Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: 7yIUE4Et5nUsiwORaS8wS4dI3SKMKOzR6ZpZs7vkDFw=
Subject key identifier: CB:D1:5A:2B:86:C9:01:2B:61:BA:C3:5C:EB:5D:48:32:8F:03:CD:90
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 0196BE25921CBC4EEB274846EA619BCE4BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 07:00:55 +0000
Manifest this update: Sun 11 May 2025 07:00:55 +0000
Manifest next update: Mon 12 May 2025 07:00:55 +0000
Files and hashes: 1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: GXvnSj93xGx5Rr+/ozWVw/7U0KLbkcfU2nBGXyHyF10=)
3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=)
4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:92:1c:bc:4e:eb:27:48:46:ea:61:9b:ce:4b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: May 11 07:00:55 2025 GMT
Not After : May 12 07:00:55 2025 GMT
Subject: CN=cbd15a2b86c9012b61bac35ceb5d48328f03cd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:99:d1:5d:75:5c:00:61:d2:da:72:6b:5d:
48:37:00:34:df:cc:9d:7d:79:fb:01:bf:ad:8e:b6:
c5:d6:ea:7b:fb:15:a6:d1:a9:a4:17:9a:8b:c5:68:
62:18:38:84:6b:e6:3a:f8:73:8c:4d:bf:ab:47:a0:
96:c9:12:fe:53:13:77:98:32:5c:1a:45:4c:8a:99:
b9:1b:59:b1:27:c3:07:29:ee:d5:bf:08:f1:f1:48:
bb:50:a4:45:53:f4:ec:63:cb:3d:b7:db:6b:82:d7:
3d:c3:56:ee:1b:ee:f8:86:7b:fd:12:7c:fb:42:d8:
a8:b8:51:89:59:fa:f7:ca:d1:d3:4b:2d:77:bc:6e:
8b:c1:2d:fc:1f:52:31:d9:12:39:07:43:db:e1:37:
4c:5e:fd:ce:78:e3:c4:68:eb:db:dc:bf:da:e2:82:
1b:61:22:c4:1b:f9:73:72:c3:0b:c4:41:2f:49:7a:
d7:5a:d5:2f:03:5a:f7:64:ba:ed:f5:e1:ad:f5:2e:
84:73:31:51:3b:f5:6a:89:59:01:6b:ba:b1:ec:a6:
9d:77:db:0c:31:3c:12:42:e4:f2:90:f6:5e:aa:fb:
e8:08:6d:96:f8:db:66:5e:cb:32:2d:92:6c:f1:a2:
7a:4b:44:d9:93:53:62:46:5f:bf:01:b1:d9:90:3e:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D1:5A:2B:86:C9:01:2B:61:BA:C3:5C:EB:5D:48:32:8F:03:CD:90
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:19:e0:70:b7:8c:ad:7e:6d:77:59:d3:62:ee:1a:74:bc:03:
b4:89:25:58:da:76:ac:f8:b8:b9:7c:6d:02:86:54:12:8f:f7:
56:72:95:ee:5d:93:da:a3:22:46:70:31:b4:23:46:0c:1e:6f:
77:d3:c0:54:5c:b0:63:b4:4c:69:eb:4e:73:8c:7c:57:1e:24:
0e:f1:b9:d6:20:9d:5c:aa:bc:69:43:64:15:36:d8:d9:5e:41:
05:e4:83:6e:05:ef:9d:62:a0:b9:1b:36:43:c5:0f:af:42:68:
7a:67:80:da:93:e5:b4:b7:bc:e2:55:2c:e6:b2:2c:98:88:d7:
bc:75:f6:ba:a2:50:5c:0d:94:63:b8:f7:81:b8:7e:d7:73:74:
2c:13:95:d1:4f:99:c2:3e:a2:db:ee:1d:e8:50:6c:1e:db:8c:
17:c6:a8:5e:53:37:13:4e:16:7b:c7:9a:2f:0c:92:c8:34:b9:
f6:79:27:13:3c:06:82:26:20:51:3f:58:6c:d4:c6:32:cb:be:
01:86:d5:c9:32:82:ec:7a:ff:a7:64:7e:fa:fd:f9:4b:8a:ad:
71:e5:dc:c4:b9:67:7a:c0:c5:34:f9:f2:43:59:1a:4f:fb:a3:
45:0b:8a:62:fc:f6:61:e3:e8:46:6b:1e:ab:b2:70:3b:d6:6e:
f2:e3:ac:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+JZIcvE7rJ0hG6mGbzkusMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MGJlYTNmY2MzY2JjZWRjODI5MTljZjU3Yzc0MTA4YmFl
YTM2OWUwHhcNMjUwNTExMDcwMDU1WhcNMjUwNTEyMDcwMDU1WjAzMTEwLwYDVQQD
EyhjYmQxNWEyYjg2YzkwMTJiNjFiYWMzNWNlYjVkNDgzMjhmMDNjZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntWZ0V11XABh0tpya11INwA038yd
fXn7Ab+tjrbF1up7+xWm0amkF5qLxWhiGDiEa+Y6+HOMTb+rR6CWyRL+UxN3mDJc
GkVMipm5G1mxJ8MHKe7Vvwjx8Ui7UKRFU/TsY8s9t9trgtc9w1buG+74hnv9Enz7
QtiouFGJWfr3ytHTSy13vG6LwS38H1Ix2RI5B0Pb4TdMXv3OeOPEaOvb3L/a4oIb
YSLEG/lzcsMLxEEvSXrXWtUvA1r3ZLrt9eGt9S6EczFRO/VqiVkBa7qx7Kadd9sM
MTwSQuTykPZeqvvoCG2W+NtmXssyLZJs8aJ6S0TZk1NiRl+/AbHZkD7MUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvRWiuGyQErYbrDXOtdSDKPA82QMB8GA1UdIwQY
MBaAFDQL6j/MPLztyCkZz1fHQQi66jaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYt
MTExMDU2MzY5YTIzLzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYtMTExMDU2MzY5YTIz
LzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRngcLeM
rX5td1nTYu4adLwDtIklWNp2rPi4uXxtAoZUEo/3VnKV7l2T2qMiRnAxtCNGDB5v
d9PAVFywY7RMaetOc4x8Vx4kDvG51iCdXKq8aUNkFTbY2V5BBeSDbgXvnWKguRs2
Q8UPr0JoemeA2pPltLe84lUs5rIsmIjXvHX2uqJQXA2UY7j3gbh+13N0LBOV0U+Z
wj6i2+4d6FBsHtuMF8aoXlM3E04We8eaLwySyDS59nknEzwGgiYgUT9YbNTGMsu+
AYbVyTKC7Hr/p2R++v35S4qtceXcxLlnesDFNPnyQ1kaT/ujRQuKYvz2YePoRmse
q7JwO9Zu8uOsDA==
-----END CERTIFICATE-----
Generated at Sun May 11 11:25:04 2025 by rpki-client