Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
File: N8ZRc24kPV6mzsymOv20oDEtdzA.mft (raw, json)
Hash identifier: 5pzbaAQ7IHU768lETXzF1B2ThCAi4YXGOuGwNIHRIC8=
Subject key identifier: C3:62:C3:6D:EC:E2:F9:86:6C:B4:23:40:F9:98:59:3B:C7:47:E6:89
Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Certificate serial: 0196BDEEAA5152857A5C135E7B0D5F3A74C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 06:00:56 +0000
Manifest this update: Sun 11 May 2025 06:00:56 +0000
Manifest next update: Mon 12 May 2025 06:00:56 +0000
Files and hashes: 1: N8ZRc24kPV6mzsymOv20oDEtdzA.crl (hash: 8/xIUnLDnpP/SxYaXegZkLU12LR9nFSz2aBiuhUfIeU=)
2: ZRv7bLa28b8tf6OWanURzCF5xRg.roa (hash: oK8tGS8JdWtsRZmm08fTUJdRLOafRX6MArGF8Pv/FL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:aa:51:52:85:7a:5c:13:5e:7b:0d:5f:3a:74:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Validity
Not Before: May 11 06:00:56 2025 GMT
Not After : May 12 06:00:56 2025 GMT
Subject: CN=c362c36dece2f9866cb42340f998593bc747e689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:88:d2:32:09:84:74:05:8a:a9:6f:2c:6c:
9d:1a:ee:63:13:ea:72:10:b2:72:ea:f5:fd:34:94:
11:ac:23:7d:12:35:5b:b6:38:3f:66:c2:0a:03:07:
73:01:07:74:0b:0d:5c:dd:ec:99:45:23:3c:bb:f7:
a9:b1:b4:4a:96:8f:6f:55:4e:52:8b:a0:75:70:d9:
a5:85:dd:e7:68:61:3f:30:bf:21:ce:4f:97:c0:c2:
44:e5:b9:66:08:65:9e:e1:6a:25:18:c6:c3:50:7d:
e7:36:ab:6c:55:eb:12:e2:2d:51:07:69:4b:b0:8c:
d0:e8:dd:82:3e:82:50:8d:55:91:34:7a:91:e8:e8:
ff:37:19:58:43:df:40:eb:cc:32:d8:cf:c2:a0:bf:
0c:e3:d1:9c:72:8b:8c:3f:90:74:70:f8:d4:b8:ac:
84:1b:cf:2d:0f:28:b6:a2:74:90:fa:c0:6c:c6:34:
fa:fe:1f:02:91:4c:93:86:45:33:fe:be:98:cd:3e:
80:fe:1c:19:8d:00:87:1e:2e:e9:f8:82:d2:4e:52:
6d:bd:35:eb:1a:eb:d0:b4:04:2e:2a:6c:de:d7:cf:
b6:f4:bb:b8:da:bd:cc:03:0c:62:f1:2f:65:59:19:
6a:c1:14:10:74:c5:17:41:3e:4c:1c:d0:a6:e1:5e:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:62:C3:6D:EC:E2:F9:86:6C:B4:23:40:F9:98:59:3B:C7:47:E6:89
X509v3 Authority Key Identifier:
keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:db:7b:80:a1:c4:c1:33:0a:97:13:fe:c8:dc:e7:52:b9:7a:
65:79:c4:87:ff:4e:b8:88:d8:69:82:fe:d7:56:d5:8a:38:ff:
b4:13:39:44:33:c7:fb:9b:dd:ca:8b:28:95:2c:e7:b1:d8:65:
39:5b:ea:f0:ef:80:2a:3e:23:d9:1c:7f:a1:1a:e7:02:06:e1:
