Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: xDKqevHQZ4s7zTND1SRvV0vX0GrSOheV6eXWhciIEco=
Subject key identifier: 19:E2:3B:D5:0A:09:A7:52:FD:F2:8A:C8:19:D2:D9:31:CA:0D:A7:24
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 0196AFC50B2136FD45E997141E963DAAAA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 04D7
Signing time: Thu 08 May 2025 12:00:48 +0000
Manifest this update: Thu 08 May 2025 12:00:48 +0000
Manifest next update: Fri 09 May 2025 12:00:48 +0000
Files and hashes: 1: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: Vh19HZQjJHgY1o0735YQbp5skcOAXM18CDK/WtqOlxY=)
2: uaKznLkiq_dgHHhfSIgbJMtsM9Y.roa (hash: 2urEmTA6x5wxy7tL41R+/4xA4ZeFcK1CcklGg3fdBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c5:0b:21:36:fd:45:e9:97:14:1e:96:3d:aa:aa:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: May 8 12:00:48 2025 GMT
Not After : May 9 12:00:48 2025 GMT
Subject: CN=19e23bd50a09a752fdf28ac819d2d931ca0da724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:72:5c:96:42:69:ad:20:58:28:63:a8:fb:
8f:9f:4a:0f:91:9c:ed:00:9e:7e:b9:9d:27:ec:39:
16:ef:ec:4d:91:fe:e3:9d:0b:a3:eb:45:78:e1:bb:
b4:8a:a5:88:24:fd:f9:28:d3:7f:5a:91:c6:89:31:
64:b8:f8:85:eb:28:f1:d9:c7:92:be:a3:82:d2:a6:
30:f6:97:d9:4d:d9:69:6a:7f:bb:d2:28:01:ed:6b:
c8:9b:f2:33:68:56:60:99:6c:5b:e5:fa:55:bf:0e:
98:be:58:e6:5a:27:22:a1:f2:52:08:db:a1:7f:50:
83:22:af:31:c3:08:11:b3:88:01:11:50:7b:60:98:
67:b6:72:03:25:73:d2:db:d1:d9:36:07:3d:20:cb:
d9:22:08:19:9e:9d:62:cf:a1:e9:b1:3e:96:75:cf:
9c:cf:4c:82:f9:4d:07:bd:79:2b:5c:c4:fc:12:32:
7e:18:f8:82:fb:4d:17:c0:14:8d:53:b1:03:6b:28:
7e:0a:9f:35:f4:cf:08:18:a4:4c:6d:8a:3b:ef:94:
35:a0:7f:b7:a3:3d:a1:f6:c4:a7:a8:f3:2d:70:2c:
5d:f0:dc:58:09:8a:b3:8b:91:97:e1:0f:47:b3:b8:
13:50:38:47:58:41:6a:6b:da:06:e0:32:6d:68:77:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E2:3B:D5:0A:09:A7:52:FD:F2:8A:C8:19:D2:D9:31:CA:0D:A7:24
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d8:93:5f:7c:fa:50:65:53:b8:c8:71:fe:2e:57:5f:fa:1c:
cd:f9:79:cd:76:a9:95:7e:b2:12:ec:aa:38:ac:c3:4d:fb:00:
21:d8:d1:57:b3:49:27:b7:1a:ac:a9:87:c6:b5:ee:36:78:e5:
7c:ac:3d:42:21:d6:d2:40:41:68:a8:9b:da:8a:6f:14:6a:d3:
9f:1e:ba:34:e7:6d:6f:ce:e0:f7:85:0d:4f:82:e5:e6:cc:f7:
ae:9c:0c:b1:18:16:79:d1:3f:06:52:10:02:53:f9:ed:7e:12:
f9:ae:fc:d6:49:0c:bf:c1:39:38:c9:f0:eb:7c:7b:e1:f7:92:
e3:90:04:93:a8:69:3f:86:20:24:68:37:0b:15:36:b9:4e:0c:
7b:d5:59:a4:3c:7a:f9:64:c7:3e:ad:8c:3f:b9:a4:6d:02:bc:
c0:21:05:5f:11:35:4e:d1:b0:32:e0:db:cb:02:a9:94:ab:8e:
0a:48:dd:18:4b:8a:ba:31:35:8d:27:19:33:a9:93:a6:7d:3a:
0c:cf:48:a5:81:fd:20:13:12:79:9d:53:6b:76:04:f1:86:c1:
53:e6:a9:1e:0c:a8:de:62:c8:bc:73:27:d6:d0:d7:f8:dc:df:
fb:e0:83:ba:62:eb:58:3d:e1:83:33:bc:f4:fa:25:1e:0b:41:
2c:97:6a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavxQshNv1F6ZcUHpY9qqp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YTRjZTUwZDBjZGU0MTU0NzMzMTNiMTFiODU3MTk0MDhm
YWJhMjQwHhcNMjUwNTA4MTIwMDQ4WhcNMjUwNTA5MTIwMDQ4WjAzMTEwLwYDVQQD
EygxOWUyM2JkNTBhMDlhNzUyZmRmMjhhYzgxOWQyZDkzMWNhMGRhNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17ByXJZCaa0gWChjqPuPn0oPkZzt
AJ5+uZ0n7DkW7+xNkf7jnQuj60V44bu0iqWIJP35KNN/WpHGiTFkuPiF6yjx2ceS
vqOC0qYw9pfZTdlpan+70igB7WvIm/IzaFZgmWxb5fpVvw6YvljmWiciofJSCNuh
f1CDIq8xwwgRs4gBEVB7YJhntnIDJXPS29HZNgc9IMvZIggZnp1iz6HpsT6Wdc+c
z0yC+U0HvXkrXMT8EjJ+GPiC+00XwBSNU7EDayh+Cp819M8IGKRMbYo775Q1oH+3
oz2h9sSnqPMtcCxd8NxYCYqzi5GX4Q9Hs7gTUDhHWEFqa9oG4DJtaHegHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBniO9UKCadS/fKKyBnS2THKDackMB8GA1UdIwQY
MBaAFDWkzlDQzeQVRzMTsRuFcZQI+rokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2It
MDNiNjRjMTkxZDRhLzEvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9iNTBiMWMtMmJjNS00MzgyLWEyN2ItMDNiNjRjMTkxZDRh
LzEvTmFUT1VORE41QlZITXhPeEc0VnhsQWo2dWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdiTX3z6
UGVTuMhx/i5XX/oczfl5zXaplX6yEuyqOKzDTfsAIdjRV7NJJ7carKmHxrXuNnjl
fKw9QiHW0kBBaKib2opvFGrTnx66NOdtb87g94UNT4Ll5sz3rpwMsRgWedE/BlIQ
AlP57X4S+a781kkMv8E5OMnw63x74feS45AEk6hpP4YgJGg3CxU2uU4Me9VZpDx6
+WTHPq2MP7mkbQK8wCEFXxE1TtGwMuDbywKplKuOCkjdGEuKujE1jScZM6mTpn06
DM9IpYH9IBMSeZ1Ta3YE8YbBU+apHgyo3mLIvHMn1tDX+Nzf++CDumLrWD3hgzO8
9PolHgtBLJdqUQ==
-----END CERTIFICATE-----
Generated at Thu May 8 22:23:04 2025 by rpki-client