Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: 5Co6Q6h3kVc+Xvu7uAuyuK/Og7GJrCqs93z7ndNgxOA=
Subject key identifier: 5A:1E:57:20:85:DE:05:97:0E:62:5D:77:85:BD:E3:DE:2B:00:5C:42
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 0196C91799E60E121EA18205166534E2E36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 10:01:29 +0000
Manifest this update: Tue 13 May 2025 10:01:29 +0000
Manifest next update: Wed 14 May 2025 10:01:29 +0000
Files and hashes: 1: Bha5fqCb4Fccw9Hz-g5tESnNC_M.roa (hash: 46eG+dZ14ZYRFYw5iRf0nTqMM6SE1SjEdU7Pao7e1x0=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: 0e9wjdoLnzG9C4S87ugQGZKPSKXgaiHhGsg5Fw3tYkY=)
3: k7ZKxdVx9_HpLEEXMgJ7VK0ot74.roa (hash: Jn0c0Y7u45CliHNs1mV0LEaHAyb9OLN6GTScJnODixs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:99:e6:0e:12:1e:a1:82:05:16:65:34:e2:e3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: May 13 10:01:29 2025 GMT
Not After : May 14 10:01:29 2025 GMT
Subject: CN=5a1e572085de05970e625d7785bde3de2b005c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:4b:22:35:ee:35:88:ea:7a:79:95:e5:51:
18:07:d5:66:70:cf:36:ee:39:93:01:aa:19:75:10:
80:3a:81:25:a1:ba:70:ca:80:12:ca:b3:22:e1:14:
0e:dc:91:b7:77:58:90:aa:3e:00:1d:0c:d7:f8:54:
b9:f3:59:db:5b:2a:78:c9:1e:49:f2:a5:a6:82:06:
f3:76:a4:68:31:af:ec:93:f8:10:15:15:a6:b4:e1:
ba:1a:5a:b7:58:3c:8f:c0:e6:8f:dd:80:85:58:42:
10:dc:e8:85:44:b3:4d:ac:2b:ad:a9:ac:dc:1a:bc:
ae:4f:2c:25:55:a7:3f:c6:ba:c6:ae:e7:6c:16:03:
e3:47:e2:16:65:6f:e1:79:8b:70:14:96:c2:3e:68:
c8:ef:4f:f4:f1:9a:c1:32:5b:b6:7a:9d:7d:f7:52:
88:dc:14:23:51:81:20:9a:10:ad:e9:7e:cc:d4:aa:
4e:52:d1:d6:9f:07:83:b9:50:69:de:be:39:5a:68:
05:f0:ca:5a:d6:48:5a:05:8b:e0:0a:60:9b:f0:34:
85:36:44:d5:33:c6:6e:db:e0:aa:79:85:de:97:9a:
ca:cb:48:bf:2a:1a:0a:25:09:c7:1a:5f:fe:99:d7:
fa:ce:e7:64:27:06:38:2d:01:fd:04:70:5b:0e:b3:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1E:57:20:85:DE:05:97:0E:62:5D:77:85:BD:E3:DE:2B:00:5C:42
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e8:ec:4b:d5:0e:61:2a:d7:5f:44:df:f3:7d:15:5e:3d:d7:
9b:a4:c4:57:38:47:37:8b:62:c4:57:37:c8:4d:4b:72:24:cd:
ea:1b:49:90:07:d0:fd:ea:71:d6:dd:68:46:82:f3:7d:a7:0a:
5e:70:f0:f4:ba:8a:f0:8f:40:f2:34:54:d6:6c:e1:ea:82:32:
31:b3:27:fb:58:3f:48:eb:65:7c:ba:7c:18:e5:5a:38:c0:45:
ff:d4:d2:c5:3a:93:6b:08:ac:1e:69:1b:3f:ad:01:32:be:09:
2c:2f:d3:78:7c:4f:07:3d:59:d4:4d:8e:17:94:50:71:bf:c8:
38:c7:c0:12:cf:61:87:7c:b5:6f:12:4c:7b:34:6b:1d:80:2e:
2b:08:d6:55:34:07:47:de:69:88:ed:18:3b:a2:4e:30:c8:31:
22:b8:83:bc:3c:2b:04:e5:f5:83:a7:93:38:9d:d4:20:8b:7e:
3e:1a:0a:2a:f7:83:d3:c7:fc:3f:8a:c1:17:d9:82:a9:7d:a4:
16:5e:d7:59:28:38:c6:ea:7a:25:81:a9:bb:0a:6d:ed:6a:00:
73:d0:59:5c:b7:fc:bf:0c:52:52:3b:6a:f5:7a:19:56:55:fd:
9e:1d:08:6b:fc:ff:9c:c7:14:8f:52:96:62:f0:01:85:9f:af:
02:41:76:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJF5nmDhIeoYIFFmU04uNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YTQ2NjhmZjgzODE0YWY5MGE3OGI0ZmM4ZDI2MjMyNTA1
OGNiYzYwHhcNMjUwNTEzMTAwMTI5WhcNMjUwNTE0MTAwMTI5WjAzMTEwLwYDVQQD
Eyg1YTFlNTcyMDg1ZGUwNTk3MGU2MjVkNzc4NWJkZTNkZTJiMDA1YzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvxLIjXuNYjqenmV5VEYB9VmcM82
7jmTAaoZdRCAOoElobpwyoASyrMi4RQO3JG3d1iQqj4AHQzX+FS581nbWyp4yR5J
8qWmggbzdqRoMa/sk/gQFRWmtOG6Glq3WDyPwOaP3YCFWEIQ3OiFRLNNrCutqazc
GryuTywlVac/xrrGrudsFgPjR+IWZW/heYtwFJbCPmjI70/08ZrBMlu2ep1991KI
3BQjUYEgmhCt6X7M1KpOUtHWnweDuVBp3r45WmgF8Mpa1khaBYvgCmCb8DSFNkTV
M8Zu2+CqeYXel5rKy0i/KhoKJQnHGl/+mdf6zudkJwY4LQH9BHBbDrP4wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoeVyCF3gWXDmJdd4W9494rAFxCMB8GA1UdIwQY
MBaAFDakZo/4OBSvkKeLT8jSYjJQWMvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3Yjkt
OTBlNjU0MTIyNTJhLzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3YjktOTBlNjU0MTIyNTJh
LzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcujsS9UO
YSrXX0Tf830VXj3Xm6TEVzhHN4tixFc3yE1LciTN6htJkAfQ/epx1t1oRoLzfacK
XnDw9LqK8I9A8jRU1mzh6oIyMbMn+1g/SOtlfLp8GOVaOMBF/9TSxTqTawisHmkb
P60BMr4JLC/TeHxPBz1Z1E2OF5RQcb/IOMfAEs9hh3y1bxJMezRrHYAuKwjWVTQH
R95piO0YO6JOMMgxIriDvDwrBOX1g6eTOJ3UIIt+PhoKKveD08f8P4rBF9mCqX2k
Fl7XWSg4xup6JYGpuwpt7WoAc9BZXLf8vwxSUjtq9XoZVlX9nh0Ia/z/nMcUj1KW
YvABhZ+vAkF27w==
-----END CERTIFICATE-----
Generated at Tue May 13 20:54:10 2025 by rpki-client