0a:b6:fe:cc:b6:68:32:fc:39:d2:09:0e:56:94:3b:ae:9c:bf:
9e:c6:54:01:66:38:c8:12:25:b4:d8:a3:df:2a:70:9f:66:53:
73:de:de:5d:61:5d:eb:ad:a5:92:bd:b5:a9:15:ae:13:9a:05:
32:9a:b4:e0:b5:6c:fc:3b:91:c2:87:d2:ec:28:b0:77:4d:a3:
41:09:a0:6f:54:07:11:3d:65:83:0b:f3:31:70:88:e4:1b:13:
6e:50:dc:3a:47:3f:c7:99:3b:ac:3b:cc:3a:8e:ac:92:93:58:
37:f1:5c:f6:ab:9f:fb:68:46:a9:7f:f9:da:9b:a9:bf:57:1e:
03:bb:45:8a:b2:c4:19:0c:20:11:fa:93:a5:cc:dd:c2:1b:bd:
19:71:5e:1a:c9:a8:76:92:ab:4c:01:fc:a0:11:96:d5:4e:03:
17:ef:5c:de:ba:e2:df:6e:48:9e:3b:b2:22:13:1c:3e:92:d7:
e9:88:a8:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97qpRUoV6XBNeew1fOnTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YzY1MTczNmUyNDNkNWVhNmNlY2NhNjNhZmRiNGEwMzEy
ZDc3MzAwHhcNMjUwNTExMDYwMDU2WhcNMjUwNTEyMDYwMDU2WjAzMTEwLwYDVQQD
EyhjMzYyYzM2ZGVjZTJmOTg2NmNiNDIzNDBmOTk4NTkzYmM3NDdlNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3niI0jIJhHQFiqlvLGydGu5jE+py
ELJy6vX9NJQRrCN9EjVbtjg/ZsIKAwdzAQd0Cw1c3eyZRSM8u/epsbRKlo9vVU5S
i6B1cNmlhd3naGE/ML8hzk+XwMJE5blmCGWe4WolGMbDUH3nNqtsVesS4i1RB2lL
sIzQ6N2CPoJQjVWRNHqR6Oj/NxlYQ99A68wy2M/CoL8M49GccouMP5B0cPjUuKyE
G88tDyi2onSQ+sBsxjT6/h8CkUyThkUz/r6YzT6A/hwZjQCHHi7p+ILSTlJtvTXr
GuvQtAQuKmze18+29Lu42r3MAwxi8S9lWRlqwRQQdMUXQT5MHNCm4V5uEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNiw23s4vmGbLQjQPmYWTvHR+aJMB8GA1UdIwQY
MBaAFDfGUXNuJD1eps7Mpjr9tKAxLXcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjhaUmMyNGtQVjZtenN5bU92MjBvREV0ZHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81MjNjN2QtMzkxNy00MTM3LTlkZjMt
YWJlYTYyNTg2OGE4LzEvTjhaUmMyNGtQVjZtenN5bU92MjBvREV0ZHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81MjNjN2QtMzkxNy00MTM3LTlkZjMtYWJlYTYyNTg2OGE4
LzEvTjhaUmMyNGtQVjZtenN5bU92MjBvREV0ZHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNt7gKHE
wTMKlxP+yNznUrl6ZXnEh/9OuIjYaYL+11bVijj/tBM5RDPH+5vdyosolSznsdhl
OVvq8O+AKj4j2Rx/oRrnAgbhCrb+zLZoMvw50gkOVpQ7rpy/nsZUAWY4yBIltNij
3ypwn2ZTc97eXWFd662lkr21qRWuE5oFMpq04LVs/DuRwofS7Ciwd02jQQmgb1QH
ET1lgwvzMXCI5BsTblDcOkc/x5k7rDvMOo6skpNYN/Fc9quf+2hGqX/52pupv1ce
A7tFirLEGQwgEfqTpczdwhu9GXFeGsmodpKrTAH8oBGW1U4DF+9c3rri325Injuy
IhMcPpLX6YioZA==
-----END CERTIFICATE-----
Generated at Sun May 11 13:44:57 2025 by rpki-client