Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: SCKkK2Mwxm3hdgjhGjeBo67bPm1oSDVmrPBbPs6VHbM=
Subject key identifier: 56:EB:FC:76:06:2E:10:9E:7C:33:70:B7:65:A1:50:8F:F6:55:FD:3F
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 01963C1CC4C837D65E5AB25FA0809C335C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 14EF
Signing time: Wed 16 Apr 2025 01:00:40 +0000
Manifest this update: Wed 16 Apr 2025 01:00:40 +0000
Manifest next update: Thu 17 Apr 2025 01:00:40 +0000
Files and hashes: 1: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: YhTPl8bQpIWuHW+Sfu7Ls2Sl/yoqQKTx6aj5YbGm87o=)
2: VMysSyLNDVGWd0vcTeYPwlMA5rc.roa (hash: 6+DEgCnpiKyTQCIOlcuNMISjTH2qj/1LJFyn3yXus8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1c:c4:c8:37:d6:5e:5a:b2:5f:a0:80:9c:33:5c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Apr 16 01:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=56ebfc76062e109e7c3370b765a1508ff655fd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:fe:53:10:e6:e1:a7:64:32:f8:bc:83:cd:
d6:56:a0:b2:09:62:b4:3c:ee:78:1f:24:e0:bc:6d:
63:35:cd:17:4c:67:d1:30:e5:70:eb:7c:00:b2:92:
72:c1:52:89:47:17:87:70:c6:0f:f6:28:69:2d:97:
7a:67:78:76:e7:30:0e:c5:af:ec:a8:0b:43:07:76:
16:73:92:c5:c2:b9:e3:39:ec:a0:cf:0b:5f:90:79:
2f:eb:00:88:60:8d:27:3f:af:c7:f4:4c:95:5d:d1:
fe:ad:25:9a:a3:9f:1c:5d:37:f3:43:78:e9:53:6d:
86:ad:d5:8d:86:91:c7:d8:ed:97:5e:11:c2:7e:48:
20:71:e3:3f:e9:26:e3:79:ae:0b:62:7b:e5:34:02:
28:e3:7b:f4:35:80:13:96:bc:de:e2:c7:eb:87:70:
87:c6:48:29:f7:8f:75:79:e1:94:cd:62:2e:82:6b:
bd:c1:fc:5a:93:09:76:ac:5b:04:9a:50:b8:57:88:
d4:56:6c:f5:51:87:73:65:fa:c2:3d:a1:04:6c:28:
3e:4d:8b:a9:22:70:70:34:54:c2:99:73:0e:88:34:
39:6e:dd:f7:3b:af:95:d5:e1:f8:8b:3a:47:00:85:
36:cb:32:16:24:92:3c:b7:df:8f:12:9e:b0:45:4e:
0e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EB:FC:76:06:2E:10:9E:7C:33:70:B7:65:A1:50:8F:F6:55:FD:3F
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9a:e3:f7:66:d0:09:49:a7:df:0c:b2:a0:6d:79:06:a9:3e:
ff:21:90:02:fe:06:d9:5f:14:a6:82:17:2e:73:60:7c:d1:64:
2b:b1:08:7f:2b:23:e3:34:30:fa:ee:0e:56:d1:66:4f:ed:e4:
3a:9b:9e:e2:ad:9b:5a:18:c3:0c:b3:e4:b4:6d:2f:49:d1:9a:
29:ce:2e:da:f5:c6:06:2c:37:f2:18:cd:d3:a0:f4:4c:1f:05:
a9:21:04:68:79:c0:47:2a:ab:3f:6f:02:de:cf:07:2c:11:b3:
16:c5:fc:a0:cb:08:30:a6:c9:ab:8c:e8:08:37:11:46:de:e4:
be:00:95:1c:53:cb:10:a3:b7:13:8b:ef:96:6c:5b:ba:4d:9b:
f9:3b:a5:e5:c7:56:d4:95:93:03:8f:66:13:c2:16:59:4c:3c:
60:99:9d:fe:d9:fb:ac:26:7b:3d:8f:29:63:cf:c8:a4:a4:59:
9b:a2:4c:52:a1:de:ec:67:03:1a:83:55:81:25:27:bb:64:f4:
30:f7:04:9f:4b:0d:95:52:db:56:7e:80:5f:55:96:77:52:b0:
fd:53:ca:2b:1e:15:3d:64:ce:a5:8b:f3:97:a1:19:68:26:d3:
a5:d5:d0:30:66:f2:18:5f:01:7d:4f:c4:3b:14:ce:8a:ae:ff:
03:33:7c:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY8HMTIN9ZeWrJfoICcM1w1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NmQ5YTk1YmFjZTE5Nzg1YzQwNjQ3NjYzZjMxZDkwNTYy
NjFjMmYwHhcNMjUwNDE2MDEwMDQwWhcNMjUwNDE3MDEwMDQwWjAzMTEwLwYDVQQD
Eyg1NmViZmM3NjA2MmUxMDllN2MzMzcwYjc2NWExNTA4ZmY2NTVmZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cX+UxDm4adkMvi8g83WVqCyCWK0
PO54HyTgvG1jNc0XTGfRMOVw63wAspJywVKJRxeHcMYP9ihpLZd6Z3h25zAOxa/s
qAtDB3YWc5LFwrnjOeygzwtfkHkv6wCIYI0nP6/H9EyVXdH+rSWao58cXTfzQ3jp
U22GrdWNhpHH2O2XXhHCfkggceM/6Sbjea4LYnvlNAIo43v0NYATlrze4sfrh3CH
xkgp9491eeGUzWIugmu9wfxakwl2rFsEmlC4V4jUVmz1UYdzZfrCPaEEbCg+TYup
InBwNFTCmXMOiDQ5bt33O6+V1eH4izpHAIU2yzIWJJI8t9+PEp6wRU4OmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbr/HYGLhCefDNwt2WhUI/2Vf0/MB8GA1UdIwQY
MBaAFDVtmpW6zhl4XEBkdmPzHZBWJhwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kZDljOTAtMzFhOS00OTk1LTlkYTMt
NGVmZGU2ZWIzMmQ0LzEvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9kZDljOTAtMzFhOS00OTk1LTlkYTMtNGVmZGU2ZWIzMmQ0
LzEvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZrj92bQ
CUmn3wyyoG15Bqk+/yGQAv4G2V8UpoIXLnNgfNFkK7EIfysj4zQw+u4OVtFmT+3k
Opue4q2bWhjDDLPktG0vSdGaKc4u2vXGBiw38hjN06D0TB8FqSEEaHnARyqrP28C
3s8HLBGzFsX8oMsIMKbJq4zoCDcRRt7kvgCVHFPLEKO3E4vvlmxbuk2b+Tul5cdW
1JWTA49mE8IWWUw8YJmd/tn7rCZ7PY8pY8/IpKRZm6JMUqHe7GcDGoNVgSUnu2T0
MPcEn0sNlVLbVn6AX1WWd1Kw/VPKKx4VPWTOpYvzl6EZaCbTpdXQMGbyGF8BfU/E
OxTOiq7/AzN8Lw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 08:52:28 2025 by rpki-client