Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
File: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft (raw, json)
Hash identifier: 3D3T5PIxKqwV79eEuEYjgindqUVYt10zajgRDVA9F0U=
Subject key identifier: 19:B4:60:61:EA:E7:59:6C:23:AD:35:12:3C:69:36:91:E7:E8:BE:1B
Authority key identifier: 35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
Certificate issuer: /CN=35ced0549f5b35dafa74d90b0468200178545d74
Certificate serial: 0196C5A7E871C83C4E9CEEB7B18ADA48CA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
Manifest number: 56
Signing time: Mon 12 May 2025 18:00:37 +0000
Manifest this update: Mon 12 May 2025 18:00:37 +0000
Manifest next update: Tue 13 May 2025 18:00:37 +0000
Files and hashes: 1: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl (hash: SC9Ioz8kngDc7F0uWwc5N41kDL0mdoltvPb+uc6FsKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:e8:71:c8:3c:4e:9c:ee:b7:b1:8a:da:48:ca:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ced0549f5b35dafa74d90b0468200178545d74
Validity
Not Before: May 12 18:00:37 2025 GMT
Not After : May 13 18:00:37 2025 GMT
Subject: CN=19b46061eae7596c23ad35123c693691e7e8be1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:ec:29:cc:65:27:53:9f:ac:29:c9:72:e0:
bb:0f:81:8d:a8:9f:1c:fb:32:ec:a2:ce:dc:d2:51:
7b:51:23:34:6d:97:55:5f:6f:d0:e6:14:b6:ae:47:
6c:03:27:e2:1d:51:27:ff:b4:a7:1e:4c:67:45:86:
e3:f0:52:f6:21:ba:1c:1c:6f:24:fe:75:48:bd:12:
eb:88:9c:1f:9e:db:08:37:85:8f:e1:66:dc:a5:92:
80:7d:b0:54:34:8b:d4:05:3b:39:a7:35:a6:23:a3:
00:05:98:81:53:06:4b:09:6a:4b:74:e4:7f:bd:34:
33:c1:79:cb:66:8a:3a:95:3e:68:8a:46:cc:a7:87:
0c:d5:68:8a:b2:b4:ac:95:e7:f5:86:fa:13:c0:d8:
ba:ff:76:3a:ce:46:07:48:c1:fb:46:ff:65:dd:e6:
6d:d9:24:f3:17:49:65:7e:85:5d:1a:d0:f3:22:82:
bf:33:14:85:b9:ca:59:d7:13:29:85:02:05:b1:5c:
10:60:1b:dc:1d:f2:b9:ff:c0:48:3a:ff:8e:35:9f:
44:26:b3:82:92:48:7d:04:13:eb:0c:76:a4:17:0d:
b8:dc:99:df:87:2a:69:96:c2:de:72:93:d0:07:26:
b5:f7:30:0c:41:71:13:9b:b9:8d:d5:41:aa:a8:c0:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B4:60:61:EA:E7:59:6C:23:AD:35:12:3C:69:36:91:E7:E8:BE:1B
X509v3 Authority Key Identifier:
keyid:35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f5:35:89:97:5e:a2:e1:73:d0:05:09:ed:3e:88:18:f8:f7:
9a:00:c7:88:10:5e:60:02:6a:82:82:89:f6:7f:15:9b:48:92:
9d:a6:ac:7c:9d:95:f7:a0:ac:10:82:57:0d:9b:d1:eb:96:32:
5d:e2:93:f4:f6:20:af:cf:73:6c:79:63:06:71:92:07:1f:df:
a0:37:18:43:6d:b4:c4:11:67:8b:6a:42:71:b6:13:bf:9c:85:
16:e7:20:2c:b7:00:63:77:5d:7f:8b:33:c9:8e:30:1e:1d:1d:
44:9e:e9:89:6e:7e:de:26:1f:28:46:f2:7e:22:a9:44:d8:ce:
05:0c:43:15:e9:15:2f:12:cb:22:b9:9a:b4:62:42:aa:f0:fd:
f3:41:9c:7b:4d:2c:0b:95:f2:d3:69:75:5c:4b:62:f0:5c:e6:
d5:61:4b:ae:25:dd:de:9f:46:a3:1c:46:64:6b:80:48:7c:e5:
e6:45:ee:ab:62:e1:9b:f0:d8:cf:cc:fb:7c:03:27:db:ad:84:
c5:7d:cb:5c:e7:6d:06:50:fe:63:50:b9:fb:e1:8b:2f:75:34:
2a:55:89:3b:6f:44:92:3e:ed:9a:bf:ed:f0:b7:13:d3:d5:e6:
b7:99:06:7e:67:bc:d1:6c:06:f6:aa:40:8d:22:92:f0:d4:ca:
4d:75:95:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFp+hxyDxOnO63sYraSMoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1Y2VkMDU0OWY1YjM1ZGFmYTc0ZDkwYjA0NjgyMDAxNzg1
NDVkNzQwHhcNMjUwNTEyMTgwMDM3WhcNMjUwNTEzMTgwMDM3WjAzMTEwLwYDVQQD
EygxOWI0NjA2MWVhZTc1OTZjMjNhZDM1MTIzYzY5MzY5MWU3ZThiZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH/sKcxlJ1OfrCnJcuC7D4GNqJ8c
+zLsos7c0lF7USM0bZdVX2/Q5hS2rkdsAyfiHVEn/7SnHkxnRYbj8FL2IbocHG8k
/nVIvRLriJwfntsIN4WP4WbcpZKAfbBUNIvUBTs5pzWmI6MABZiBUwZLCWpLdOR/
vTQzwXnLZoo6lT5oikbMp4cM1WiKsrSslef1hvoTwNi6/3Y6zkYHSMH7Rv9l3eZt
2STzF0llfoVdGtDzIoK/MxSFucpZ1xMphQIFsVwQYBvcHfK5/8BIOv+ONZ9EJrOC
kkh9BBPrDHakFw243JnfhypplsLecpPQBya19zAMQXETm7mN1UGqqMBuIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBm0YGHq51lsI601EjxpNpHn6L4bMB8GA1UdIwQY
MBaAFDXO0FSfWzXa+nTZCwRoIAF4VF10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmM3UVZKOWJOZHI2ZE5rTEJHZ2dBWGhVWFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82Y2Q3NzItYzkwOS00YjQ3LTlkODIt
ZWZjMTJhOWZkNmUxLzEvTmM3UVZKOWJOZHI2ZE5rTEJHZ2dBWGhVWFhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi82Y2Q3NzItYzkwOS00YjQ3LTlkODItZWZjMTJhOWZkNmUx
LzEvTmM3UVZKOWJOZHI2ZE5rTEJHZ2dBWGhVWFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPU1iZde
ouFz0AUJ7T6IGPj3mgDHiBBeYAJqgoKJ9n8Vm0iSnaasfJ2V96CsEIJXDZvR65Yy
XeKT9PYgr89zbHljBnGSBx/foDcYQ220xBFni2pCcbYTv5yFFucgLLcAY3ddf4sz
yY4wHh0dRJ7piW5+3iYfKEbyfiKpRNjOBQxDFekVLxLLIrmatGJCqvD980Gce00s
C5Xy02l1XEti8Fzm1WFLriXd3p9GoxxGZGuASHzl5kXuq2Lhm/DYz8z7fAMn262E
xX3LXOdtBlD+Y1C5++GLL3U0KlWJO29Ekj7tmr/t8LcT09Xmt5kGfme80WwG9qpA
jSKS8NTKTXWV8g==
-----END CERTIFICATE-----
Generated at Mon May 12 23:58:21 2025 by rpki-client