Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: h9PDyF/VPtxUNxhJbSySQmxrfjV6zeBx/GLORf+RKSk=
Subject key identifier: 70:C3:33:A1:B2:A9:E7:76:87:0F:D0:B1:91:9C:91:1E:EB:DA:F6:36
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 019511D984230FD50050EFB2B5078B9EAD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 0475
Signing time: Mon 17 Feb 2025 03:00:22 +0000
Manifest this update: Mon 17 Feb 2025 03:00:22 +0000
Manifest next update: Tue 18 Feb 2025 03:00:22 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: cuVSt/bfEOlSI10TPrFbyu2rLH3qdF5YtU3L4N/fFVI=)
2: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (hash: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:84:23:0f:d5:00:50:ef:b2:b5:07:8b:9e:ad:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Feb 17 03:00:22 2025 GMT
Not After : Feb 18 03:00:22 2025 GMT
Subject: CN=70c333a1b2a9e776870fd0b1919c911eebdaf636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:f5:af:f8:af:fe:5c:5b:c8:86:fb:f8:2e:
fb:9d:88:15:52:d1:2e:f1:b9:bd:e9:0f:47:6a:da:
e2:94:cd:59:a4:e7:a8:bf:d6:9b:70:74:0a:f7:8d:
03:e3:40:21:64:61:b7:c0:95:11:ad:2d:8d:ad:1a:
09:a2:b1:eb:05:27:db:2c:20:c8:4e:a3:99:31:f2:
4a:95:9b:6a:b9:5d:73:89:1e:b4:f2:45:1a:ae:af:
4b:ba:24:77:1c:1a:ae:d1:c9:25:18:27:e2:0b:e9:
ca:fd:02:54:38:78:d0:9a:c3:8c:05:74:db:a8:99:
db:97:76:2a:13:20:74:17:0f:56:f8:a3:57:47:03:
4e:6c:7b:0e:ad:ea:a4:2f:42:1d:d2:7e:ab:6f:f7:
60:f0:3a:e0:b8:5f:77:e6:cf:f0:2f:17:75:1a:cd:
51:e2:52:4c:8b:b2:c5:0c:92:7a:bc:57:f2:90:9c:
fc:d1:4e:b5:9b:48:a0:39:d4:91:8c:21:e9:ff:8c:
cc:19:af:7f:f6:d3:27:4c:cb:5a:66:dc:4b:b8:a6:
1e:b3:58:64:ee:e7:2b:28:60:42:b7:8c:30:81:99:
f6:d8:ad:49:33:ba:13:b6:bd:b4:ec:53:e9:5d:3c:
40:3d:ea:cd:38:73:fb:21:e5:26:aa:3c:29:45:f9:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:33:A1:B2:A9:E7:76:87:0F:D0:B1:91:9C:91:1E:EB:DA:F6:36
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:37:88:42:37:2b:76:3c:5e:86:a1:49:3c:a1:7f:c7:0f:57:
9f:04:96:60:15:84:d7:e7:32:06:b5:99:ff:98:40:58:b3:99:
89:ab:49:8c:82:f9:18:be:0e:d5:24:f0:fd:c9:e6:25:50:27:
6b:38:c3:f0:b2:74:e3:84:50:8b:ce:f4:b6:2a:6d:ec:25:ad:
5c:72:a3:cf:a6:47:dc:99:2b:aa:36:15:c8:0f:30:e4:fe:e6:
02:83:da:ac:07:56:3b:1f:b2:2d:bf:bb:0a:1a:9c:49:6c:a5:
09:e7:3c:14:dc:4d:27:bf:80:b0:70:57:b2:f0:ea:c7:1c:97:
64:6f:c9:b7:d8:d9:18:e4:34:05:85:9f:22:be:68:59:d0:b3:
b5:b0:68:cd:47:3f:10:c3:ea:01:79:2e:b4:b8:94:9b:c7:2b:
8f:be:50:3b:ec:d9:64:05:f0:d3:3f:a7:e4:1b:51:0a:5b:c1:
7c:ec:5d:2e:7d:6d:d2:ab:38:25:92:0b:f9:0d:91:ca:23:9a:
81:92:8f:5d:6e:d4:cc:ab:4e:33:2e:40:09:04:c7:8a:6d:69:
86:73:7a:cc:1c:28:9f:5c:46:89:a2:6e:3f:6e:c3:af:0f:44:
3d:97:34:29:e1:54:2c:a3:6d:ee:6c:9e:bd:e0:3e:7a:83:f4:
d9:5d:98:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2YQjD9UAUO+ytQeLnq1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDRjM2E4NjMzOGUxNzA2MDVlNjY1ZDM0ZDhhNWM4Njk5
NDhhMDUwHhcNMjUwMjE3MDMwMDIyWhcNMjUwMjE4MDMwMDIyWjAzMTEwLwYDVQQD
Eyg3MGMzMzNhMWIyYTllNzc2ODcwZmQwYjE5MTljOTExZWViZGFmNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeX1r/iv/lxbyIb7+C77nYgVUtEu
8bm96Q9HatrilM1ZpOeov9abcHQK940D40AhZGG3wJURrS2NrRoJorHrBSfbLCDI
TqOZMfJKlZtquV1ziR608kUarq9LuiR3HBqu0cklGCfiC+nK/QJUOHjQmsOMBXTb
qJnbl3YqEyB0Fw9W+KNXRwNObHsOreqkL0Id0n6rb/dg8DrguF935s/wLxd1Gs1R
4lJMi7LFDJJ6vFfykJz80U61m0igOdSRjCHp/4zMGa9/9tMnTMtaZtxLuKYes1hk
7ucrKGBCt4wwgZn22K1JM7oTtr207FPpXTxAPerNOHP7IeUmqjwpRfkN5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDDM6Gyqed2hw/QsZGckR7r2vY2MB8GA1UdIwQY
MBaAFJ8Ew6hjOOFwYF5mXTTYpchplIoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84NDllMjYtNjQ3Mi00NDQwLWEwMzgt
N2JhYTkyYTgyOGVjLzEvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84NDllMjYtNjQ3Mi00NDQwLWEwMzgtN2JhYTkyYTgyOGVj
LzEvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzeIQjcr
djxehqFJPKF/xw9XnwSWYBWE1+cyBrWZ/5hAWLOZiatJjIL5GL4O1STw/cnmJVAn
azjD8LJ044RQi870tipt7CWtXHKjz6ZH3JkrqjYVyA8w5P7mAoParAdWOx+yLb+7
ChqcSWylCec8FNxNJ7+AsHBXsvDqxxyXZG/Jt9jZGOQ0BYWfIr5oWdCztbBozUc/
EMPqAXkutLiUm8crj75QO+zZZAXw0z+n5BtRClvBfOxdLn1t0qs4JZIL+Q2RyiOa
gZKPXW7UzKtOMy5ACQTHim1phnN6zBwon1xGiaJuP27Drw9EPZc0KeFULKNt7mye
veA+eoP02V2Y0Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:02 2025 by rpki-client