Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
File: NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft (raw, json)
Hash identifier: LeNTBj0fdPe1hLS8pXUuiVVlRpmhUXXtGHLZ8e0GmMg=
Subject key identifier: 6F:D0:5A:63:65:A8:51:23:44:56:8B:BB:B9:F6:47:73:CF:F1:E5:A8
Authority key identifier: 35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
Certificate issuer: /CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Certificate serial: 019510C7B6F54A81CAF3D533C0D1A722F08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
Manifest number: 0704
Signing time: Sun 16 Feb 2025 22:01:18 +0000
Manifest this update: Sun 16 Feb 2025 22:01:18 +0000
Manifest next update: Mon 17 Feb 2025 22:01:18 +0000
Files and hashes: 1: NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl (hash: o5QDy6ayEFrJYkF/r/+1bzOoLwEdnV0zOn2MQ6Ou5Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:b6:f5:4a:81:ca:f3:d5:33:c0:d1:a7:22:f0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Validity
Not Before: Feb 16 22:01:18 2025 GMT
Not After : Feb 17 22:01:18 2025 GMT
Subject: CN=6fd05a6365a8512344568bbbb9f64773cff1e5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:1d:ea:60:8f:ff:81:01:4d:55:da:29:cf:
8e:35:2e:2e:f6:0e:5b:cf:31:ff:1f:fa:d2:89:cd:
08:a8:de:b0:60:ed:9e:8e:14:3a:74:b0:28:27:47:
1f:c5:41:94:32:2a:60:3e:1c:f6:1f:df:94:f0:d8:
b8:be:9f:5d:62:8e:47:5f:79:69:dc:a5:84:ca:6a:
8b:62:56:28:14:5a:55:4c:74:6f:f8:ce:7d:57:a6:
22:a3:ef:5c:11:83:c5:f6:f5:b2:7b:8c:d5:86:45:
fc:8f:75:7b:b7:85:57:2a:f1:9a:1c:92:cb:12:1b:
31:18:6a:84:51:b4:7a:be:5e:fb:d1:51:d0:40:e0:
1d:33:b4:33:eb:b1:d6:55:3b:5d:fe:94:f5:01:c1:
58:aa:40:c2:ee:32:1a:51:cc:33:7a:f1:ab:69:ba:
3f:15:35:c4:c8:82:29:56:2c:c3:dd:84:77:30:9f:
ef:d7:b7:e9:0b:ee:25:d8:9d:32:4d:4d:f2:b1:bc:
28:13:e0:7f:7f:22:75:b1:57:4c:73:4b:e1:6d:75:
bc:76:7f:f9:02:3c:c7:b6:ae:77:b7:27:2b:78:25:
b6:7f:12:93:84:e3:37:59:bb:42:3c:33:78:1c:8f:
ad:9f:09:ed:f4:3c:e9:b2:8e:bf:ae:b6:c6:ce:a2:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D0:5A:63:65:A8:51:23:44:56:8B:BB:B9:F6:47:73:CF:F1:E5:A8
X509v3 Authority Key Identifier:
keyid:35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:86:74:1d:63:1b:a0:5e:a6:c6:6c:11:3e:20:2c:b1:c9:00:
88:f4:f0:6b:d2:b1:63:8b:14:df:59:80:b7:96:0b:59:d8:d3:
57:70:30:75:04:9f:d2:9d:5f:6b:40:5a:93:7e:b3:8b:6c:2e:
c1:de:1d:b8:3a:82:d5:b0:41:cb:e6:2e:76:1a:6b:86:3b:d8:
0d:51:ae:2f:b7:20:58:c6:94:99:6a:64:fa:c7:dc:1b:43:84:
ae:9c:ec:8c:35:a0:3c:8a:e1:f6:24:c1:c6:73:76:a6:37:d7:
e2:ab:13:e3:f5:b4:f9:4a:a3:c8:f1:9e:c3:60:72:bc:f7:ef:
c2:d1:f0:57:a6:11:09:50:05:77:b6:7e:09:3b:31:06:27:e3:
ad:33:94:8d:e4:8a:f9:01:8c:1b:03:12:60:9e:1f:28:c7:6c:
1b:0c:ac:3a:c3:a3:d5:86:db:33:ec:28:9d:b6:a0:1d:02:0d:
c3:6f:1a:55:99:e0:26:89:a4:14:a4:99:5f:67:33:ee:2f:bb:
e0:fd:dd:d8:9f:6b:9d:5d:89:ad:0b:e8:79:70:1b:b5:23:e3:
af:ea:e8:59:d6:e4:22:45:de:57:b3:71:b0:06:ce:6c:a2:eb:
dd:e0:65:aa:30:7f:ef:d6:ba:be:3e:3e:18:af:06:71:e2:44:
ea:8e:32:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx7b1SoHK89UzwNGnIvCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MDZiYjdlYzA2NjYwMjJmMDNjMGJkOWY1NWY3OGMwYTdl
YWRhOWYwHhcNMjUwMjE2MjIwMTE4WhcNMjUwMjE3MjIwMTE4WjAzMTEwLwYDVQQD
Eyg2ZmQwNWE2MzY1YTg1MTIzNDQ1NjhiYmJiOWY2NDc3M2NmZjFlNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1Qd6mCP/4EBTVXaKc+ONS4u9g5b
zzH/H/rSic0IqN6wYO2ejhQ6dLAoJ0cfxUGUMipgPhz2H9+U8Ni4vp9dYo5HX3lp
3KWEymqLYlYoFFpVTHRv+M59V6Yio+9cEYPF9vWye4zVhkX8j3V7t4VXKvGaHJLL
EhsxGGqEUbR6vl770VHQQOAdM7Qz67HWVTtd/pT1AcFYqkDC7jIaUcwzevGrabo/
FTXEyIIpVizD3YR3MJ/v17fpC+4l2J0yTU3ysbwoE+B/fyJ1sVdMc0vhbXW8dn/5
AjzHtq53tycreCW2fxKThOM3WbtCPDN4HI+tnwnt9Dzpso6/rrbGzqJV0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/QWmNlqFEjRFaLu7n2R3PP8eWoMB8GA1UdIwQY
MBaAFDUGu37AZmAi8DwL2fVfeMCn6tqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlFhN2ZzQm1ZQ0x3UEF2WjlWOTR3S2ZxMnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9hZThlNDctMTRiNC00OTE0LTgyNmYt
NDEzYTU5NThhN2YzLzEvTlFhN2ZzQm1ZQ0x3UEF2WjlWOTR3S2ZxMnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9hZThlNDctMTRiNC00OTE0LTgyNmYtNDEzYTU5NThhN2Yz
LzEvTlFhN2ZzQm1ZQ0x3UEF2WjlWOTR3S2ZxMnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYZ0HWMb
oF6mxmwRPiAssckAiPTwa9KxY4sU31mAt5YLWdjTV3AwdQSf0p1fa0Bak36zi2wu
wd4duDqC1bBBy+YudhprhjvYDVGuL7cgWMaUmWpk+sfcG0OErpzsjDWgPIrh9iTB
xnN2pjfX4qsT4/W0+UqjyPGew2ByvPfvwtHwV6YRCVAFd7Z+CTsxBifjrTOUjeSK
+QGMGwMSYJ4fKMdsGwysOsOj1YbbM+wonbagHQINw28aVZngJomkFKSZX2cz7i+7
4P3d2J9rnV2JrQvoeXAbtSPjr+roWdbkIkXeV7NxsAbObKLr3eBlqjB/79a6vj4+
GK8GceJE6o4yUA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:57 2025 by rpki-client