Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: 5vccoGwpLo+cWXtPpZWGHUo572e/hXB/lVK7hBt7cXU=
Subject key identifier: 61:ED:6B:F1:2B:E4:CE:A6:03:77:D0:3B:DB:00:C4:19:2D:69:96:42
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 01963E78F93BC62CA229634F5FF45FCF1643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 12:00:37 +0000
Manifest this update: Wed 16 Apr 2025 12:00:37 +0000
Manifest next update: Thu 17 Apr 2025 12:00:37 +0000
Files and hashes: 1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: 7ZvTHOumdSrWDTEiapx46Ttdi6yF+e5GEWMTldTT3Lo=)
2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=)
3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:f9:3b:c6:2c:a2:29:63:4f:5f:f4:5f:cf:16:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Apr 16 12:00:37 2025 GMT
Not After : Apr 17 12:00:37 2025 GMT
Subject: CN=61ed6bf12be4cea60377d03bdb00c4192d699642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:2d:bb:23:ab:fa:22:58:7c:10:f0:0f:b4:
8a:e3:56:7b:32:7f:b9:b0:9d:9e:16:c1:79:fa:41:
43:22:f2:cc:8f:93:59:4b:7d:73:0c:ca:26:1d:bd:
37:20:f8:ec:53:9d:b9:24:c6:15:aa:67:1c:26:48:
a0:38:b8:d4:ba:ea:36:07:f7:c4:d2:e5:86:aa:2b:
7d:5f:69:c6:07:d4:d9:f7:33:42:77:84:62:0f:ce:
11:ff:60:c2:62:9e:94:c5:dc:de:86:4f:55:7f:de:
38:4f:8c:6a:d9:10:8c:d0:96:18:ba:58:15:17:16:
05:2e:f3:84:e3:c7:a5:80:ca:8b:97:df:c7:b6:02:
c4:28:88:9b:41:1d:49:ca:11:37:24:61:0b:4b:04:
1e:c3:9e:84:a7:30:33:41:a7:ab:79:30:84:71:73:
2c:80:fb:31:9d:26:c1:1b:55:82:5e:05:08:bd:bc:
a5:d1:0d:a8:66:e5:11:4b:e1:20:9d:ca:3c:52:25:
96:c0:5e:47:d6:e2:cc:c9:6c:44:eb:6f:89:5b:bf:
1e:b6:fd:a0:98:d2:00:29:c2:97:47:1e:9f:4c:e5:
42:6b:b6:2d:82:59:fd:15:80:7b:1b:65:bd:05:07:
26:59:30:3a:00:a3:4f:fd:bd:b3:ba:af:50:8a:69:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:ED:6B:F1:2B:E4:CE:A6:03:77:D0:3B:DB:00:C4:19:2D:69:96:42
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0a:ff:d5:31:b7:b7:bf:ce:77:88:14:1c:e8:5a:9c:f9:72:
90:95:4a:13:56:16:c2:1d:4a:58:20:b8:0d:ba:0a:a6:ff:20:
ff:eb:48:6a:2b:ed:aa:41:94:9c:88:55:00:23:53:7e:4e:8d:
e2:92:d2:00:7f:52:c2:bd:25:c0:b7:a9:1f:c4:34:81:fe:4a:
cb:70:3d:7b:86:9d:33:5a:48:16:21:1c:13:78:e2:af:0b:0c:
e2:97:f4:29:9f:ee:b1:e7:48:2d:87:a6:4b:5e:8e:bf:09:04:
bd:10:2f:1e:32:83:8e:6f:d8:08:e8:bd:22:c3:bc:97:af:30:
33:7e:1c:98:2f:53:40:2f:c2:f8:53:33:1c:03:5b:7b:12:47:
8e:14:32:bc:3c:72:f7:e7:6f:e4:a1:48:a1:f6:30:05:fe:95:
ea:0b:c1:cc:d7:4f:95:03:bd:f4:c6:f6:a5:11:7e:16:18:7c:
9f:2f:d3:b8:e6:11:cb:09:2d:38:8a:af:c5:97:69:b4:cb:73:
e9:a9:1a:ec:e8:7f:94:4f:71:58:6f:e2:19:10:09:ae:c5:f8:
4e:62:41:bd:9f:d3:80:f0:7d:40:89:c3:11:f5:50:ea:ef:ea:
14:0c:d4:45:74:c5:fe:f3:a5:6e:75:1a:e3:6c:64:0d:ca:2d:
4e:2e:09:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+ePk7xiyiKWNPX/RfzxZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj
MDgxOTAwHhcNMjUwNDE2MTIwMDM3WhcNMjUwNDE3MTIwMDM3WjAzMTEwLwYDVQQD
Eyg2MWVkNmJmMTJiZTRjZWE2MDM3N2QwM2JkYjAwYzQxOTJkNjk5NjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TEtuyOr+iJYfBDwD7SK41Z7Mn+5
sJ2eFsF5+kFDIvLMj5NZS31zDMomHb03IPjsU525JMYVqmccJkigOLjUuuo2B/fE
0uWGqit9X2nGB9TZ9zNCd4RiD84R/2DCYp6Uxdzehk9Vf944T4xq2RCM0JYYulgV
FxYFLvOE48elgMqLl9/HtgLEKIibQR1JyhE3JGELSwQew56EpzAzQaereTCEcXMs
gPsxnSbBG1WCXgUIvbyl0Q2oZuURS+Egnco8UiWWwF5H1uLMyWxE62+JW78etv2g
mNIAKcKXRx6fTOVCa7Ytgln9FYB7G2W9BQcmWTA6AKNP/b2zuq9QimmSHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHta/Er5M6mA3fQO9sAxBktaZZCMB8GA1UdIwQY
MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt
MzkzNjk2ODlmMjdlLzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl
LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAr/1TG3
t7/Od4gUHOhanPlykJVKE1YWwh1KWCC4DboKpv8g/+tIaivtqkGUnIhVACNTfk6N
4pLSAH9Swr0lwLepH8Q0gf5Ky3A9e4adM1pIFiEcE3jirwsM4pf0KZ/usedILYem
S16OvwkEvRAvHjKDjm/YCOi9IsO8l68wM34cmC9TQC/C+FMzHANbexJHjhQyvDxy
9+dv5KFIofYwBf6V6gvBzNdPlQO99Mb2pRF+Fhh8ny/TuOYRywktOIqvxZdptMtz
6aka7Oh/lE9xWG/iGRAJrsX4TmJBvZ/TgPB9QInDEfVQ6u/qFAzURXTF/vOlbnUa
42xkDcotTi4JJw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:25:47 2025 by rpki-client