Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
File: NdB1rqTOzB1391EfQdd8pTMCpvY.mft (raw, json)
Hash identifier: 5djA0DBHRVReOe5s0r2Sd+IRG6JkkUfvBl+yrLrCyQQ=
Subject key identifier: B6:3F:BB:1A:8A:91:79:41:11:CA:77:CA:45:28:8A:4A:69:31:99:10
Authority key identifier: 35:D0:75:AE:A4:CE:CC:1D:77:F7:51:1F:41:D7:7C:A5:33:02:A6:F6
Certificate issuer: /CN=35d075aea4cecc1d77f7511f41d77ca53302a6f6
Certificate serial: 0194C4D13C16924FD9C66F042B3E318B0D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdB1rqTOzB1391EfQdd8pTMCpvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
Manifest number: 0884
Signing time: Sun 02 Feb 2025 04:00:34 +0000
Manifest this update: Sun 02 Feb 2025 04:00:34 +0000
Manifest next update: Mon 03 Feb 2025 04:00:34 +0000
Files and hashes: 1: NdB1rqTOzB1391EfQdd8pTMCpvY.crl (hash: SyZHbixOtlrf2+eRyp4e+aSPcAZzzN/5nWh+rxyAdVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdB1rqTOzB1391EfQdd8pTMCpvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:3c:16:92:4f:d9:c6:6f:04:2b:3e:31:8b:0d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d075aea4cecc1d77f7511f41d77ca53302a6f6
Validity
Not Before: Feb 2 04:00:34 2025 GMT
Not After : Feb 3 04:00:34 2025 GMT
Subject: CN=b63fbb1a8a91794111ca77ca45288a4a69319910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:2a:1c:d9:98:a9:cc:00:78:07:04:a2:4f:
d4:93:94:12:05:f1:36:33:11:f8:53:76:6d:40:99:
83:6a:07:b9:3d:98:ca:4d:02:f1:e3:e2:73:8f:d5:
5e:65:55:ef:55:50:e8:6f:f4:1e:2b:04:6f:92:b7:
d2:1c:51:45:c5:7f:b4:8a:4c:e9:43:d5:be:f8:90:
74:14:f9:4d:e4:f7:a0:af:a8:84:b9:ef:d3:c9:3e:
25:84:24:81:de:b7:82:3a:96:72:17:38:ea:b4:47:
2a:fd:15:af:83:41:a0:b6:02:07:f5:15:6a:88:01:
1d:42:56:f0:08:6b:f0:45:76:38:a7:d5:04:92:da:
94:ee:ad:61:86:6d:31:96:6a:bd:19:84:25:9f:32:
26:5f:cc:7d:9e:7f:30:36:b8:f1:80:c1:b0:7d:0f:
2b:c3:44:4a:ed:aa:d4:1e:38:3f:1d:3a:37:4e:2b:
9f:7b:7a:86:b9:12:db:2c:7b:b2:33:14:79:33:9d:
1c:c1:f8:5d:8d:e7:6a:0d:6b:26:c0:fc:2f:97:80:
67:d4:d5:b9:9f:26:c8:40:5e:88:11:64:3c:1c:f0:
e4:2b:44:5d:02:e1:f9:60:21:cf:14:bd:27:86:98:
26:6f:0e:b2:a5:df:af:87:3f:de:4d:1f:81:fa:57:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:BB:1A:8A:91:79:41:11:CA:77:CA:45:28:8A:4A:69:31:99:10
X509v3 Authority Key Identifier:
keyid:35:D0:75:AE:A4:CE:CC:1D:77:F7:51:1F:41:D7:7C:A5:33:02:A6:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdB1rqTOzB1391EfQdd8pTMCpvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9ffbd9-1b29-4429-895d-cafc50e4f534/1/NdB1rqTOzB1391EfQdd8pTMCpvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d0:0a:48:6c:b3:d0:92:c8:c5:37:64:ff:d6:d2:76:46:10:
