Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
File: NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft (raw, json)
Hash identifier: fmuTDsYAxT5IElnceHfTSzkZPitVDTuSqho5Rran45A=
Subject key identifier: 09:DE:75:FA:01:4D:B0:3B:63:C7:8E:57:D0:54:07:AE:1C:16:DC:D9
Authority key identifier: 35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
Certificate issuer: /CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Certificate serial: 0196B7B52159A8041FFFE3FBD02C8ECF592A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
Manifest number: 07DF
Signing time: Sat 10 May 2025 01:00:23 +0000
Manifest this update: Sat 10 May 2025 01:00:23 +0000
Manifest next update: Sun 11 May 2025 01:00:23 +0000
Files and hashes: 1: NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl (hash: 8PfNLg6SFplRV2QGJR8OCmWcOnwmEKOW5WxOCntiNUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:21:59:a8:04:1f:ff:e3:fb:d0:2c:8e:cf:59:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f
Validity
Not Before: May 10 01:00:23 2025 GMT
Not After : May 11 01:00:23 2025 GMT
Subject: CN=09de75fa014db03b63c78e57d05407ae1c16dcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:d9:67:9b:11:c2:55:97:df:e0:ae:fb:55:
90:78:20:a3:3d:be:c3:16:9b:88:f8:22:57:95:38:
e5:c1:f3:d1:a4:30:ab:4e:93:a8:b0:15:2a:f8:be:
2b:ee:b3:e6:18:b3:1f:b5:4f:d6:23:12:5c:05:0e:
81:5c:81:03:7b:88:b6:e6:97:ff:b3:98:48:1c:90:
ba:97:ff:6d:65:43:c5:93:16:a3:c2:5d:40:49:99:
54:90:06:7f:d0:69:d0:2b:07:83:fa:e1:e7:54:fb:
7e:5b:ce:32:b7:aa:cb:e0:56:b0:1e:6b:56:2a:79:
8e:33:11:75:2c:50:63:f5:6f:9b:39:b9:aa:c8:9c:
7e:21:f5:5c:e0:e7:63:bf:aa:62:7d:61:b1:0b:a1:
62:93:69:b2:9e:d9:6c:45:b9:aa:c5:80:47:b1:57:
19:2c:67:a1:9f:46:27:93:64:59:8a:43:be:44:e0:
37:ed:34:c0:b4:7e:02:a4:46:cf:ca:97:29:74:75:
c2:a9:2e:fd:b4:6d:f4:78:13:c2:a9:f5:8a:ae:73:
31:60:eb:0d:fa:2f:be:dd:36:11:b3:b4:5b:5e:3e:
96:5a:9a:b3:2a:f7:dd:85:30:9d:31:35:0a:9f:0e:
80:97:6c:eb:b6:a8:47:1e:de:f4:cb:f2:03:23:e4:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DE:75:FA:01:4D:B0:3B:63:C7:8E:57:D0:54:07:AE:1C:16:DC:D9
X509v3 Authority Key Identifier:
keyid:35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cd:a1:f7:d8:22:72:62:65:fd:cc:ac:54:ca:09:73:5e:c8:
bc:7b:88:4f:42:3b:f5:a4:91:49:51:c6:cb:5e:96:c4:98:e3:
6b:72:d8:15:6e:07:2a:e5:05:5b:68:8f:a2:d4:a0:20:73:df:
1e:76:f4:66:27:06:48:3c:88:f6:a2:3a:eb:98:75:e1:ad:4d:
e8:0c:44:9d:b2:d1:a5:05:aa:5c:6c:a7:53:37:28:6f:f4:4e:
66:9d:a1:6c:53:f6:fb:e7:41:f6:7b:ba:8e:7b:e1:9b:b5:cd:
eb:79:d8:ad:eb:ae:25:27:91:1c:30:8d:bd:32:d8:e0:41:40:
6b:ed:cf:32:43:35:4b:71:e2:e6:cc:b1:28:f9:2f:71:f4:35:
35:da:91:4e:6e:2a:6a:25:aa:87:92:03:75:e2:51:8c:84:bc:
50:52:c6:02:f9:bf:fc:1a:ea:5f:1e:a6:7e:97:fb:2a:2b:cb:
99:69:5a:32:f9:51:18:22:2c:dc:32:55:12:9e:0e:79:8a:71:
0d:52:42:0f:d9:ce:17:f0:2a:ab:6e:88:22:9a:ab:0b:c4:e3:
ba:ac:86:0b:70:91:d4:7f:bd:65:19:50:52:f2:cb:2b:fd:34:
c7:82:dd:d1:6d:85:d4:cf:65:c0:29:1a:20:f2:ad:4f:b7:76:
dc:33:4b:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tSFZqAQf/+P70CyOz1kqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MDZiYjdlYzA2NjYwMjJmMDNjMGJkOWY1NWY3OGMwYTdl
YWRhOWYwHhcNMjUwNTEwMDEwMDIzWhcNMjUwNTExMDEwMDIzWjAzMTEwLwYDVQQD
EygwOWRlNzVmYTAxNGRiMDNiNjNjNzhlNTdkMDU0MDdhZTFjMTZkY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pLZZ5sRwlWX3+Cu+1WQeCCjPb7D
FpuI+CJXlTjlwfPRpDCrTpOosBUq+L4r7rPmGLMftU/WIxJcBQ6BXIEDe4i25pf/
s5hIHJC6l/9tZUPFkxajwl1ASZlUkAZ/0GnQKweD+uHnVPt+W84yt6rL4FawHmtW
KnmOMxF1LFBj9W+bObmqyJx+IfVc4Odjv6pifWGxC6Fik2myntlsRbmqxYBHsVcZ
LGehn0Ynk2RZikO+ROA37TTAtH4CpEbPypcpdHXCqS79tG30eBPCqfWKrnMxYOsN
+i++3TYRs7RbXj6WWpqzKvfdhTCdMTUKnw6Al2zrtqhHHt70y/IDI+QtzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnedfoBTbA7Y8eOV9BUB64cFtzZMB8GA1UdIwQY
MBaAFDUGu37AZmAi8DwL2fVfeMCn6tqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlFhN2ZzQm1ZQ0x3UEF2WjlWOTR3S2ZxMnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9hZThlNDctMTRiNC00OTE0LTgyNmYt
NDEzYTU5NThhN2YzLzEvTlFhN2ZzQm1ZQ0x3UEF2WjlWOTR3S2ZxMnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9hZThlNDctMTRiNC00OTE0LTgyNmYtNDEzYTU5NThhN2Yz
LzEvTlFhN2ZzQm1ZQ0x3UEF2WjlWOTR3S2ZxMnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiM2h99gi
cmJl/cysVMoJc17IvHuIT0I79aSRSVHGy16WxJjja3LYFW4HKuUFW2iPotSgIHPf
Hnb0ZicGSDyI9qI665h14a1N6AxEnbLRpQWqXGynUzcob/ROZp2hbFP2++dB9nu6
jnvhm7XN63nYreuuJSeRHDCNvTLY4EFAa+3PMkM1S3Hi5syxKPkvcfQ1NdqRTm4q
aiWqh5IDdeJRjIS8UFLGAvm//BrqXx6mfpf7KivLmWlaMvlRGCIs3DJVEp4OeYpx
DVJCD9nOF/Aqq26IIpqrC8TjuqyGC3CR1H+9ZRlQUvLLK/00x4Ld0W2F1M9lwCka
IPKtT7d23DNLbA==
-----END CERTIFICATE-----
Generated at Sat May 10 10:06:07 2025 by rpki-client