Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
File: nuw0uvkiAow0Mvj48ivaavhrd7I.mft (raw, json)
Hash identifier: cVxQDnwYaJdImxzPV93cJVeaGUgi4EbTEt2VlxKib8c=
Subject key identifier: 23:70:BE:2F:2B:66:10:78:D8:D7:2B:66:8F:4A:5A:06:B5:A7:65:A4
Authority key identifier: 9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
Certificate issuer: /CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Certificate serial: 019649A1FB815D34B417F518260AFE44470E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
Manifest number: 1500
Signing time: Fri 18 Apr 2025 16:01:14 +0000
Manifest this update: Fri 18 Apr 2025 16:01:14 +0000
Manifest next update: Sat 19 Apr 2025 16:01:14 +0000
Files and hashes: 1: nuw0uvkiAow0Mvj48ivaavhrd7I.crl (hash: TCDx9WsczsPr808YD4BmcJNDv2McYxAg1i40I14blVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:fb:81:5d:34:b4:17:f5:18:26:0a:fe:44:47:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Validity
Not Before: Apr 18 16:01:14 2025 GMT
Not After : Apr 19 16:01:14 2025 GMT
Subject: CN=2370be2f2b661078d8d72b668f4a5a06b5a765a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:25:36:bc:14:03:e3:e8:47:06:32:75:48:57:
71:75:57:a8:69:b3:2a:c5:37:6d:cd:a7:0a:10:78:
1a:a0:14:5b:27:7a:2e:2e:56:cb:03:6e:f8:13:27:
c0:8b:02:f9:4a:a4:ea:fb:6d:d5:08:0a:19:f6:9f:
a6:cd:ad:81:6a:9f:5d:b1:18:37:42:4f:b6:55:66:
24:44:ac:f9:9b:02:58:75:30:12:d2:ab:a8:cc:d7:
9f:41:18:da:88:7a:17:a9:c5:3e:05:e8:5c:a9:33:
f2:a9:a1:5e:06:74:98:ba:f3:14:9a:b6:c7:30:eb:
66:da:46:6d:4e:52:8c:a3:f5:17:07:a8:7b:ed:ba:
f7:05:b5:45:ec:a4:3a:c4:c6:2c:92:fe:fb:97:cd:
9c:3b:34:e7:1f:f1:51:5f:7d:db:40:a0:46:2f:42:
a6:ca:b0:7b:55:c0:01:02:fd:42:21:22:bd:6a:59:
71:be:a3:f4:4a:ee:b8:5f:35:57:62:f8:63:67:cc:
37:d3:73:f5:fb:98:0d:e5:cc:27:db:63:78:ce:f2:
c8:e8:f9:a0:f7:e8:1c:2b:91:c5:bb:01:62:b0:3f:
b7:ba:18:e9:00:7b:dc:dd:9e:e8:85:08:80:42:08:
f5:58:f9:45:f3:ef:38:6b:78:66:3f:11:66:07:9a:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:70:BE:2F:2B:66:10:78:D8:D7:2B:66:8F:4A:5A:06:B5:A7:65:A4
X509v3 Authority Key Identifier:
keyid:9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:00:c8:09:9f:28:59:f5:f0:a6:c1:e7:35:9e:d6:54:0b:92:
08:43:77:0a:d2:a7:83:9d:f4:35:67:c1:4a:0f:98:21:a3:dd:
1c:0b:3d:8e:07:90:f4:8e:d9:c8:72:c8:7e:ac:91:a6:ea:82:
16:6d:75:06:ac:cd:7e:64:24:c1:bf:d7:f8:9f:4e:ee:ca:26:
dd:1a:65:24:0f:05:75:03:8c:4f:82:39:f5:a1:31:75:28:24:
21:22:81:00:66:58:aa:53:43:34:67:fd:74:a4:12:6c:bf:79:
b2:95:66:fd:fb:f6:ff:af:01:49:b1:7d:1c:ba:7e:8d:22:31:
07:d0:d2:d7:5f:73:c1:32:ea:53:52:57:6d:22:f1:c7:95:07:
5b:3d:d3:a8:07:3b:98:4f:4a:4a:e6:68:bc:b3:29:66:22:5d:
93:a6:49:03:17:69:94:66:54:6f:ce:c4:40:b9:33:26:cf:59:
b4:91:9c:99:bc:38:b3:ae:20:d9:4e:75:8e:a3:b5:29:9d:17:
dd:8e:b6:9d:e4:1a:23:f8:c1:22:27:63:cd:4b:09:ad:c8:c9:
5e:b3:0f:8e:25:c4:d1:b8:39:0b:0a:0a:15:d0:c8:ec:de:ea:
59:9a:93:5b:e0:01:b1:e6:03:51:49:b8:cc:77:76:f7:73:a8:
10:c3:da:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJofuBXTS0F/UYJgr+REcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWMzNGJhZjkyMjAyOGMzNDMyZjhmOGYyMmJkYTZhZjg2
Yjc3YjIwHhcNMjUwNDE4MTYwMTE0WhcNMjUwNDE5MTYwMTE0WjAzMTEwLwYDVQQD
EygyMzcwYmUyZjJiNjYxMDc4ZDhkNzJiNjY4ZjRhNWEwNmI1YTc2NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyU2vBQD4+hHBjJ1SFdxdVeoabMq
xTdtzacKEHgaoBRbJ3ouLlbLA274EyfAiwL5SqTq+23VCAoZ9p+mza2Bap9dsRg3
Qk+2VWYkRKz5mwJYdTAS0quozNefQRjaiHoXqcU+BehcqTPyqaFeBnSYuvMUmrbH
MOtm2kZtTlKMo/UXB6h77br3BbVF7KQ6xMYskv77l82cOzTnH/FRX33bQKBGL0Km
yrB7VcABAv1CISK9allxvqP0Su64XzVXYvhjZ8w303P1+5gN5cwn22N4zvLI6Pmg
9+gcK5HFuwFisD+3uhjpAHvc3Z7ohQiAQgj1WPlF8+84a3hmPxFmB5pKIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNwvi8rZhB42NcrZo9KWga1p2WkMB8GA1UdIwQY
MBaAFJ7sNLr5IgKMNDL4+PIr2mr4a3eyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnV3MHV2a2lBb3cwTXZqNDhpdmFhdmhyZDdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82ZWE4ZjctY2I0YS00ZTRlLWFkNzkt
YWM4NzE3MWY0ZTVjLzEvbnV3MHV2a2lBb3cwTXZqNDhpdmFhdmhyZDdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82ZWE4ZjctY2I0YS00ZTRlLWFkNzktYWM4NzE3MWY0ZTVj
LzEvbnV3MHV2a2lBb3cwTXZqNDhpdmFhdmhyZDdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1ADICZ8o
WfXwpsHnNZ7WVAuSCEN3CtKng530NWfBSg+YIaPdHAs9jgeQ9I7ZyHLIfqyRpuqC
Fm11BqzNfmQkwb/X+J9O7som3RplJA8FdQOMT4I59aExdSgkISKBAGZYqlNDNGf9
dKQSbL95spVm/fv2/68BSbF9HLp+jSIxB9DS119zwTLqU1JXbSLxx5UHWz3TqAc7
mE9KSuZovLMpZiJdk6ZJAxdplGZUb87EQLkzJs9ZtJGcmbw4s64g2U51jqO1KZ0X
3Y62neQaI/jBIidjzUsJrcjJXrMPjiXE0bg5CwoKFdDI7N7qWZqTW+ABseYDUUm4
zHd293OoEMPaLA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:21:40 2025 by rpki-client