Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier: ojYtZlDqHndkMBrmY/tzYB4NZIfxH8u0VKiygmAzK6s=
Subject key identifier: 5F:16:0D:6B:AC:53:BD:04:03:F6:AF:78:D9:39:08:AB:DB:66:F3:B2
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 0196B85A8F572115D9498907E88870C58F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number: 09C9
Signing time: Sat 10 May 2025 04:01:04 +0000
Manifest this update: Sat 10 May 2025 04:01:04 +0000
Manifest next update: Sun 11 May 2025 04:01:04 +0000
Files and hashes: 1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: DLjRYQL7kIOUStKmNhM4z0sJir36uqDDZNQgik5cNJQ=)
2: zElW9nBSEefX0nViIsarFQPCkZs.roa (hash: CmIv1btIhlBvo+yXBuSYJkAIeImv5p3pKaVYvxzuwhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:8f:57:21:15:d9:49:89:07:e8:88:70:c5:8f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: May 10 04:01:04 2025 GMT
Not After : May 11 04:01:04 2025 GMT
Subject: CN=5f160d6bac53bd0403f6af78d93908abdb66f3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:a6:55:0d:1b:0c:3a:c6:39:20:c0:52:80:
89:23:ed:2d:30:70:37:f1:c8:5b:2d:39:aa:f0:fd:
15:ae:e9:d6:4c:b4:4c:08:37:ef:46:af:28:e6:df:
44:56:e9:d9:4e:31:28:29:fc:88:02:13:b3:e9:3f:
86:65:cf:b0:05:cd:39:f4:e7:6d:ff:a6:c5:ff:7d:
63:9c:5e:07:ee:18:d1:ff:8e:0a:ed:f1:a8:ef:19:
67:5a:77:ed:55:f6:c1:54:36:82:63:10:90:bb:85:
98:fc:58:f1:d2:fd:6f:0b:d6:5b:35:71:d6:5b:3f:
06:9b:64:ac:65:11:0a:81:ca:00:46:f5:59:72:a9:
09:c8:98:02:7d:f3:b3:2c:06:94:57:8f:6f:a1:1b:
0e:96:be:9b:e5:86:26:71:bb:bf:09:1f:35:8b:dd:
30:fc:6f:8c:39:4c:8d:cf:b8:f9:78:09:ce:6b:6d:
3a:a4:54:6f:f4:0e:21:43:d9:b5:90:57:19:c0:12:
06:57:aa:3e:63:4d:e5:18:de:50:11:b3:0f:98:b8:
c9:94:bb:d1:52:4e:bf:cf:40:06:82:af:40:7a:a4:
cb:0e:7a:b8:42:0e:ac:5c:78:b2:63:d5:e9:4d:2d:
cd:56:ac:34:02:da:ab:eb:60:87:00:96:32:94:17:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:0D:6B:AC:53:BD:04:03:F6:AF:78:D9:39:08:AB:DB:66:F3:B2
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d3:6d:2f:7e:08:63:f0:fc:3f:e3:f1:2f:f8:0e:de:b0:47:
eb:d9:bf:1e:49:b1:34:27:44:b2:97:53:d7:3a:34:ad:db:a8:
d3:35:fd:5a:d8:3a:d5:23:5d:61:36:67:ca:a9:67:37:4f:f1:
26:5a:96:ce:cb:ed:52:cb:de:92:83:19:b5:29:81:7d:f2:41:
05:92:76:01:48:58:d8:22:16:99:5b:19:72:ad:1f:8c:4f:ed:
14:1c:78:2e:19:f8:ef:1f:f1:a9:f8:50:48:16:6d:74:b1:84:
74:4d:69:ac:d9:1a:fb:e5:c0:d6:53:77:af:15:df:0f:80:11:
bf:4b:c4:52:70:c6:ee:08:60:f8:f5:19:e0:85:30:72:48:82:
76:f5:51:85:03:ef:ac:0c:c5:69:20:b9:49:bd:21:8c:30:50:
1b:72:58:15:e0:eb:8c:51:4e:f1:05:aa:66:84:7b:6c:d8:99:
50:58:06:82:ce:7b:3b:02:2c:50:fd:2e:be:92:d5:87:15:72:
ad:05:ff:d4:83:67:b8:b1:ae:5b:9c:07:8d:cc:00:91:9c:52:
8b:3b:c0:3a:df:c3:b0:29:e5:e9:6a:c5:22:e2:5b:df:c9:d2:
8e:df:3e:7d:f8:62:17:c9:ba:a2:e7:42:14:fd:98:b7:df:ca:
8a:4c:8a:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4Wo9XIRXZSYkH6IhwxY8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YzQ4Yjc4OWNjN2ZmZTdiZTA5NDQ0NjQzZmRiODZiZGI1
NzNmN2QwHhcNMjUwNTEwMDQwMTA0WhcNMjUwNTExMDQwMTA0WjAzMTEwLwYDVQQD
Eyg1ZjE2MGQ2YmFjNTNiZDA0MDNmNmFmNzhkOTM5MDhhYmRiNjZmM2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3mmVQ0bDDrGOSDAUoCJI+0tMHA3
8chbLTmq8P0VrunWTLRMCDfvRq8o5t9EVunZTjEoKfyIAhOz6T+GZc+wBc059Odt
/6bF/31jnF4H7hjR/44K7fGo7xlnWnftVfbBVDaCYxCQu4WY/Fjx0v1vC9ZbNXHW
Wz8Gm2SsZREKgcoARvVZcqkJyJgCffOzLAaUV49voRsOlr6b5YYmcbu/CR81i90w
/G+MOUyNz7j5eAnOa206pFRv9A4hQ9m1kFcZwBIGV6o+Y03lGN5QEbMPmLjJlLvR
Uk6/z0AGgq9AeqTLDnq4Qg6sXHiyY9XpTS3NVqw0Atqr62CHAJYylBfciwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8WDWusU70EA/aveNk5CKvbZvOyMB8GA1UdIwQY
MBaAFDfEi3icx//nvglERkP9uGvbVz99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2Ut
OGExMzZjYjBkZDVjLzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2UtOGExMzZjYjBkZDVj
LzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtNtL34I
Y/D8P+PxL/gO3rBH69m/HkmxNCdEspdT1zo0rduo0zX9Wtg61SNdYTZnyqlnN0/x
JlqWzsvtUsvekoMZtSmBffJBBZJ2AUhY2CIWmVsZcq0fjE/tFBx4Lhn47x/xqfhQ
SBZtdLGEdE1prNka++XA1lN3rxXfD4ARv0vEUnDG7ghg+PUZ4IUwckiCdvVRhQPv
rAzFaSC5Sb0hjDBQG3JYFeDrjFFO8QWqZoR7bNiZUFgGgs57OwIsUP0uvpLVhxVy
rQX/1INnuLGuW5wHjcwAkZxSizvAOt/DsCnl6WrFIuJb38nSjt8+ffhiF8m6oudC
FP2Yt9/KikyKQw==
-----END CERTIFICATE-----
Generated at Sat May 10 11:27:33 2025 by rpki-client