Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: xUSr+1nb8Vv378WdH8wccSR332ugpKo2uTWZcNmJim4=
Subject key identifier: F7:C1:45:38:1C:C5:1D:B7:28:44:FE:EE:8A:F2:BC:5E:FC:AB:C7:6C
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 01969C74FD1B7CC3E9B7B3D2FE7CE308CA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 1524
Signing time: Sun 04 May 2025 18:00:34 +0000
Manifest this update: Sun 04 May 2025 18:00:34 +0000
Manifest next update: Mon 05 May 2025 18:00:34 +0000
Files and hashes: 1: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: zSc2ATLHYKpwwbtp05VGEC6NK42jq4gsqS6AUIcx2Ig=)
2: fw5w9jTTZNnVRi6ltsbrZFMjlng.roa (hash: Spp2bK6sMfFLneeWMwidps5PTWRtnPxGOntgwXViU3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:74:fd:1b:7c:c3:e9:b7:b3:d2:fe:7c:e3:08:ca:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: May 4 18:00:34 2025 GMT
Not After : May 5 18:00:34 2025 GMT
Subject: CN=f7c145381cc51db72844feee8af2bc5efcabc76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:86:74:94:9d:02:3e:0c:dd:64:81:85:ff:
79:42:cc:a6:32:d7:95:83:0f:ad:d4:51:e2:13:dc:
42:d0:e2:9d:2b:2f:38:0c:90:42:7c:d0:a3:6f:f3:
37:c6:01:48:f7:46:a5:2c:9f:cd:ae:5f:43:43:6c:
74:30:bb:e5:a6:b8:32:39:1a:43:d6:c6:8e:3e:7f:
ed:31:b5:8e:d3:a4:88:be:38:62:c4:2a:3b:be:18:
b5:e5:bb:da:3c:35:40:75:87:0b:7d:ae:8e:f3:cb:
61:87:b7:73:10:b7:46:0d:af:43:33:0d:c2:ad:c7:
fd:b2:16:7a:b6:55:8d:2b:c6:aa:e5:d5:57:81:d3:
14:12:a9:4d:f5:f2:81:76:ed:98:84:54:77:a2:43:
56:cd:d8:66:ea:ee:c2:aa:28:2c:70:d3:16:a7:2d:
44:ba:35:05:f5:8e:de:8a:4f:2a:db:00:b7:6c:c9:
bc:54:7e:f8:1f:71:e7:07:73:75:e1:32:22:b2:fa:
48:f9:b8:8e:ba:c1:75:f0:c4:5e:d3:7e:77:7b:89:
c9:76:f2:f9:4c:7f:1d:fa:3a:64:2e:99:32:17:0c:
eb:2c:46:8b:bb:18:b2:1c:cb:0a:6d:f7:ac:fb:73:
fb:39:9c:3f:79:ca:94:22:c5:e4:32:58:6d:d6:f1:
82:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C1:45:38:1C:C5:1D:B7:28:44:FE:EE:8A:F2:BC:5E:FC:AB:C7:6C
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c2:10:b8:ae:f0:7c:1a:f7:b0:7b:4d:9a:ac:37:b7:54:82:
2b:35:81:d2:e7:a6:d1:bd:20:5f:7d:af:4b:6c:a1:36:08:90:
f9:64:fc:04:7f:25:60:b7:21:8a:ec:bf:2a:4a:de:19:eb:15:
ad:0d:42:1f:f8:07:14:88:fd:58:d7:f1:96:d0:55:56:d6:35:
0b:d1:27:6c:80:b1:ec:4e:c5:a0:f3:37:7a:5c:c3:c5:1d:9b:
21:7a:10:1b:47:14:b6:fc:62:60:e3:b5:26:88:7d:2d:53:d8:
40:7c:f7:77:82:44:28:7e:21:89:02:47:cf:ce:ae:80:a4:e8:
70:17:96:3f:07:d7:9f:10:35:ee:a3:a4:25:33:cf:ab:1b:71:
d0:aa:75:ee:18:26:60:4d:63:e9:3b:10:38:04:85:6c:ef:3a:
c6:e8:4f:8e:61:db:69:8c:9d:df:80:b3:96:d0:a3:41:ed:8f:
e7:2f:20:c4:ef:86:b1:70:e3:a8:c5:88:76:ca:0b:df:01:86:
ca:c5:fd:ac:83:d5:db:58:e5:9c:fa:09:67:dd:c2:b1:94:01:
24:ce:05:d2:70:a6:16:a4:d2:ff:b1:ef:e2:cc:c2:4a:29:f5:
7f:e0:63:ff:c6:9d:e3:7b:46:3b:e9:30:b4:b7:f6:fc:33:d0:
3e:ad:44:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZacdP0bfMPpt7PS/nzjCMofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NzAxN2E1N2Y5YzcwZGZhZjY2OTNhMzI0YmJhNjg2Nzdi
ODc4ZjMwHhcNMjUwNTA0MTgwMDM0WhcNMjUwNTA1MTgwMDM0WjAzMTEwLwYDVQQD
EyhmN2MxNDUzODFjYzUxZGI3Mjg0NGZlZWU4YWYyYmM1ZWZjYWJjNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UaGdJSdAj4M3WSBhf95QsymMteV
gw+t1FHiE9xC0OKdKy84DJBCfNCjb/M3xgFI90alLJ/Nrl9DQ2x0MLvlprgyORpD
1saOPn/tMbWO06SIvjhixCo7vhi15bvaPDVAdYcLfa6O88thh7dzELdGDa9DMw3C
rcf9shZ6tlWNK8aq5dVXgdMUEqlN9fKBdu2YhFR3okNWzdhm6u7CqigscNMWpy1E
ujUF9Y7eik8q2wC3bMm8VH74H3HnB3N14TIisvpI+biOusF18MRe0353e4nJdvL5
TH8d+jpkLpkyFwzrLEaLuxiyHMsKbfes+3P7OZw/ecqUIsXkMlht1vGCGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfBRTgcxR23KET+7oryvF78q8dsMB8GA1UdIwQY
MBaAFDVwF6V/nHDfr2aToyS7poZ3uHjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMjgyMGUtYjk3ZS00NzFjLWJiY2Ut
OTJlZDFhZjE2Yjg4LzEvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xMjgyMGUtYjk3ZS00NzFjLWJiY2UtOTJlZDFhZjE2Yjg4
LzEvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecIQuK7w
fBr3sHtNmqw3t1SCKzWB0uem0b0gX32vS2yhNgiQ+WT8BH8lYLchiuy/KkreGesV
rQ1CH/gHFIj9WNfxltBVVtY1C9EnbICx7E7FoPM3elzDxR2bIXoQG0cUtvxiYOO1
Joh9LVPYQHz3d4JEKH4hiQJHz86ugKTocBeWPwfXnxA17qOkJTPPqxtx0Kp17hgm
YE1j6TsQOASFbO86xuhPjmHbaYyd34CzltCjQe2P5y8gxO+GsXDjqMWIdsoL3wGG
ysX9rIPV21jlnPoJZ93CsZQBJM4F0nCmFqTS/7Hv4szCSin1f+Bj/8ad43tGO+kw
tLf2/DPQPq1EDA==
-----END CERTIFICATE-----
Generated at Mon May 5 04:01:34 2025 by rpki-client