Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
File: nBBfWIvTBDjjPxwtKWdUxz341Ss.mft (raw, json)
Hash identifier: 3Jfyi7js3wIUFQiHLzND3WaT9atG8KNl9a0oZduN+xk=
Subject key identifier: 94:E2:41:55:F9:CD:F6:20:81:F7:E8:74:AC:26:D0:47:23:AF:0A:14
Authority key identifier: 9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
Certificate issuer: /CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Certificate serial: 01965726D116A9722076D0CD1F1354B6A743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 07:01:23 +0000
Manifest this update: Mon 21 Apr 2025 07:01:23 +0000
Manifest next update: Tue 22 Apr 2025 07:01:23 +0000
Files and hashes: 1: nBBfWIvTBDjjPxwtKWdUxz341Ss.crl (hash: D87xeMbAKE9ZPPbUpoXstgkRRXLgXt5OOTfP8ybVpyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:d1:16:a9:72:20:76:d0:cd:1f:13:54:b6:a7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Validity
Not Before: Apr 21 07:01:23 2025 GMT
Not After : Apr 22 07:01:23 2025 GMT
Subject: CN=94e24155f9cdf62081f7e874ac26d04723af0a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:c1:76:ea:ec:eb:ce:a1:ac:14:87:2b:16:
b0:59:4c:69:51:9e:28:16:a4:f1:77:aa:16:ba:f8:
20:a7:22:8d:87:08:fb:59:4f:04:20:c1:38:0b:1a:
63:48:af:ad:a5:1f:2c:a5:3b:c1:c3:36:89:90:1d:
91:cf:81:24:5a:e2:72:72:ec:25:aa:58:ee:09:a4:
31:26:cf:a6:45:db:f6:89:55:28:b0:b1:20:d4:12:
22:42:d9:a7:2a:56:a6:4e:98:c5:58:62:09:20:d9:
5a:66:93:a6:3c:43:22:c2:c6:4e:41:bb:c9:22:30:
5f:b8:c3:70:e0:cd:d9:0f:ef:ce:3c:4a:05:2b:89:
2f:89:c2:8d:c6:7a:7c:9d:f5:7d:ba:8c:7e:99:2a:
38:fa:42:af:52:82:aa:26:91:68:cf:97:f1:39:28:
00:1e:ac:56:11:a4:c5:38:10:f9:61:40:b4:11:89:
46:56:28:50:90:6e:53:21:87:83:ae:6f:71:3a:5d:
db:54:2d:16:f4:c3:a8:9f:14:0b:16:59:d2:fb:f4:
04:f4:70:90:f7:6b:7d:7f:9b:df:b8:99:04:a4:9d:
97:3b:3c:ec:1e:f2:f3:1a:e7:66:f4:76:50:b9:d3:
d7:88:a9:d2:82:c4:63:e9:22:5a:e3:99:91:97:4a:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:41:55:F9:CD:F6:20:81:F7:E8:74:AC:26:D0:47:23:AF:0A:14
X509v3 Authority Key Identifier:
keyid:9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9d:77:cd:32:a1:45:0f:55:32:c8:81:64:db:d5:69:2c:da:
8a:46:7e:76:e2:64:a0:7c:e7:5c:23:4d:8a:01:20:a8:99:f4:
c3:69:3d:73:df:ab:c3:bc:ab:67:9d:48:1a:c0:f2:ed:41:e7:
1f:88:4f:b9:3f:7e:f0:b4:ae:93:c4:07:93:26:94:ea:32:d5:
4c:80:33:1f:fb:bd:48:57:23:ce:51:24:95:57:b6:5c:52:cf:
00:99:b8:2c:5d:44:4a:ba:9c:ae:2b:6d:7e:fa:d5:95:06:55:
14:7b:da:5c:49:b5:6d:c5:7f:f9:00:f8:c8:9c:e5:48:e1:69:
17:2f:d7:3d:86:7f:24:f4:10:1c:f7:6d:a9:ec:20:65:d8:01:
18:fc:d7:03:f9:99:05:f4:c5:85:2b:c7:2b:a4:fa:49:7c:de:
5e:99:e7:c6:bd:6d:cc:cf:d7:c1:a9:a1:cf:53:41:48:99:4c:
62:c0:59:0d:bd:a4:67:8d:e8:ef:0f:f4:39:6c:93:f5:c7:6d:
5c:86:0d:9f:d1:60:16:f3:6a:8a:33:cd:e8:1d:dc:04:32:e3:
dd:1a:f7:f2:dd:e7:e0:d0:cc:4e:45:2c:f5:d7:ba:e1:61:91:
04:9d:e8:c2:05:a8:c7:69:69:ad:7d:04:f5:e8:14:98:2e:92:
a9:7f:72:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJtEWqXIgdtDNHxNUtqdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMTA1ZjU4OGJkMzA0MzhlMzNmMWMyZDI5Njc1NGM3M2Rm
OGQ1MmIwHhcNMjUwNDIxMDcwMTIzWhcNMjUwNDIyMDcwMTIzWjAzMTEwLwYDVQQD
Eyg5NGUyNDE1NWY5Y2RmNjIwODFmN2U4NzRhYzI2ZDA0NzIzYWYwYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr7Bdurs686hrBSHKxawWUxpUZ4o
FqTxd6oWuvggpyKNhwj7WU8EIME4CxpjSK+tpR8spTvBwzaJkB2Rz4EkWuJycuwl
qljuCaQxJs+mRdv2iVUosLEg1BIiQtmnKlamTpjFWGIJINlaZpOmPEMiwsZOQbvJ
IjBfuMNw4M3ZD+/OPEoFK4kvicKNxnp8nfV9uox+mSo4+kKvUoKqJpFoz5fxOSgA
HqxWEaTFOBD5YUC0EYlGVihQkG5TIYeDrm9xOl3bVC0W9MOonxQLFlnS+/QE9HCQ
92t9f5vfuJkEpJ2XOzzsHvLzGudm9HZQudPXiKnSgsRj6SJa45mRl0rNpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTiQVX5zfYggffodKwm0EcjrwoUMB8GA1UdIwQY
MBaAFJwQX1iL0wQ44z8cLSlnVMc9+NUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkJCZldJdlRCRGpqUHh3dEtXZFV4ejM0MVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kOTMwN2QtOTk2NC00MWQwLTliYjkt
NDYyNTZkYWZlYzVlLzEvbkJCZldJdlRCRGpqUHh3dEtXZFV4ejM0MVNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kOTMwN2QtOTk2NC00MWQwLTliYjktNDYyNTZkYWZlYzVl
LzEvbkJCZldJdlRCRGpqUHh3dEtXZFV4ejM0MVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc513zTKh
RQ9VMsiBZNvVaSzaikZ+duJkoHznXCNNigEgqJn0w2k9c9+rw7yrZ51IGsDy7UHn
H4hPuT9+8LSuk8QHkyaU6jLVTIAzH/u9SFcjzlEklVe2XFLPAJm4LF1ESrqcritt
fvrVlQZVFHvaXEm1bcV/+QD4yJzlSOFpFy/XPYZ/JPQQHPdtqewgZdgBGPzXA/mZ
BfTFhSvHK6T6SXzeXpnnxr1tzM/Xwamhz1NBSJlMYsBZDb2kZ43o7w/0OWyT9cdt
XIYNn9FgFvNqijPN6B3cBDLj3Rr38t3n4NDMTkUs9de64WGRBJ3owgWox2lprX0E
9egUmC6SqX9y/g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:47:06 2025 by rpki-client