Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: FJ8aN6Rx802reIgjoBA/GkELQgsPUC87cjJd2fDGUec=
Subject key identifier: C5:66:94:48:DC:24:FC:B4:E2:09:FD:06:AB:AC:7D:A2:E5:07:B2:E7
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 0196C2A6FDC5C21441179DA646C68B89F8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 0F81
Signing time: Mon 12 May 2025 04:00:45 +0000
Manifest this update: Mon 12 May 2025 04:00:45 +0000
Manifest next update: Tue 13 May 2025 04:00:45 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: Z5T2tifP4vkFRe9CESBZJnGq6VgjLA2R0TRxnSzi0SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:fd:c5:c2:14:41:17:9d:a6:46:c6:8b:89:f8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: May 12 04:00:45 2025 GMT
Not After : May 13 04:00:45 2025 GMT
Subject: CN=c5669448dc24fcb4e209fd06abac7da2e507b2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:d4:56:49:3a:ce:49:34:5f:b1:9c:4a:f2:
89:e4:50:2a:92:79:5b:34:ef:40:d5:01:7f:4c:82:
3a:73:c2:1d:67:ee:58:ff:99:e1:6b:46:8a:1a:3e:
d8:4e:4f:ce:d9:dc:d8:0c:fa:f2:05:9a:6f:bf:fc:
df:bf:5e:59:96:ce:1e:c1:37:35:25:a1:93:c2:10:
17:45:3f:fc:0a:84:23:36:42:e5:c6:11:1a:c2:49:
d9:78:fd:a7:72:85:9b:da:a7:19:44:54:2d:aa:0f:
41:bb:9e:b4:48:0a:0c:e9:f0:a9:70:e3:f3:72:23:
56:06:20:6e:8b:84:de:8e:73:3b:52:5b:8b:af:c8:
68:b1:72:d3:3b:65:b1:88:7a:24:28:b8:db:79:4b:
c1:19:3b:30:28:33:ad:8a:bf:c8:a6:9a:45:03:9e:
28:97:4b:21:00:e8:42:e7:86:5b:18:34:fc:f0:16:
62:e0:51:34:d7:57:0f:24:00:e0:96:46:04:a5:4a:
d7:04:01:29:f0:51:61:5d:36:a5:70:f9:b2:db:72:
5f:4b:85:e7:21:27:15:92:96:b9:d3:f8:a9:f0:e5:
c1:4c:b7:10:e2:13:01:dc:be:bb:b9:88:88:b4:9d:
3c:be:6b:8e:8b:e7:98:f1:25:40:59:38:4a:05:e3:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:66:94:48:DC:24:FC:B4:E2:09:FD:06:AB:AC:7D:A2:E5:07:B2:E7
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c5:6d:f1:31:e3:18:dc:2c:6a:a4:d0:cc:71:99:4f:fd:60:
42:8a:d0:18:1c:c0:11:6a:41:8a:37:e4:a0:5c:54:a0:84:f2:
50:83:f2:f0:60:ca:f7:eb:2b:df:6a:a1:e4:84:a0:04:7e:2f:
f2:10:49:fd:ca:1f:51:96:30:00:e4:a7:3a:21:28:c6:0c:0f:
87:a9:da:88:ae:d8:3f:98:e9:da:b2:63:de:7b:e6:df:f3:1c:
98:80:30:b1:4e:a5:7a:15:18:01:3e:85:b1:81:4d:7e:5b:04:
c3:45:9b:fb:a6:64:a7:bd:72:e1:19:9f:f7:e8:7f:c4:61:67:
86:5e:a4:49:87:3f:21:60:6a:96:4a:66:64:af:f0:38:a1:99:
b7:bc:af:59:10:5e:43:47:7f:64:12:55:59:26:37:cd:9a:1a:
95:cb:5c:95:d0:a1:db:58:7a:a6:a3:15:77:47:4f:5c:af:45:
19:19:07:ce:b4:b9:e3:7d:d6:5b:2c:bf:d9:51:43:be:97:10:
4d:ab:ec:1d:48:c0:ff:6b:d1:a7:79:b0:83:f5:0a:95:95:02:
6e:42:56:1d:d4:f7:cb:28:a1:36:d4:8e:bb:65:68:ca:f2:de:
84:e5:45:70:a5:15:db:02:55:8d:73:4e:41:e2:02:3d:a6:cd:
39:23:3f:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCpv3FwhRBF52mRsaLifjVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllM2U0YTMyZTA2YTE4NzIzNGUwMTc3ZjJjYmEwNTU2NGNk
MWZiNTAwHhcNMjUwNTEyMDQwMDQ1WhcNMjUwNTEzMDQwMDQ1WjAzMTEwLwYDVQQD
EyhjNTY2OTQ0OGRjMjRmY2I0ZTIwOWZkMDZhYmFjN2RhMmU1MDdiMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKzUVkk6zkk0X7GcSvKJ5FAqknlb
NO9A1QF/TII6c8IdZ+5Y/5nha0aKGj7YTk/O2dzYDPryBZpvv/zfv15Zls4ewTc1
JaGTwhAXRT/8CoQjNkLlxhEawknZeP2ncoWb2qcZRFQtqg9Bu560SAoM6fCpcOPz
ciNWBiBui4TejnM7UluLr8hosXLTO2WxiHokKLjbeUvBGTswKDOtir/IpppFA54o
l0shAOhC54ZbGDT88BZi4FE011cPJADglkYEpUrXBAEp8FFhXTalcPmy23JfS4Xn
IScVkpa50/ip8OXBTLcQ4hMB3L67uYiItJ08vmuOi+eY8SVAWThKBeMrIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVmlEjcJPy04gn9BqusfaLlB7LnMB8GA1UdIwQY
MBaAFJ4+SjLgahhyNOAXfyy6BVZM0ftQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYzM4ZmItMmNjNi00NTUxLTliZjMt
OGM3OTNjMDYyYTQ5LzEvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zYzM4ZmItMmNjNi00NTUxLTliZjMtOGM3OTNjMDYyYTQ5
LzEvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcVt8THj
GNwsaqTQzHGZT/1gQorQGBzAEWpBijfkoFxUoITyUIPy8GDK9+sr32qh5ISgBH4v
8hBJ/cofUZYwAOSnOiEoxgwPh6naiK7YP5jp2rJj3nvm3/McmIAwsU6lehUYAT6F
sYFNflsEw0Wb+6Zkp71y4Rmf9+h/xGFnhl6kSYc/IWBqlkpmZK/wOKGZt7yvWRBe
Q0d/ZBJVWSY3zZoalctcldCh21h6pqMVd0dPXK9FGRkHzrS5433WWyy/2VFDvpcQ
TavsHUjA/2vRp3mwg/UKlZUCbkJWHdT3yyihNtSOu2VoyvLehOVFcKUV2wJVjXNO
QeICPabNOSM/WQ==
-----END CERTIFICATE-----
Generated at Mon May 12 11:13:59 2025 by rpki-client