25:e2:46:d8:ba:39:24:d7:41:1e:31:52:1b:60:bd:bd:4e:25:
12:f8:dc:f5:41:a9:2d:e2:84:69:0f:07:ae:38:c2:0f:ca:9b:
38:b0:59:0e:a8:90:07:4a:c8:78:ee:c5:88:30:99:ef:10:d7:
e6:90:4a:b6:ae:96:f7:7a:1b:b4:20:a2:94:9a:c4:14:d5:e5:
47:77:a6:9d:da:16:f2:a8:59:cb:24:59:f6:db:fe:08:d5:35:
ee:88:f3:de:41:67:10:37:77:9b:de:6c:3e:ab:df:33:d4:31:
c1:de:14:d7:2e:ef:9c:d7:5d:4b:cc:25:ea:00:54:83:32:d3:
c5:f2:2c:0f:07:c4:bb:2c:e0:78:b8:0b:27:7c:63:84:91:d3:
23:93:65:f1:4e:ac:e1:80:db:d5:10:36:02:2d:6e:68:77:e3:
a7:1b:8f:41:ed:8f:04:04:70:7b:98:a1:d7:a5:45:6f:fe:0c:
44:e3:53:c6:08:1c:43:04:f1:bf:42:ae:e7:95:a2:e0:88:d4:
dc:4d:b6:bd:4b:ac:98:75:e9:22:66:01:5b:ec:d0:3f:c3:df:
bb:a2:9f:ac:27:3d:8b:a9:a8:d0:8e:d5:b4:93:1e:2d:4e:09:
94:c5:43:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0TwWkk/Zxm8EKz4xiw1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDA3NWFlYTRjZWNjMWQ3N2Y3NTExZjQxZDc3Y2E1MzMw
MmE2ZjYwHhcNMjUwMjAyMDQwMDM0WhcNMjUwMjAzMDQwMDM0WjAzMTEwLwYDVQQD
EyhiNjNmYmIxYThhOTE3OTQxMTFjYTc3Y2E0NTI4OGE0YTY5MzE5OTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysYqHNmYqcwAeAcEok/Uk5QSBfE2
MxH4U3ZtQJmDage5PZjKTQLx4+Jzj9VeZVXvVVDob/QeKwRvkrfSHFFFxX+0ikzp
Q9W++JB0FPlN5Pegr6iEue/TyT4lhCSB3reCOpZyFzjqtEcq/RWvg0GgtgIH9RVq
iAEdQlbwCGvwRXY4p9UEktqU7q1hhm0xlmq9GYQlnzImX8x9nn8wNrjxgMGwfQ8r
w0RK7arUHjg/HTo3Tiufe3qGuRLbLHuyMxR5M50cwfhdjedqDWsmwPwvl4Bn1NW5
nybIQF6IEWQ8HPDkK0RdAuH5YCHPFL0nhpgmbw6ypd+vhz/eTR+B+lfLfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY/uxqKkXlBEcp3ykUoikppMZkQMB8GA1UdIwQY
MBaAFDXQda6kzswdd/dRH0HXfKUzAqb2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRCMXJxVE96QjEzOTFFZlFkZDhwVE1DcHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85ZmZiZDktMWIyOS00NDI5LTg5NWQt
Y2FmYzUwZTRmNTM0LzEvTmRCMXJxVE96QjEzOTFFZlFkZDhwVE1DcHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85ZmZiZDktMWIyOS00NDI5LTg5NWQtY2FmYzUwZTRmNTM0
LzEvTmRCMXJxVE96QjEzOTFFZlFkZDhwVE1DcHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9AKSGyz
0JLIxTdk/9bSdkYQJeJG2Lo5JNdBHjFSG2C9vU4lEvjc9UGpLeKEaQ8HrjjCD8qb
OLBZDqiQB0rIeO7FiDCZ7xDX5pBKtq6W93obtCCilJrEFNXlR3emndoW8qhZyyRZ
9tv+CNU17ojz3kFnEDd3m95sPqvfM9Qxwd4U1y7vnNddS8wl6gBUgzLTxfIsDwfE
uyzgeLgLJ3xjhJHTI5Nl8U6s4YDb1RA2Ai1uaHfjpxuPQe2PBARwe5ih16VFb/4M
RONTxggcQwTxv0Ku55Wi4IjU3E22vUusmHXpImYBW+zQP8Pfu6KfrCc9i6mo0I7V
tJMeLU4JlMVD6w==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:10 2025 by rpki-client