Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: QoXknJVxKW5DWI24MuDu3a+aCQKcLckLxiN8GghNX+Y=
Subject key identifier: 79:5F:43:B7:15:A5:E6:BB:73:92:84:82:08:5D:3D:1A:1F:4F:CF:84
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 01964CD99D40EA258D6D5F500987779D7BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 0FF9
Signing time: Sat 19 Apr 2025 07:00:52 +0000
Manifest this update: Sat 19 Apr 2025 07:00:52 +0000
Manifest next update: Sun 20 Apr 2025 07:00:52 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: Uw7CFjpUSel39mVPzqOY1mUp9LaDBPyFzRzCE9TMHVs=)
2: XPkovunJ2mYG9xru2HKfkrigcMA.roa (hash: ZBoNLDdsfMiH4Qvw9YL8Os7NUZ9E42iEu1OMEgsfl7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:9d:40:ea:25:8d:6d:5f:50:09:87:77:9d:7b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Apr 19 07:00:52 2025 GMT
Not After : Apr 20 07:00:52 2025 GMT
Subject: CN=795f43b715a5e6bb73928482085d3d1a1f4fcf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:06:5e:75:15:9f:86:94:6a:29:df:12:2b:
d8:f3:9a:14:fb:40:c0:1c:f3:4e:6f:b3:af:68:1a:
4c:95:6d:1e:2b:ca:76:5f:bc:f2:9b:1c:81:5f:5b:
7d:18:67:fd:c5:75:dc:b6:67:90:8a:12:b7:ce:b9:
1a:0c:86:c9:0d:23:e9:d2:41:4a:e6:8c:45:28:52:
9a:2d:fb:d1:3e:96:cc:af:b6:66:08:eb:1f:5a:44:
f0:20:3b:b6:11:38:fe:1d:e4:9b:5c:fc:f4:45:4b:
05:e0:ec:b2:7a:22:fb:c0:99:03:2c:86:e3:75:e3:
71:3d:5f:1d:fe:d7:07:5b:bf:e0:b9:a9:a7:e9:28:
a3:1b:35:8a:67:5c:1b:58:20:a9:71:35:58:48:55:
52:fd:23:94:74:c5:65:cd:43:13:55:f7:da:3f:2a:
c2:47:eb:0c:ce:0d:42:dc:9e:f9:03:82:bf:13:1e:
fb:65:48:4b:02:be:62:bf:53:f9:92:a2:10:88:45:
f9:ba:af:28:94:58:33:fa:d9:f5:f4:5f:d0:28:ca:
c6:5b:14:ec:f1:09:f6:21:50:4b:34:7d:e0:c6:59:
ba:f7:3b:46:32:29:5d:b8:ee:dc:dc:fc:20:dd:46:
c0:37:de:56:d4:e6:c2:82:64:dd:87:15:bd:86:28:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5F:43:B7:15:A5:E6:BB:73:92:84:82:08:5D:3D:1A:1F:4F:CF:84
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c1:35:ce:fd:46:18:fa:61:16:cd:d0:e1:65:1e:bf:2f:d0:
8e:ef:ce:c6:21:11:27:18:99:03:78:c9:65:4c:fb:c0:a6:64:
ce:ab:36:83:c9:28:25:58:8f:d1:4c:59:e6:aa:e7:d6:82:f4:
cc:93:df:33:54:65:07:7c:c6:a5:69:54:29:23:21:60:12:96:
c1:64:62:1d:37:d2:4b:90:3b:eb:56:7d:08:1a:e6:93:e0:fd:
d9:57:56:7e:9f:91:91:cf:a6:b5:30:db:b2:20:9b:72:ca:33:
cc:4b:ae:1b:0d:90:fe:81:4b:b9:32:c4:79:a9:1d:9c:5b:82:
6e:70:2b:94:7a:d9:72:17:e8:33:22:6a:65:19:47:3b:9d:a9:
74:a4:5c:26:53:3a:a0:4f:da:f2:5c:10:9c:d1:bc:d9:8c:7c:
ad:04:af:87:4c:7b:c1:2a:81:a5:26:39:9b:d3:e9:8d:79:cd:
ae:35:6b:20:24:c2:fe:5a:15:d9:86:b3:4e:cc:c0:8e:c2:1d:
ce:95:4b:8f:dd:7a:83:22:96:31:b7:b9:a4:24:6f:25:8e:27:
04:19:cb:c7:9b:36:32:2a:a7:b6:a6:ab:da:a0:5c:01:29:75:
4d:cd:ca:cd:02:35:59:75:cc:41:db:1f:4d:73:50:e4:57:fa:
f4:34:9c:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2Z1A6iWNbV9QCYd3nXv2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NTFjZWE1YWNlNzdmNGQ3ZjRkZDI4MmYxMGFiOWNiMGVl
NGQxZWMwHhcNMjUwNDE5MDcwMDUyWhcNMjUwNDIwMDcwMDUyWjAzMTEwLwYDVQQD
Eyg3OTVmNDNiNzE1YTVlNmJiNzM5Mjg0ODIwODVkM2QxYTFmNGZjZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS0GXnUVn4aUainfEivY85oU+0DA
HPNOb7OvaBpMlW0eK8p2X7zymxyBX1t9GGf9xXXctmeQihK3zrkaDIbJDSPp0kFK
5oxFKFKaLfvRPpbMr7ZmCOsfWkTwIDu2ETj+HeSbXPz0RUsF4OyyeiL7wJkDLIbj
deNxPV8d/tcHW7/guamn6SijGzWKZ1wbWCCpcTVYSFVS/SOUdMVlzUMTVffaPyrC
R+sMzg1C3J75A4K/Ex77ZUhLAr5iv1P5kqIQiEX5uq8olFgz+tn19F/QKMrGWxTs
8Qn2IVBLNH3gxlm69ztGMilduO7c3Pwg3UbAN95W1ObCgmTdhxW9hijnGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlfQ7cVpea7c5KEgghdPRofT8+EMB8GA1UdIwQY
MBaAFDZRzqWs539Nf03SgvEKucsO5NHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hYzIxNGItMzc3Mi00ODEwLTkyMDYt
YjkyYjA5NGYzYTNjLzEvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hYzIxNGItMzc3Mi00ODEwLTkyMDYtYjkyYjA5NGYzYTNj
LzEvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsE1zv1G
GPphFs3Q4WUevy/Qju/OxiERJxiZA3jJZUz7wKZkzqs2g8koJViP0UxZ5qrn1oL0
zJPfM1RlB3zGpWlUKSMhYBKWwWRiHTfSS5A761Z9CBrmk+D92VdWfp+Rkc+mtTDb
siCbcsozzEuuGw2Q/oFLuTLEeakdnFuCbnArlHrZchfoMyJqZRlHO52pdKRcJlM6
oE/a8lwQnNG82Yx8rQSvh0x7wSqBpSY5m9PpjXnNrjVrICTC/loV2YazTszAjsId
zpVLj916gyKWMbe5pCRvJY4nBBnLx5s2Miqntqar2qBcASl1Tc3KzQI1WXXMQdsf
TXNQ5Ff69DScPw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:26 2025 by rpki-client