Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
File: Nq6kWA8QexEmjJbqMYko1O11_5M.mft (raw, json)
Hash identifier: 53BAuNsrlEZLxHjSm0pha0Yy4xHmipTOGvYnb8c+Uik=
Subject key identifier: 07:1D:AB:B9:EB:37:4D:5F:14:49:39:2F:CC:10:3D:86:04:00:05:5D
Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
Certificate issuer: /CN=36aea4580f107b11268c96ea318928d4ed75ff93
Certificate serial: 0196BAED23B9FD1A707FA4E1E6DB9E486815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
Manifest number: 03EA
Signing time: Sat 10 May 2025 16:00:25 +0000
Manifest this update: Sat 10 May 2025 16:00:25 +0000
Manifest next update: Sun 11 May 2025 16:00:25 +0000
Files and hashes: 1: Nq6kWA8QexEmjJbqMYko1O11_5M.crl (hash: 4RfTyM3vA+xxNIJUKDcuA8VCTR4+1AQxpkjhBmv6H64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:23:b9:fd:1a:70:7f:a4:e1:e6:db:9e:48:68:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93
Validity
Not Before: May 10 16:00:25 2025 GMT
Not After : May 11 16:00:25 2025 GMT
Subject: CN=071dabb9eb374d5f1449392fcc103d860400055d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:22:51:5d:e7:b6:29:39:62:1c:1f:28:cd:
fc:2a:56:5c:12:9f:99:f9:9d:af:69:25:06:db:2c:
6b:e4:76:c7:a7:9e:0d:71:7f:ca:96:15:94:fa:72:
8c:7b:fd:62:6f:f0:8c:d5:74:d2:80:01:ec:8b:fa:
29:5b:d2:37:7d:b4:6d:20:20:cc:72:9c:12:98:52:
e4:ce:dd:1b:01:89:2c:fd:ed:cc:da:d4:fd:e7:c0:
07:29:15:c3:c8:97:62:13:ff:4d:fd:5c:03:f8:69:
43:25:d3:63:3e:7b:ad:a1:98:94:5c:ec:bc:d6:c1:
e7:9f:9e:de:ad:84:08:2e:55:27:f3:5b:41:37:71:
28:04:b3:b7:64:f3:10:2e:45:74:34:a7:78:9a:b3:
08:af:5a:be:1e:4b:49:d6:e4:91:66:b6:f5:0c:74:
03:3e:d5:19:19:6c:b7:85:de:dd:12:4c:d0:ff:06:
7d:45:86:89:ad:1b:9b:0c:31:d2:35:80:96:28:c1:
34:3b:73:dd:37:d6:68:e0:25:ff:05:5c:9a:49:90:
af:cc:11:71:37:e7:72:20:9d:7a:7e:22:e6:75:3a:
bc:fb:f4:3e:4b:59:65:51:a9:8e:30:9d:65:ad:33:
f1:ab:01:b1:c2:53:eb:8c:a6:23:e5:0d:a5:54:cd:
65:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1D:AB:B9:EB:37:4D:5F:14:49:39:2F:CC:10:3D:86:04:00:05:5D
X509v3 Authority Key Identifier:
keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c5:d9:0d:06:6a:a4:f8:33:57:1b:68:c0:88:35:d1:00:e5:
17:e8:d7:b8:3e:ec:71:5c:40:02:4b:c0:27:26:44:f1:44:f9:
b4:7d:b1:f2:d8:aa:b8:32:e3:b7:5c:41:04:74:02:10:af:b3:
05:67:39:7b:8f:18:29:29:9e:91:b7:13:7c:fc:cd:ab:7a:f8:
b2:84:e3:56:3b:8d:fe:df:54:c0:78:13:99:c1:4b:54:7f:29:
51:76:47:5d:16:6b:6b:8a:60:f6:82:36:4f:2d:72:8d:65:b7:
31:c8:b8:f6:f1:0f:c1:df:b0:5b:e0:41:0a:30:3b:57:81:ef:
2f:0d:7f:c3:14:7b:3b:de:8d:8f:9f:f7:20:ae:79:f1:d2:a1:
05:ac:e8:d2:30:c3:99:72:5b:66:86:e6:b2:9d:08:63:3a:30:
c8:6e:d7:d1:02:39:5d:8d:b4:8f:d6:7d:ba:19:7b:95:d0:c0:
9e:11:19:e1:3c:4e:cd:3c:f2:b1:de:98:fe:53:d9:15:3a:b2:
c0:f3:c1:ba:81:a0:d5:11:44:3f:b7:61:fb:07:c9:ed:7c:06:
41:23:e3:6a:ed:f8:56:60:24:1d:38:66:cd:5f:12:2e:19:f0:
ab:86:8a:6a:fc:57:50:20:bc:66:9c:68:f0:66:db:56:ba:18:
95:b7:46:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa67SO5/Rpwf6Th5tueSGgVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YWVhNDU4MGYxMDdiMTEyNjhjOTZlYTMxODkyOGQ0ZWQ3
NWZmOTMwHhcNMjUwNTEwMTYwMDI1WhcNMjUwNTExMTYwMDI1WjAzMTEwLwYDVQQD
EygwNzFkYWJiOWViMzc0ZDVmMTQ0OTM5MmZjYzEwM2Q4NjA0MDAwNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTUiUV3ntik5YhwfKM38KlZcEp+Z
+Z2vaSUG2yxr5HbHp54NcX/KlhWU+nKMe/1ib/CM1XTSgAHsi/opW9I3fbRtICDM
cpwSmFLkzt0bAYks/e3M2tT958AHKRXDyJdiE/9N/VwD+GlDJdNjPnutoZiUXOy8
1sHnn57erYQILlUn81tBN3EoBLO3ZPMQLkV0NKd4mrMIr1q+HktJ1uSRZrb1DHQD
PtUZGWy3hd7dEkzQ/wZ9RYaJrRubDDHSNYCWKME0O3PdN9Zo4CX/BVyaSZCvzBFx
N+dyIJ16fiLmdTq8+/Q+S1llUamOMJ1lrTPxqwGxwlPrjKYj5Q2lVM1lrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcdq7nrN01fFEk5L8wQPYYEAAVdMB8GA1UdIwQY
MBaAFDaupFgPEHsRJoyW6jGJKNTtdf+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYt
ZjI4ZDk3MmM4ODA4LzEvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYtZjI4ZDk3MmM4ODA4
LzEvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsXZDQZq
pPgzVxtowIg10QDlF+jXuD7scVxAAkvAJyZE8UT5tH2x8tiquDLjt1xBBHQCEK+z
BWc5e48YKSmekbcTfPzNq3r4soTjVjuN/t9UwHgTmcFLVH8pUXZHXRZra4pg9oI2
Ty1yjWW3Mci49vEPwd+wW+BBCjA7V4HvLw1/wxR7O96Nj5/3IK558dKhBazo0jDD
mXJbZobmsp0IYzowyG7X0QI5XY20j9Z9uhl7ldDAnhEZ4TxOzTzysd6Y/lPZFTqy
wPPBuoGg1RFEP7dh+wfJ7XwGQSPjau34VmAkHThmzV8SLhnwq4aKavxXUCC8Zpxo
8GbbVroYlbdGRw==
-----END CERTIFICATE-----
Generated at Sat May 10 19:35:31 2025 by rpki-client