Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
File: nD_Ua11gbBzKtVixc24mIaS8BAM.mft (raw, json)
Hash identifier: HuvKCPslosYng+AxJeKjgavaR2y+9+RoXGFSIIaZJKs=
Subject key identifier: A2:99:A0:26:D8:3B:D3:79:25:BC:AA:A2:87:76:DA:DB:D8:46:6C:BA
Authority key identifier: 9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
Certificate issuer: /CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Certificate serial: 0196C57091447B1477F8E8870CAC1E8C5E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
Manifest number: 07C5
Signing time: Mon 12 May 2025 17:00:10 +0000
Manifest this update: Mon 12 May 2025 17:00:10 +0000
Manifest next update: Tue 13 May 2025 17:00:10 +0000
Files and hashes: 1: nD_Ua11gbBzKtVixc24mIaS8BAM.crl (hash: i7arvQomjEdSIb5xQPfBALeq6s6Y1iPikwi47RoyMF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:91:44:7b:14:77:f8:e8:87:0c:ac:1e:8c:5e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Validity
Not Before: May 12 17:00:10 2025 GMT
Not After : May 13 17:00:10 2025 GMT
Subject: CN=a299a026d83bd37925bcaaa28776dadbd8466cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:5f:b6:d0:3d:e8:21:d8:27:bb:5a:93:b0:
43:0f:5e:c7:c5:21:76:ec:1b:87:8c:6e:c1:43:fd:
bb:d2:f8:4f:f4:c4:94:a6:6e:53:66:76:6b:06:3e:
85:b1:b4:af:b3:25:67:14:e4:a9:99:10:ef:c0:02:
67:e7:f4:9c:68:47:48:f4:ee:d7:dd:a4:a2:b4:40:
de:3a:f9:a4:49:ed:93:df:b6:20:1d:e8:d9:ad:be:
84:ee:52:f7:31:a6:87:87:4c:f0:78:3a:3e:99:ea:
cf:ee:a9:e4:75:19:62:1d:38:44:44:aa:29:8c:df:
75:f9:44:d1:97:54:cb:3a:24:a5:1c:db:68:22:4c:
33:d1:51:31:52:82:48:72:fd:db:d0:12:c6:29:7d:
4b:3f:e2:37:74:22:18:6d:e4:2d:4a:2e:cf:fe:80:
4a:c2:83:3b:5e:aa:44:ec:58:a6:47:63:f2:be:9b:
b7:f6:37:07:a5:8d:c6:d6:aa:41:ee:92:31:9c:58:
fd:f1:96:6b:de:cd:38:78:92:21:60:7d:ea:eb:2f:
28:cb:34:9a:92:ac:6d:c1:13:1b:9b:8e:e0:c8:aa:
03:80:83:61:a0:d6:8d:f2:67:72:04:0b:98:b5:0e:
6c:40:d8:a7:6a:0c:e1:3b:26:20:7a:1c:44:a2:0c:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:99:A0:26:D8:3B:D3:79:25:BC:AA:A2:87:76:DA:DB:D8:46:6C:BA
X509v3 Authority Key Identifier:
keyid:9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:59:99:3f:6a:8d:a5:c4:23:b0:3e:fd:9f:99:1f:12:60:e1:
f6:f5:cf:91:20:f5:56:15:51:b8:20:4f:8d:f5:d1:97:54:1d:
5d:34:cf:76:a0:f0:bb:47:81:00:51:91:ce:de:8b:f7:d9:34:
16:0f:33:4c:5e:7a:b1:12:8f:d5:90:86:0a:2c:8a:8e:dd:7c:
80:9e:17:0a:b0:f2:17:b9:62:f2:43:f1:c2:69:c1:5c:4e:dc:
b1:42:ac:60:eb:49:09:0b:d1:02:ff:2f:12:b2:06:c2:48:28:
44:47:da:02:8b:4d:df:79:85:0a:e4:69:e5:f2:7b:ae:bc:8b:
2c:53:8b:a0:ee:14:2a:56:f3:55:bb:2c:1d:3f:27:b8:15:e1:
38:c0:e2:ea:1f:84:e5:58:d7:60:60:2e:de:43:ee:89:b6:8d:
18:0b:e9:f4:92:90:43:5b:ef:e4:7d:b6:79:1d:a3:21:3e:fa:
d3:44:2e:c8:49:b8:9e:24:c7:c5:23:42:3b:3e:f5:5b:56:77:
ef:74:18:01:bd:e9:1d:0e:48:90:a5:1c:94:12:4f:30:ef:e9:
2e:1f:3d:69:9b:fc:20:84:c2:8e:c5:55:56:e7:c7:67:5d:b5:
76:79:20:83:09:9b:40:83:f8:80:3d:8c:9b:12:77:71:7b:dc:
da:59:68:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFcJFEexR3+OiHDKwejF4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljM2ZkNDZiNWQ2MDZjMWNjYWI1NThiMTczNmUyNjIxYTRi
YzA0MDMwHhcNMjUwNTEyMTcwMDEwWhcNMjUwNTEzMTcwMDEwWjAzMTEwLwYDVQQD
EyhhMjk5YTAyNmQ4M2JkMzc5MjViY2FhYTI4Nzc2ZGFkYmQ4NDY2Y2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSdfttA96CHYJ7tak7BDD17HxSF2
7BuHjG7BQ/270vhP9MSUpm5TZnZrBj6FsbSvsyVnFOSpmRDvwAJn5/ScaEdI9O7X
3aSitEDeOvmkSe2T37YgHejZrb6E7lL3MaaHh0zweDo+merP7qnkdRliHThERKop
jN91+UTRl1TLOiSlHNtoIkwz0VExUoJIcv3b0BLGKX1LP+I3dCIYbeQtSi7P/oBK
woM7XqpE7FimR2Pyvpu39jcHpY3G1qpB7pIxnFj98ZZr3s04eJIhYH3q6y8oyzSa
kqxtwRMbm47gyKoDgINhoNaN8mdyBAuYtQ5sQNinagzhOyYgehxEogzNrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKZoCbYO9N5Jbyqood22tvYRmy6MB8GA1UdIwQY
MBaAFJw/1GtdYGwcyrVYsXNuJiGkvAQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTkt
MGIzMWMzMzJkNTBkLzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTktMGIzMWMzMzJkNTBk
LzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFmZP2qN
pcQjsD79n5kfEmDh9vXPkSD1VhVRuCBPjfXRl1QdXTTPdqDwu0eBAFGRzt6L99k0
Fg8zTF56sRKP1ZCGCiyKjt18gJ4XCrDyF7li8kPxwmnBXE7csUKsYOtJCQvRAv8v
ErIGwkgoREfaAotN33mFCuRp5fJ7rryLLFOLoO4UKlbzVbssHT8nuBXhOMDi6h+E
5VjXYGAu3kPuibaNGAvp9JKQQ1vv5H22eR2jIT7600QuyEm4niTHxSNCOz71W1Z3
73QYAb3pHQ5IkKUclBJPMO/pLh89aZv8IITCjsVVVufHZ121dnkggwmbQIP4gD2M
mxJ3cXvc2llo5w==
-----END CERTIFICATE-----
Generated at Tue May 13 01:34:06 2025 by rpki-client