Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: /EmjBOwbFRfUS7opXPLkBTsiBeX22ezRnN1FAwbKlHw=
Subject key identifier: AF:A4:6A:72:C5:55:2B:44:EE:C7:46:C9:11:28:E9:A7:B8:2F:B7:A1
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 01964556B3570383882FD8C171A54EC0B4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 0F59
Signing time: Thu 17 Apr 2025 20:00:31 +0000
Manifest this update: Thu 17 Apr 2025 20:00:31 +0000
Manifest next update: Fri 18 Apr 2025 20:00:31 +0000
Files and hashes: 1: 57xvgs1C64qj87aIpNvXlZvGXRo.roa (hash: zjoFwMxs5GYLsG8xg0G8PjPosJWEnHUje1reYWnSt8s=)
2: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: pnf0ckJ8s6x4HmFyaTF87Ws35hjC9mrCDP2Ucg96fiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:b3:57:03:83:88:2f:d8:c1:71:a5:4e:c0:b4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Apr 17 20:00:31 2025 GMT
Not After : Apr 18 20:00:31 2025 GMT
Subject: CN=afa46a72c5552b44eec746c91128e9a7b82fb7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:4b:73:f6:d4:60:90:2d:4f:f9:28:bb:b3:
5d:57:ef:3b:86:48:bf:d9:b3:f1:f3:26:04:77:02:
40:d4:de:2e:e2:6b:8a:ce:37:22:36:c5:0e:a5:c2:
01:07:8f:09:ed:aa:23:fa:87:43:1a:a8:1d:a5:0d:
5b:a5:e1:24:87:56:dc:b6:fd:c4:02:f0:9f:08:1a:
15:74:c5:d5:0d:50:51:b5:87:06:83:ea:7a:24:5c:
3c:07:c9:12:44:8a:51:04:7d:9a:31:73:99:f1:6f:
0d:09:2e:8a:56:17:75:72:8b:f5:c4:8a:fe:00:41:
a0:0b:c1:15:ab:42:a6:fe:68:7d:b5:ea:de:68:f8:
b7:a1:bc:08:31:55:d6:1c:dd:95:8f:25:59:6a:2e:
4b:70:0d:56:9f:21:27:ff:15:f6:38:84:6a:11:38:
fd:f7:6c:36:7b:21:3f:61:ec:9b:54:9a:ae:89:37:
ed:4d:fb:54:71:1d:d2:6b:02:fe:3c:a1:89:9e:18:
b2:35:ab:d9:91:0d:02:c3:e7:b7:41:0a:bb:08:33:
4e:88:dc:42:92:85:e2:1e:5f:6c:74:cd:c5:81:71:
9d:56:73:f5:9b:4a:0e:c4:ab:59:54:fb:3d:c5:00:
35:65:36:6a:f8:0f:4c:fd:ba:e3:00:90:fd:ec:2c:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:6A:72:C5:55:2B:44:EE:C7:46:C9:11:28:E9:A7:B8:2F:B7:A1
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0b:be:50:f3:85:55:92:e2:b4:5d:79:fa:7c:0f:2e:89:3b:
0a:cc:a5:20:78:bf:bb:ed:51:90:9d:cf:16:67:6b:2e:e9:52:
d6:21:c9:76:4c:9b:ad:ab:d7:74:d2:9a:67:b2:2a:f7:13:dd:
80:27:42:b6:e4:fd:07:5e:66:be:b1:83:ab:95:4d:81:da:f3:
38:ce:7d:7d:2b:5e:99:6b:ca:89:23:8c:10:9f:71:65:4d:32:
8e:57:dc:00:b2:94:d8:a0:1e:d5:6c:fe:6a:83:b9:f3:39:4b:
ef:00:29:b7:e8:4c:7e:73:00:f8:3a:14:b5:0d:75:52:16:fb:
12:df:8b:0d:b4:85:fb:5b:a0:8f:77:be:e8:e7:1f:9b:ca:ad:
ec:46:47:95:31:8d:99:e8:8a:98:3c:a1:ed:34:d5:18:23:b9:
c8:35:ab:26:11:b3:14:a6:70:af:14:43:5a:78:98:3c:8a:6a:
9c:86:df:c6:e3:36:22:78:07:f5:0f:eb:c7:31:fa:52:96:69:
db:ae:46:95:05:8a:29:e2:db:5b:be:00:3f:42:dc:b1:85:f6:
64:8f:6e:9a:87:3e:b5:5b:47:1a:04:96:7d:a5:7d:07:6a:4b:
61:f5:e6:6e:ea:e4:75:93:f7:3d:cd:71:59:3b:1b:7e:51:76:
0e:1c:c8:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFVrNXA4OIL9jBcaVOwLTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MjE2YTM2MDI3Nzg3NmUzZTkzYjI5YmQ0YmI5YzkyMzFm
YWQyZjcwHhcNMjUwNDE3MjAwMDMxWhcNMjUwNDE4MjAwMDMxWjAzMTEwLwYDVQQD
EyhhZmE0NmE3MmM1NTUyYjQ0ZWVjNzQ2YzkxMTI4ZTlhN2I4MmZiN2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeJLc/bUYJAtT/kou7NdV+87hki/
2bPx8yYEdwJA1N4u4muKzjciNsUOpcIBB48J7aoj+odDGqgdpQ1bpeEkh1bctv3E
AvCfCBoVdMXVDVBRtYcGg+p6JFw8B8kSRIpRBH2aMXOZ8W8NCS6KVhd1cov1xIr+
AEGgC8EVq0Km/mh9tereaPi3obwIMVXWHN2VjyVZai5LcA1WnyEn/xX2OIRqETj9
92w2eyE/YeybVJquiTftTftUcR3SawL+PKGJnhiyNavZkQ0Cw+e3QQq7CDNOiNxC
koXiHl9sdM3FgXGdVnP1m0oOxKtZVPs9xQA1ZTZq+A9M/brjAJD97CwElQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+kanLFVStE7sdGyREo6ae4L7ehMB8GA1UdIwQY
MBaAFDUhajYCd4duPpOym9S7nJIx+tL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWIt
MjQ4YzQ3YjNjN2Q4LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWItMjQ4YzQ3YjNjN2Q4
LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAu+UPOF
VZLitF15+nwPLok7CsylIHi/u+1RkJ3PFmdrLulS1iHJdkybravXdNKaZ7Iq9xPd
gCdCtuT9B15mvrGDq5VNgdrzOM59fStemWvKiSOMEJ9xZU0yjlfcALKU2KAe1Wz+
aoO58zlL7wApt+hMfnMA+DoUtQ11Uhb7Et+LDbSF+1ugj3e+6Ocfm8qt7EZHlTGN
meiKmDyh7TTVGCO5yDWrJhGzFKZwrxRDWniYPIpqnIbfxuM2IngH9Q/rxzH6UpZp
265GlQWKKeLbW74AP0LcsYX2ZI9umoc+tVtHGgSWfaV9B2pLYfXmburkdZP3Pc1x
WTsbflF2DhzIxQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:00 2025 by rpki-client