Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier: tcNOCTRn9xJdXzF+T5djUaiIq3ujcYrsTt7CJjmya3o=
Subject key identifier: FB:63:1C:75:67:96:FE:05:2B:8B:99:55:04:47:A8:3F:B4:A2:E2:07
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 01964DB4F4C7B4D356AE5DFE7684BA137F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 11:00:26 +0000
Manifest this update: Sat 19 Apr 2025 11:00:26 +0000
Manifest next update: Sun 20 Apr 2025 11:00:26 +0000
Files and hashes: 1: H8j-KlQfL6AGuM7lJr3knJUrtEo.roa (hash: 1uefLTqkvz0OqXFo/HdbBytkVHKTsftF+EzOemS3iXc=)
2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: gEkVfrt7xiqlnA/BCG5i47q6YogH04TPD8XYlKx8C5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:f4:c7:b4:d3:56:ae:5d:fe:76:84:ba:13:7f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Apr 19 11:00:26 2025 GMT
Not After : Apr 20 11:00:26 2025 GMT
Subject: CN=fb631c756796fe052b8b99550447a83fb4a2e207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:ac:e0:79:6e:d5:ff:e0:61:ee:d9:09:8d:
ce:b7:76:42:44:f0:57:1e:40:d4:3b:a6:43:5a:5f:
61:a2:7f:cd:aa:07:d2:e0:4e:f0:5b:50:6a:ca:b8:
7c:d0:a4:6e:02:7b:47:2b:94:7f:b7:28:03:6a:61:
56:02:dc:53:01:17:a7:27:b7:39:4f:c8:ad:99:31:
1c:4e:54:41:57:c1:26:03:3c:d8:a7:15:bf:21:f3:
2a:c6:c1:c7:73:ed:ef:b2:fb:3c:55:9e:c4:16:68:
c3:5d:3f:78:3c:5a:80:0d:c9:52:bb:94:0d:84:d3:
be:6f:8a:78:d9:8d:98:7f:8d:be:56:ee:6d:59:a5:
88:2e:56:1f:89:bd:4e:ed:6c:41:6d:d9:09:e0:86:
89:bd:e5:e7:1b:19:54:a5:d5:b3:39:e5:09:21:7b:
5c:54:01:d5:67:f7:2d:23:c9:6d:2b:36:98:17:5c:
69:f3:a7:03:f4:4e:27:68:58:cf:de:49:5f:59:3e:
d9:9b:46:fa:33:b2:14:3c:f2:3c:cb:5b:e8:3f:9f:
62:2b:06:2a:74:42:e9:b8:34:7b:3b:c6:a6:0a:fb:
d2:0f:8f:8b:fd:f2:71:e3:87:26:69:d7:cd:97:aa:
9a:cd:30:be:27:f4:6e:36:4f:55:e5:60:e4:89:05:
9e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:63:1C:75:67:96:FE:05:2B:8B:99:55:04:47:A8:3F:B4:A2:E2:07
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dd:a5:26:58:fd:de:3e:17:93:39:f6:15:e1:fe:55:bd:2d:
2f:0f:e6:52:87:95:c4:fe:d8:c5:70:05:0a:a4:09:6a:13:0c:
f3:c8:d6:91:ca:57:b8:9a:53:58:d3:f5:86:61:e0:7b:03:68:
fa:7a:36:bf:0d:05:07:89:ec:cf:20:e4:27:d4:5c:38:7c:0d:
88:04:97:f8:da:3a:7e:23:6e:df:df:09:ac:d5:81:4f:5c:85:
d3:d3:98:5f:be:2c:96:0f:2c:2a:6f:37:a8:89:a2:61:40:bf:
05:92:c5:97:cc:a2:ae:92:81:fd:db:20:66:e5:72:86:3f:05:
e9:15:f1:50:31:6d:ec:ac:e8:c6:83:f3:cb:ef:49:95:bb:16:
96:8f:0d:a3:92:fa:37:9d:3b:9b:34:17:e5:f3:24:e3:67:d7:
95:f8:a6:79:66:e1:ab:a5:e9:3b:e0:94:5f:3b:db:69:c0:4b:
80:82:5d:00:38:4f:51:62:8f:ce:51:fc:c6:76:bf:fa:20:c7:
b6:b8:45:c2:65:84:9c:12:9d:94:4e:50:de:38:ba:e1:5e:74:
15:fb:6e:12:3f:77:35:66:13:ab:1d:39:32:cc:eb:b9:47:2b:
09:21:37:48:48:a7:4d:d0:20:3c:f0:e6:19:26:5a:93:b2:8c:
2d:c6:f0:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNtPTHtNNWrl3+doS6E3+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YzBhNWJhNWJjODJlMjBlMDQ2ZmJiNTRjMDY1ODA2ZjRj
N2I2YTEwHhcNMjUwNDE5MTEwMDI2WhcNMjUwNDIwMTEwMDI2WjAzMTEwLwYDVQQD
EyhmYjYzMWM3NTY3OTZmZTA1MmI4Yjk5NTUwNDQ3YTgzZmI0YTJlMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg2s4Hlu1f/gYe7ZCY3Ot3ZCRPBX
HkDUO6ZDWl9hon/NqgfS4E7wW1Bqyrh80KRuAntHK5R/tygDamFWAtxTARenJ7c5
T8itmTEcTlRBV8EmAzzYpxW/IfMqxsHHc+3vsvs8VZ7EFmjDXT94PFqADclSu5QN
hNO+b4p42Y2Yf42+Vu5tWaWILlYfib1O7WxBbdkJ4IaJveXnGxlUpdWzOeUJIXtc
VAHVZ/ctI8ltKzaYF1xp86cD9E4naFjP3klfWT7Zm0b6M7IUPPI8y1voP59iKwYq
dELpuDR7O8amCvvSD4+L/fJx44cmadfNl6qazTC+J/RuNk9V5WDkiQWegwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtjHHVnlv4FK4uZVQRHqD+0ouIHMB8GA1UdIwQY
MBaAFDXApbpbyC4g4Eb7tUwGWAb0x7ahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmNDbHVsdklMaURnUnZ1MVRBWllCdlRIdHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83MDczZjEtM2EwOC00ZTRhLWJlZGYt
NThjY2Y5NWQyODJiLzEvTmNDbHVsdklMaURnUnZ1MVRBWllCdlRIdHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83MDczZjEtM2EwOC00ZTRhLWJlZGYtNThjY2Y5NWQyODJi
LzEvTmNDbHVsdklMaURnUnZ1MVRBWllCdlRIdHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALN2lJlj9
3j4Xkzn2FeH+Vb0tLw/mUoeVxP7YxXAFCqQJahMM88jWkcpXuJpTWNP1hmHgewNo
+no2vw0FB4nszyDkJ9RcOHwNiASX+No6fiNu398JrNWBT1yF09OYX74slg8sKm83
qImiYUC/BZLFl8yirpKB/dsgZuVyhj8F6RXxUDFt7KzoxoPzy+9JlbsWlo8No5L6
N507mzQX5fMk42fXlfimeWbhq6XpO+CUXzvbacBLgIJdADhPUWKPzlH8xna/+iDH
trhFwmWEnBKdlE5Q3ji64V50FftuEj93NWYTqx05MszruUcrCSE3SEinTdAgPPDm
GSZak7KMLcbwPg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:40:23 2025 by rpki-client