Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
File: nnagejNft6He1jqsxRM4rchHJnA.mft (raw, json)
Hash identifier: JwMwGtRX5KMdw2ilTXiuYF8wpxWmE6nay6zIf4//a1M=
Subject key identifier: B3:26:E9:B3:35:B4:FE:F1:CD:48:5D:7E:98:26:5A:52:FC:6E:09:B5
Authority key identifier: 9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
Certificate issuer: /CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Certificate serial: 0196BDEE606B5D9A87FBFC1A81C687768517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
Manifest number: 0C05
Signing time: Sun 11 May 2025 06:00:38 +0000
Manifest this update: Sun 11 May 2025 06:00:38 +0000
Manifest next update: Mon 12 May 2025 06:00:38 +0000
Files and hashes: 1: nnagejNft6He1jqsxRM4rchHJnA.crl (hash: efOL0b3dQPaMkWmBQHsZqVaH//wgHnnqvBQR4gMNTs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:60:6b:5d:9a:87:fb:fc:1a:81:c6:87:76:85:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Validity
Not Before: May 11 06:00:38 2025 GMT
Not After : May 12 06:00:38 2025 GMT
Subject: CN=b326e9b335b4fef1cd485d7e98265a52fc6e09b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d7:ff:f6:ea:6a:fb:61:4f:21:9f:61:06:15:
1c:84:55:c1:2f:40:03:bd:58:64:31:75:f7:42:90:
f3:1f:e4:d4:83:03:5c:32:41:8b:a8:a7:82:f6:ad:
62:36:52:78:b9:52:b8:4c:23:91:f5:26:65:51:d7:
c6:21:41:22:9c:d2:e8:b0:f7:39:83:1f:1d:37:f3:
ac:1c:16:78:04:3b:f6:25:43:3c:79:3a:ce:54:93:
64:ac:56:0e:a0:1d:dc:5a:3d:81:69:49:a4:a6:8c:
7e:c3:cd:01:94:b0:76:85:4d:80:62:6b:ae:0f:2f:
75:97:8c:12:c1:d8:22:4d:7f:59:37:17:d3:ae:15:
7a:c7:25:d8:e1:66:37:af:f1:47:97:7a:e7:b1:f3:
29:21:94:05:3a:5e:03:4a:c9:ba:96:41:4b:56:b7:
f3:d0:87:f8:ea:28:a9:ba:a8:ea:a4:b9:7d:f0:cf:
a6:aa:30:8c:ce:ae:d1:8f:8f:c3:86:ca:90:37:46:
d3:5c:03:8c:7a:38:ee:58:ad:0f:23:b9:b5:d0:4b:
8e:cf:72:6a:ff:b3:22:8b:c4:d1:1e:c0:dc:73:9d:
5c:b6:3c:c7:75:5a:f5:c1:fa:62:ce:36:08:71:4f:
af:cd:fd:d5:39:23:ae:88:3b:fc:5d:c5:6b:74:3b:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:26:E9:B3:35:B4:FE:F1:CD:48:5D:7E:98:26:5A:52:FC:6E:09:B5
X509v3 Authority Key Identifier:
keyid:9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d1:e0:ac:6d:7f:ec:57:c6:75:90:65:ab:a1:13:71:3a:d5:
8d:96:8e:67:cc:56:bb:a2:63:25:09:10:00:3a:c5:eb:57:df:
da:e3:39:6e:f1:92:b4:e2:d4:7e:4e:cc:0c:7d:ca:ec:3c:66:
df:c9:af:8e:f0:75:eb:dd:ba:0e:6c:92:c7:d2:40:bf:94:45:
fb:96:da:23:e8:85:42:01:31:3c:f2:f8:06:b9:f6:70:21:af:
04:2c:0b:0a:fb:41:45:aa:4a:65:60:90:cc:63:c5:f2:c5:e0:
ce:27:7a:2f:dc:2f:03:68:19:9c:94:2f:10:7d:59:97:93:ce:
75:03:4a:ee:4a:06:a2:8a:26:b5:d9:b2:fa:7d:22:23:f2:4b:
3c:e6:c3:90:9a:0e:21:d1:f4:88:06:07:7b:df:7a:35:f0:ab:
7e:1b:cb:49:4b:04:05:de:f2:cd:57:11:7a:1b:8e:7d:2b:d8:
3f:0d:bd:b8:81:14:8b:c6:e8:b3:14:f2:56:33:90:35:24:f5:
df:72:10:bd:ab:c3:be:c4:1e:79:b9:85:09:2b:b5:26:9a:f7:
4c:47:d1:c1:01:bf:dc:23:1b:32:87:4c:b6:f9:cf:ae:85:70:
f2:0a:45:e7:e1:40:09:e9:d2:25:35:23:b6:50:be:a9:a2:f9:
cf:96:d0:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97mBrXZqH+/wagcaHdoUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzZhMDdhMzM1ZmI3YTFkZWQ2M2FhY2M1MTMzOGFkYzg0
NzI2NzAwHhcNMjUwNTExMDYwMDM4WhcNMjUwNTEyMDYwMDM4WjAzMTEwLwYDVQQD
EyhiMzI2ZTliMzM1YjRmZWYxY2Q0ODVkN2U5ODI2NWE1MmZjNmUwOWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8df/9upq+2FPIZ9hBhUchFXBL0AD
vVhkMXX3QpDzH+TUgwNcMkGLqKeC9q1iNlJ4uVK4TCOR9SZlUdfGIUEinNLosPc5
gx8dN/OsHBZ4BDv2JUM8eTrOVJNkrFYOoB3cWj2BaUmkpox+w80BlLB2hU2AYmuu
Dy91l4wSwdgiTX9ZNxfTrhV6xyXY4WY3r/FHl3rnsfMpIZQFOl4DSsm6lkFLVrfz
0If46iipuqjqpLl98M+mqjCMzq7Rj4/DhsqQN0bTXAOMejjuWK0PI7m10EuOz3Jq
/7Mii8TRHsDcc51ctjzHdVr1wfpizjYIcU+vzf3VOSOuiDv8XcVrdDts1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMm6bM1tP7xzUhdfpgmWlL8bgm1MB8GA1UdIwQY
MBaAFJ52oHozX7eh3tY6rMUTOK3IRyZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5hZ2VqTmZ0NkhlMWpxc3hSTTRyY2hISm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80YThiNjctY2M5MS00ZTk2LTgwNjAt
ODJiY2FiMTY2NTZmLzEvbm5hZ2VqTmZ0NkhlMWpxc3hSTTRyY2hISm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80YThiNjctY2M5MS00ZTk2LTgwNjAtODJiY2FiMTY2NTZm
LzEvbm5hZ2VqTmZ0NkhlMWpxc3hSTTRyY2hISm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9HgrG1/
7FfGdZBlq6ETcTrVjZaOZ8xWu6JjJQkQADrF61ff2uM5bvGStOLUfk7MDH3K7Dxm
38mvjvB16926DmySx9JAv5RF+5baI+iFQgExPPL4Brn2cCGvBCwLCvtBRapKZWCQ
zGPF8sXgzid6L9wvA2gZnJQvEH1Zl5POdQNK7koGooomtdmy+n0iI/JLPObDkJoO
IdH0iAYHe996NfCrfhvLSUsEBd7yzVcRehuOfSvYPw29uIEUi8bosxTyVjOQNST1
33IQvavDvsQeebmFCSu1Jpr3TEfRwQG/3CMbModMtvnProVw8gpF5+FACenSJTUj
tlC+qaL5z5bQrA==
-----END CERTIFICATE-----
Generated at Sun May 11 08:59:29 2025 by rpki-client