Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json)
Hash identifier: GEaTiA69SqiNoKj1QMeHBJiJY9gAI32B9jRftvZo6ZI=
Subject key identifier: 48:FA:16:12:F1:80:4D:5D:9D:DC:AF:F5:DA:34:3D:A5:AA:2B:57:9F
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 019510C7A11A4BD1031A253CA1C12A589CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 22:01:12 +0000
Manifest this update: Sun 16 Feb 2025 22:01:12 +0000
Manifest next update: Mon 17 Feb 2025 22:01:12 +0000
Files and hashes: 1: IAQeRjmmu9Z-veumwyPKfDrKvbI.roa (hash: Ww+1iOsdAQGbUwn6gW9paX3J1FGXxxEHtorVkrDGTZc=)
2: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: Kr4F3cxnI1zinKZnc+M7E9y8XwRimeNxRFR/BfAI/rY=)
3: zE2nCBuCP3GWKcrh09m8L6FV9yA.roa (hash: iLVOHuiEHM03YeDql7RR17g8jhss2HwinXwx77EwMP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:a1:1a:4b:d1:03:1a:25:3c:a1:c1:2a:58:9c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Feb 16 22:01:12 2025 GMT
Not After : Feb 17 22:01:12 2025 GMT
Subject: CN=48fa1612f1804d5d9ddcaff5da343da5aa2b579f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:95:15:30:68:6e:c1:0b:b8:e1:c5:e5:80:
ba:2a:4c:62:41:54:0d:24:66:87:1d:d5:f5:00:df:
7c:2c:d2:78:65:88:96:65:4e:69:1c:69:d7:b6:be:
ab:6d:77:76:ce:a0:e4:c6:d5:b7:29:51:7a:dd:50:
cf:b0:c6:36:19:49:58:0c:f5:75:03:fc:b2:74:11:
f0:c8:4c:25:3c:6f:46:b8:f6:60:e1:b9:12:08:15:
26:f6:66:71:fb:4b:21:06:c6:7b:8c:61:54:fb:57:
52:e5:9b:a3:7b:50:8f:1a:a6:65:41:5b:34:17:9d:
44:af:a1:a1:34:3b:6d:c5:e4:72:dc:b8:44:4c:c7:
9d:c5:93:08:13:5c:8f:05:6d:d4:71:a8:17:b4:33:
3a:43:2e:e5:ec:ec:18:1b:f6:73:f9:eb:d4:3c:1c:
bb:2f:4b:a4:63:19:0d:de:82:87:8f:ef:92:c9:b0:
4d:df:55:81:13:28:1b:e6:b0:8d:58:a9:73:44:eb:
76:97:89:0b:ef:2c:c9:5f:81:04:7a:d2:90:cf:81:
fd:70:58:2d:b6:91:ec:e0:8a:8e:35:ef:27:c1:03:
93:f7:50:a5:f0:57:58:39:39:7b:75:6a:0a:3e:39:
94:74:2f:e5:0b:6e:5d:82:21:97:1a:f2:03:ce:36:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:16:12:F1:80:4D:5D:9D:DC:AF:F5:DA:34:3D:A5:AA:2B:57:9F
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:58:71:51:84:b9:a3:cc:b1:a0:32:ba:78:fb:e0:6c:26:cb:
7a:bd:e4:0c:d8:40:a4:cc:e2:d1:f2:fd:63:3c:60:03:c0:62:
d1:73:92:13:fd:35:9c:c5:ab:64:ad:88:5a:3d:9f:81:89:18:
55:42:5e:e7:fc:00:8b:a3:f8:3c:e8:f3:0c:16:bc:b7:38:30:
d2:d2:ad:16:51:98:e1:a9:4f:29:72:b9:55:09:4a:a6:7f:33:
93:04:4c:8e:20:0b:c4:d1:76:f5:33:9a:86:bc:e9:c7:01:da:
b7:a3:11:d7:6b:c5:09:e8:b0:1a:72:64:0f:1c:b7:d0:8f:27:
e5:1b:c8:25:ef:3e:3d:f0:50:56:18:e7:2b:19:1b:65:ab:0f:
d8:0b:c5:22:e1:f0:34:03:40:fe:83:21:ca:4c:0f:dc:93:4c:
76:c6:72:86:ea:c8:22:2c:46:3f:d2:84:ce:56:31:2a:bc:8a:
4d:34:cd:9f:8e:dd:45:4f:35:86:be:40:22:3b:32:69:be:23:
36:e6:ed:e8:14:c2:13:54:64:32:b1:03:97:47:58:78:85:93:
99:f7:eb:65:2d:66:b3:40:df:d7:86:83:bd:01:dd:75:7f:23:
91:55:77:48:08:27:1e:10:98:86:50:cc:5e:6c:35:4a:cb:0c:
21:74:0d:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx6EaS9EDGiU8ocEqWJzrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmJjM2M1NTY0ZDQzNDM4MWNiNzhiYTQ3YWQ1OGJlNGQz
ZGVhYTgwHhcNMjUwMjE2MjIwMTEyWhcNMjUwMjE3MjIwMTEyWjAzMTEwLwYDVQQD
Eyg0OGZhMTYxMmYxODA0ZDVkOWRkY2FmZjVkYTM0M2RhNWFhMmI1NzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KKVFTBobsELuOHF5YC6KkxiQVQN
JGaHHdX1AN98LNJ4ZYiWZU5pHGnXtr6rbXd2zqDkxtW3KVF63VDPsMY2GUlYDPV1
A/yydBHwyEwlPG9GuPZg4bkSCBUm9mZx+0shBsZ7jGFU+1dS5Zuje1CPGqZlQVs0
F51Er6GhNDttxeRy3LhETMedxZMIE1yPBW3UcagXtDM6Qy7l7OwYG/Zz+evUPBy7
L0ukYxkN3oKHj++SybBN31WBEygb5rCNWKlzROt2l4kL7yzJX4EEetKQz4H9cFgt
tpHs4IqONe8nwQOT91Cl8FdYOTl7dWoKPjmUdC/lC25dgiGXGvIDzjYgNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEj6FhLxgE1dndyv9do0PaWqK1efMB8GA1UdIwQY
MBaAFJ8rw8VWTUNDgct4uketWL5NPeqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1Mjct
NTU0MjYzODE5NTNjLzEvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1MjctNTU0MjYzODE5NTNj
LzEvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVhxUYS5
o8yxoDK6ePvgbCbLer3kDNhApMzi0fL9YzxgA8Bi0XOSE/01nMWrZK2IWj2fgYkY
VUJe5/wAi6P4POjzDBa8tzgw0tKtFlGY4alPKXK5VQlKpn8zkwRMjiALxNF29TOa
hrzpxwHat6MR12vFCeiwGnJkDxy30I8n5RvIJe8+PfBQVhjnKxkbZasP2AvFIuHw
NANA/oMhykwP3JNMdsZyhurIIixGP9KEzlYxKryKTTTNn47dRU81hr5AIjsyab4j
Nubt6BTCE1RkMrEDl0dYeIWTmffrZS1ms0Df14aDvQHddX8jkVV3SAgnHhCYhlDM
Xmw1SssMIXQNrA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:14 2025 by rpki-client