Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: CQCJ88hzcifPmwwe+VA+ntpmiqVc0x8eHfBbysFXAY4=
Subject key identifier: 79:C6:B7:9F:D2:6F:E7:FC:37:7D:C6:81:EF:B1:48:64:00:3C:F3:1E
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 019644B1FBDFEC34D22AE1A59DA3F4D100D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 60
Signing time: Thu 17 Apr 2025 17:00:37 +0000
Manifest this update: Thu 17 Apr 2025 17:00:37 +0000
Manifest next update: Fri 18 Apr 2025 17:00:37 +0000
Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: EybZFBfUh/KpfbsT1BuU8LwJGzwDlkV+tAJ5yaHTWHk=)
3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:fb:df:ec:34:d2:2a:e1:a5:9d:a3:f4:d1:00:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Apr 17 17:00:37 2025 GMT
Not After : Apr 18 17:00:37 2025 GMT
Subject: CN=79c6b79fd26fe7fc377dc681efb14864003cf31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:85:9b:21:34:cf:e7:43:11:75:57:83:ba:
94:bb:11:da:cb:d6:30:b9:5c:34:e2:5a:03:4e:35:
c4:62:89:28:d5:70:5d:96:9a:db:84:09:02:36:ed:
88:e7:08:3e:42:0f:da:e8:a5:2e:8c:ae:f3:17:74:
a7:fd:3d:47:03:d3:84:f5:2f:4a:c6:52:e0:46:19:
6d:84:8d:f4:b1:08:db:57:03:db:f4:9e:5f:34:7f:
d1:1a:ee:ac:26:94:5a:28:9c:9a:6a:c6:92:bd:51:
b9:52:46:7c:88:e4:36:0e:77:ea:cd:b3:66:e3:93:
fa:31:b9:18:84:e5:f9:b4:61:25:0d:51:89:72:7d:
31:5d:d2:4f:88:eb:62:b1:7d:13:b9:a7:36:af:3d:
26:c5:b2:e2:74:f8:89:55:b8:83:7b:34:47:75:70:
2c:e2:29:36:d6:f2:05:ca:1b:d2:ac:d2:e8:65:11:
f8:34:2f:99:f7:3b:fa:83:8d:5e:3c:0d:b1:59:d7:
1a:ba:41:68:73:db:55:e5:af:ba:03:01:32:5f:85:
04:83:89:ed:1e:2d:9e:3f:94:c5:47:b8:98:48:8b:
7d:df:d9:b0:98:2e:06:f8:ff:a7:ec:6d:89:30:03:
b7:38:9a:4c:f4:ab:60:8a:77:99:13:55:d0:4a:be:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C6:B7:9F:D2:6F:E7:FC:37:7D:C6:81:EF:B1:48:64:00:3C:F3:1E
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:43:ac:0a:78:7f:6a:7f:e3:2f:ce:13:d8:0b:0b:84:df:b0:
17:38:3b:9c:06:8b:9c:67:5f:ad:6c:8e:70:ee:c2:98:34:59:
71:a2:8d:16:e7:01:0c:11:6f:07:9c:fe:c2:56:7e:e4:79:36:
f8:a3:a6:3d:07:79:84:52:87:b6:8c:0e:35:9e:38:73:c7:7d:
d2:a7:c9:c8:5f:48:e2:fa:01:ae:84:04:c9:a0:ed:1f:a8:6e:
5c:b4:a9:4b:dc:33:40:2d:21:ec:dd:6e:21:3b:ed:bd:59:ae:
8c:1e:b1:fb:d4:89:6a:f0:3e:0e:18:4c:4f:49:8d:50:41:14:
88:6d:c4:28:82:b4:de:47:a1:94:12:db:01:7b:36:67:6a:08:
f2:f7:65:d9:89:81:4f:c6:c1:c5:e9:b2:5a:63:25:f2:90:46:
7a:64:eb:2d:55:e9:c6:62:39:1d:cd:5f:5f:c9:b1:f5:22:18:
8e:98:b8:66:18:27:af:77:f9:87:e1:34:3b:f4:48:cd:95:6d:
e9:e8:b3:a7:30:f0:4c:4f:d5:3f:0b:3a:15:65:00:86:41:6b:
68:42:f0:a7:39:fd:55:a7:41:f4:5f:71:d8:17:9f:43:ca:30:
93:5b:10:d5:40:1f:83:14:c5:1f:f6:fb:e0:b8:e5:79:e0:55:
fd:d5:3a:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEsfvf7DTSKuGlnaP00QDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWYxYzc1YTFkYzg2NGRmYmY5ODc0M2M1MDZlZTE4Njky
NGY2NDMwHhcNMjUwNDE3MTcwMDM3WhcNMjUwNDE4MTcwMDM3WjAzMTEwLwYDVQQD
Eyg3OWM2Yjc5ZmQyNmZlN2ZjMzc3ZGM2ODFlZmIxNDg2NDAwM2NmMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw+FmyE0z+dDEXVXg7qUuxHay9Yw
uVw04loDTjXEYoko1XBdlprbhAkCNu2I5wg+Qg/a6KUujK7zF3Sn/T1HA9OE9S9K
xlLgRhlthI30sQjbVwPb9J5fNH/RGu6sJpRaKJyaasaSvVG5UkZ8iOQ2DnfqzbNm
45P6MbkYhOX5tGElDVGJcn0xXdJPiOtisX0Tuac2rz0mxbLidPiJVbiDezRHdXAs
4ik21vIFyhvSrNLoZRH4NC+Z9zv6g41ePA2xWdcaukFoc9tV5a+6AwEyX4UEg4nt
Hi2eP5TFR7iYSIt939mwmC4G+P+n7G2JMAO3OJpM9KtgineZE1XQSr6C9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnGt5/Sb+f8N33Gge+xSGQAPPMeMB8GA1UdIwQY
MBaAFDUfHHWh3IZN+/mHQ8UG7hhpJPZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUt
ZGNlYWEyYWUwYTc0LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUtZGNlYWEyYWUwYTc0
LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEOsCnh/
an/jL84T2AsLhN+wFzg7nAaLnGdfrWyOcO7CmDRZcaKNFucBDBFvB5z+wlZ+5Hk2
+KOmPQd5hFKHtowONZ44c8d90qfJyF9I4voBroQEyaDtH6huXLSpS9wzQC0h7N1u
ITvtvVmujB6x+9SJavA+DhhMT0mNUEEUiG3EKIK03kehlBLbAXs2Z2oI8vdl2YmB
T8bBxemyWmMl8pBGemTrLVXpxmI5Hc1fX8mx9SIYjpi4Zhgnr3f5h+E0O/RIzZVt
6eizpzDwTE/VPws6FWUAhkFraELwpzn9VadB9F9x2BefQ8owk1sQ1UAfgxTFH/b7
4LjleeBV/dU6ow==
-----END CERTIFICATE-----
Generated at Thu Apr 17 20:11:26 2025 by rpki-client