Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: Wms9AtF48kX+UpV++fyKiwtjw1ti8lPUE7hKIhPIW3c=
Subject key identifier: B5:25:43:93:65:45:DC:EC:2C:7C:99:CF:99:F2:BD:4A:AE:BD:97:8A
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 01965C158917E1DDED26FC94E91206BA2EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 0520
Signing time: Tue 22 Apr 2025 06:00:37 +0000
Manifest this update: Tue 22 Apr 2025 06:00:37 +0000
Manifest next update: Wed 23 Apr 2025 06:00:37 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: /0cVnn9bl42nDRI/0aiQa2DQC10TP9jckPrbvAAtsgc=)
2: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (hash: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:89:17:e1:dd:ed:26:fc:94:e9:12:06:ba:2e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Apr 22 06:00:37 2025 GMT
Not After : Apr 23 06:00:37 2025 GMT
Subject: CN=b52543936545dcec2c7c99cf99f2bd4aaebd978a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:bf:ea:76:d4:cc:91:1f:41:5d:bf:ec:69:
2b:d7:d3:5f:66:31:43:ea:80:7f:1b:d3:29:e5:ae:
69:26:8c:1e:a5:02:61:38:5a:48:b7:19:e4:55:32:
00:46:40:e7:5d:8a:a9:95:78:9c:77:1f:41:f2:fc:
dd:09:f3:58:85:46:59:9e:a2:f9:24:81:be:0c:16:
bb:6b:1b:c0:97:be:fc:b9:c0:dd:46:82:fb:e0:e6:
4d:26:a3:82:c8:27:cc:fc:1c:bf:8c:84:79:b6:ea:
e6:04:f9:7e:06:35:37:af:78:32:44:76:9c:1e:38:
3d:cd:f0:cd:02:4b:80:44:44:03:b2:78:1b:f6:f3:
80:30:0b:a8:d6:de:80:a6:a7:2d:0b:ea:f0:7a:04:
a5:bc:04:37:03:b0:11:59:0e:96:5e:81:93:07:8d:
54:94:fd:87:b4:97:bb:7d:9b:1b:34:be:c2:af:dd:
4f:7c:33:11:2f:12:97:f4:24:2a:80:be:c3:fa:73:
c5:17:de:2b:51:ba:b1:1b:25:27:67:fd:5d:1f:dd:
2b:90:4b:7a:b7:6f:65:dd:78:e6:db:a5:85:76:8f:
bd:81:82:d0:8d:2c:41:05:a3:5d:46:a2:d9:85:84:
29:dc:9d:74:ca:e4:c2:e0:1c:d1:fb:8f:d8:c2:95:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:25:43:93:65:45:DC:EC:2C:7C:99:CF:99:F2:BD:4A:AE:BD:97:8A
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:34:46:b1:f6:25:12:93:79:53:1c:89:ad:8a:36:06:f6:ad:
c7:55:bf:5c:f6:14:51:6a:a2:cf:87:07:ec:bb:1a:9e:d5:dc:
bd:7a:b9:77:93:f5:96:5b:49:3c:a5:4d:2c:72:e3:62:e0:14:
b2:c5:b1:7c:f7:43:a2:0d:18:34:bc:b5:99:6a:62:6d:6c:75:
7d:f2:94:0c:8f:a5:79:4d:be:74:db:11:63:34:75:c4:66:88:
cf:b4:03:6d:5a:bf:79:c0:f4:93:3f:e7:78:fb:b6:1c:69:2e:
ac:bd:20:dd:c1:8e:04:21:f5:91:88:25:9c:cc:76:1a:58:fa:
5e:1c:37:75:bb:0e:81:4b:4a:47:e3:7b:5c:df:94:4f:82:55:
d9:39:02:0e:1d:c3:4d:95:c6:54:0c:11:53:a2:2a:0a:49:47:
e6:b6:e9:28:49:c3:62:d9:97:91:d9:db:bf:64:70:2a:80:9a:
ce:e5:6f:2c:3c:91:e0:8b:86:31:c0:01:6d:1b:a4:93:7e:e7:
b5:92:ec:4a:34:24:a3:db:31:cf:d4:10:eb:5f:2e:35:2f:97:
ac:8c:d8:01:c4:c0:e6:7d:74:a6:c9:e4:f0:2f:e7:6f:3c:cb:
a8:ad:ea:18:4a:07:f8:58:25:b2:40:1b:fd:ec:20:a3:9b:ca:
26:6e:5b:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcFYkX4d3tJvyU6RIGui69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDRjM2E4NjMzOGUxNzA2MDVlNjY1ZDM0ZDhhNWM4Njk5
NDhhMDUwHhcNMjUwNDIyMDYwMDM3WhcNMjUwNDIzMDYwMDM3WjAzMTEwLwYDVQQD
EyhiNTI1NDM5MzY1NDVkY2VjMmM3Yzk5Y2Y5OWYyYmQ0YWFlYmQ5NzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6q/6nbUzJEfQV2/7Gkr19NfZjFD
6oB/G9Mp5a5pJowepQJhOFpItxnkVTIARkDnXYqplXicdx9B8vzdCfNYhUZZnqL5
JIG+DBa7axvAl778ucDdRoL74OZNJqOCyCfM/By/jIR5turmBPl+BjU3r3gyRHac
Hjg9zfDNAkuAREQDsngb9vOAMAuo1t6ApqctC+rwegSlvAQ3A7ARWQ6WXoGTB41U
lP2HtJe7fZsbNL7Cr91PfDMRLxKX9CQqgL7D+nPFF94rUbqxGyUnZ/1dH90rkEt6
t29l3Xjm26WFdo+9gYLQjSxBBaNdRqLZhYQp3J10yuTC4BzR+4/YwpXq3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUlQ5NlRdzsLHyZz5nyvUquvZeKMB8GA1UdIwQY
MBaAFJ8Ew6hjOOFwYF5mXTTYpchplIoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84NDllMjYtNjQ3Mi00NDQwLWEwMzgt
N2JhYTkyYTgyOGVjLzEvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84NDllMjYtNjQ3Mi00NDQwLWEwMzgtN2JhYTkyYTgyOGVj
LzEvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzRGsfYl
EpN5UxyJrYo2Bvatx1W/XPYUUWqiz4cH7LsantXcvXq5d5P1lltJPKVNLHLjYuAU
ssWxfPdDog0YNLy1mWpibWx1ffKUDI+leU2+dNsRYzR1xGaIz7QDbVq/ecD0kz/n
ePu2HGkurL0g3cGOBCH1kYglnMx2Glj6Xhw3dbsOgUtKR+N7XN+UT4JV2TkCDh3D
TZXGVAwRU6IqCklH5rbpKEnDYtmXkdnbv2RwKoCazuVvLDyR4IuGMcABbRukk37n
tZLsSjQko9sxz9QQ618uNS+XrIzYAcTA5n10psnk8C/nbzzLqK3qGEoH+FglskAb
/ewgo5vKJm5blA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:03:12 2025 by rpki-client