Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: XHlojmISWOzYXbIiy5ev8vjaLy7gk3mheYmG6BpO6Cw=
Subject key identifier: 61:E8:3E:73:30:F5:CB:AD:F4:30:F8:20:6A:1E:CD:5B:56:B3:E0:B3
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 019510FDB1C6254A52EC6B050F57E1E0BC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 01CF
Signing time: Sun 16 Feb 2025 23:00:16 +0000
Manifest this update: Sun 16 Feb 2025 23:00:16 +0000
Manifest next update: Mon 17 Feb 2025 23:00:16 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: vGth2U67kIS5o9lx4eWt8S9nRUPeKxoe2mBG6iiodVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:b1:c6:25:4a:52:ec:6b:05:0f:57:e1:e0:bc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Feb 16 23:00:16 2025 GMT
Not After : Feb 17 23:00:16 2025 GMT
Subject: CN=61e83e7330f5cbadf430f8206a1ecd5b56b3e0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:ce:1f:86:56:dd:d2:e5:95:83:8a:a2:31:
9b:83:97:21:23:99:78:52:a6:df:03:ec:fb:c5:23:
e7:a3:e3:6b:5e:b7:80:89:81:ed:a2:d7:27:f0:09:
ce:7c:6c:b9:8d:22:c3:07:fe:95:7b:85:b1:30:ad:
10:36:67:da:57:f0:19:81:80:dd:2e:c6:f7:49:a9:
d7:33:fa:c8:7c:72:5b:48:19:de:25:fc:d6:63:9b:
e6:8f:c2:3f:cb:c8:e1:63:b6:24:a4:84:cc:7b:26:
02:b9:6d:8d:10:c2:9e:2b:68:a1:e6:dd:d2:e9:f4:
95:35:85:c8:b3:4e:37:6e:8a:45:5c:01:e1:de:07:
83:8a:a4:6f:3a:48:7e:4e:64:b7:5c:7b:ae:ed:f6:
d4:23:44:49:30:27:51:e1:cb:bd:aa:70:09:85:f7:
19:b1:5b:77:0d:65:c9:f4:bf:13:01:60:1d:77:25:
c4:c7:f3:f1:e1:25:9b:41:61:0a:2d:61:79:ae:eb:
6d:f3:09:c5:07:34:10:94:64:a2:5b:4b:c2:e5:f5:
34:42:95:d5:95:4b:07:1a:2d:eb:78:c4:3f:af:87:
18:38:3c:6f:d6:97:a7:03:0d:89:89:f6:75:a5:fa:
e6:8c:5d:f6:c1:62:1f:15:6e:bb:b7:63:1b:be:d3:
3d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E8:3E:73:30:F5:CB:AD:F4:30:F8:20:6A:1E:CD:5B:56:B3:E0:B3
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b5:c1:ed:f2:5f:f8:76:04:9b:15:17:69:ba:ed:61:72:9c:
99:12:d8:b3:b3:ab:84:10:9e:30:ed:30:1d:2d:48:cb:b0:47:
a3:6c:a0:d2:aa:10:46:6d:bc:5e:fe:ce:cc:22:18:a7:f7:83:
8d:c7:4e:c4:cf:17:b9:3a:30:18:5b:19:cb:a0:d8:c0:20:9f:
d4:9d:69:cd:5e:67:5c:6a:c1:23:b7:2b:ca:0e:00:aa:6b:86:
34:76:32:25:32:39:80:d0:8f:63:8d:b5:81:8a:1c:71:a0:8b:
b4:48:99:0c:a6:69:48:5d:71:b2:ba:80:37:30:71:82:77:12:
5b:e6:53:dd:d8:22:b8:6d:27:68:ed:df:f7:a0:18:78:13:52:
95:6c:bd:09:91:ed:09:e4:02:73:0b:cd:71:29:24:8c:13:d2:
40:22:a8:ca:7a:57:db:b1:af:5e:9c:3b:18:61:6d:14:26:ff:
f7:c5:b4:57:34:de:75:66:c5:2c:9a:55:e0:7d:1a:9f:18:da:
70:36:d5:cc:11:b9:9f:e2:90:92:f8:70:9d:2d:ea:ae:f5:27:
08:72:3b:40:02:08:12:2d:2c:38:50:2d:8e:ff:68:db:08:f4:
18:a6:10:03:11:6c:23:dc:12:5c:68:cf:a8:be:da:6b:9f:35:
cd:8f:76:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/bHGJUpS7GsFD1fh4LyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllY2NjN2RkYWUxMWY4OGUxMGJkMjA4NjZlMWJkNmU2NTc1
Njk3ZTMwHhcNMjUwMjE2MjMwMDE2WhcNMjUwMjE3MjMwMDE2WjAzMTEwLwYDVQQD
Eyg2MWU4M2U3MzMwZjVjYmFkZjQzMGY4MjA2YTFlY2Q1YjU2YjNlMGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLrOH4ZW3dLllYOKojGbg5chI5l4
UqbfA+z7xSPno+NrXreAiYHtotcn8AnOfGy5jSLDB/6Ve4WxMK0QNmfaV/AZgYDd
Lsb3SanXM/rIfHJbSBneJfzWY5vmj8I/y8jhY7YkpITMeyYCuW2NEMKeK2ih5t3S
6fSVNYXIs043bopFXAHh3geDiqRvOkh+TmS3XHuu7fbUI0RJMCdR4cu9qnAJhfcZ
sVt3DWXJ9L8TAWAddyXEx/Px4SWbQWEKLWF5rutt8wnFBzQQlGSiW0vC5fU0QpXV
lUsHGi3reMQ/r4cYODxv1penAw2JifZ1pfrmjF32wWIfFW67t2MbvtM9FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHoPnMw9cut9DD4IGoezVtWs+CzMB8GA1UdIwQY
MBaAFJ7Mx92uEfiOEL0ghm4b1uZXVpfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYjRkZmUtMDM4NC00ODMxLWIzYWQt
ZTY3MmIzMTkwNjg3LzEvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lYjRkZmUtMDM4NC00ODMxLWIzYWQtZTY3MmIzMTkwNjg3
LzEvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrXB7fJf
+HYEmxUXabrtYXKcmRLYs7OrhBCeMO0wHS1Iy7BHo2yg0qoQRm28Xv7OzCIYp/eD
jcdOxM8XuTowGFsZy6DYwCCf1J1pzV5nXGrBI7cryg4AqmuGNHYyJTI5gNCPY421
gYoccaCLtEiZDKZpSF1xsrqANzBxgncSW+ZT3dgiuG0naO3f96AYeBNSlWy9CZHt
CeQCcwvNcSkkjBPSQCKoynpX27GvXpw7GGFtFCb/98W0VzTedWbFLJpV4H0anxja
cDbVzBG5n+KQkvhwnS3qrvUnCHI7QAIIEi0sOFAtjv9o2wj0GKYQAxFsI9wSXGjP
qL7aa581zY926w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:37 2025 by rpki-client