07:17:02:2e:62:05:5f:42:a8:4f:99:64:
d0:1d:a7:0e:c3:cf:ee:fe:1f:e1:42:ea:df:9c:5e:69:3d:e4:
30:c9:78:97:38:64:35:94:3d:29:20:f6:71:70:81:e0:9c:ed:
46:29:b3:57:5b:25:b7:a9:31:4e:29:89:b7:99:12:a3:a2:9f:
bb:46:97:13:94:c8:22:60:a2:c8:5d:10:18:03:09:b8:cc:54:
a3:12:05:aa:72:49:b3:be:35:bd:ce:0c:e7:8e:6c:a5:f1:91:
f9:08:fa:8f:ec:5e:44:c0:5e:bc:c3:c9:3a:45:b0:5e:94:86:
5c:42:97:8b:06:ff:ed:93:fe:fa:6a:b3:fd:d4:5e:b1:5c:63:
d7:63:f0:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPo3upOu9Y8QwcEzvmAB//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNTgxZmY4OTU0YTg5NzhiMzRkODQ5MTAxNTQ2Y2NlNjFj
NGFmYTMwHhcNMjUwNDE5MjAwMDM2WhcNMjUwNDIwMjAwMDM2WjAzMTEwLwYDVQQD
EyhiZjcyYjExZjE2ZWNlOTc1NWI5NTgzZTNmYjg3YWRjM2FmNjVmN2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiy4V7UnWvw5WCZ6ku9alsBNqPcS
D0u/oq8fhUbYVIBOUwpl5+FLQgVDTat/jFz5FKY+JU/BAqWpHAaeF7v4yqiWQU3a
OH1UcVGsNodF22x3ZjZqn9vk2FGPICpQCOVbJyFcDVDTkClc8iUeqRd/ims6cr/Z
F8BbfTBISN4dwt5inQWu29VVL83LqoKf4hwdhteARt+pPXh8U6w4VE6hbuaJchNe
Zf+cXBG/0zsa9g/dJuHs2wMOSGrKfpCAcsk9lGXEqmEF59eWL4TDoOKSlxV9gSf6
Mn/KL/agM0iu6ovPKdO2doDISSoZYXuE9PoXEmrBnnH/K/OrQrItKoOu1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9ysR8W7Ol1W5WD4/uHrcOvZffuMB8GA1UdIwQY
MBaAFJ1YH/iVSol4s02EkQFUbM5hxK+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYjNmMmYtMTRhZS00NjRiLTliN2Mt
Nzk4MGEyZTIzMDA3LzEvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYjNmMmYtMTRhZS00NjRiLTliN2MtNzk4MGEyZTIzMDA3
LzEvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjJEJx1R
+KoZwfDYXPJGt8VX0t3VRVnOzsQQGMzUZZBxBfvfRrVQcN3+I1tGgj+X85qpRoud
M++VUL17oUzdldJVSXX5VyueFpCKWz6xpANoe+l6+JtM5Nlj+IXnjJYnqqpao5mC
63JcAILTrYD6HDcXBxcCLmIFX0KoT5lk0B2nDsPP7v4f4ULq35xeaT3kMMl4lzhk
NZQ9KSD2cXCB4JztRimzV1slt6kxTimJt5kSo6Kfu0aXE5TIImCiyF0QGAMJuMxU
oxIFqnJJs741vc4M545spfGR+Qj6j+xeRMBevMPJOkWwXpSGXEKXiwb/7ZP++mqz
/dResVxj12PwMQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:25 2025 by rpki-client