Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier: u7JsgPeO1XDGRouFn3a/apUscSBGhjTzrSTbSPK3Nig=
Subject key identifier: 2A:6D:E1:B3:FF:27:C3:2F:C3:5A:C8:DC:DA:E2:A8:AF:F6:99:4D:84
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial: 0196BF6F980084E38A2DEBE948BCA7757C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 13:01:23 +0000
Manifest this update: Sun 11 May 2025 13:01:23 +0000
Manifest next update: Mon 12 May 2025 13:01:23 +0000
Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: /mSM+75Hq/+LspoxCc3FLK2rYLnw811MORr/H5G48NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:98:00:84:e3:8a:2d:eb:e9:48:bc:a7:75:7c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Validity
Not Before: May 11 13:01:23 2025 GMT
Not After : May 12 13:01:23 2025 GMT
Subject: CN=2a6de1b3ff27c32fc35ac8dcdae2a8aff6994d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0c:c6:67:51:35:63:07:79:8c:40:c9:e7:30:
1a:a9:76:e5:3d:3b:99:92:a3:c9:57:be:ae:d9:db:
6d:9e:f7:2e:8d:d7:95:fc:1f:41:2e:75:3d:2c:f5:
ae:de:11:ef:56:46:51:5c:20:25:4e:6f:e9:bb:61:
40:17:9e:af:9b:d3:b1:1f:37:73:8d:55:59:a8:b2:
ab:2c:50:38:8b:38:81:cd:bf:55:3a:a4:77:c0:4d:
9c:a7:8f:b2:e7:77:00:f6:8f:b3:47:31:01:96:3f:
33:54:26:da:c2:97:5b:3d:3f:2e:77:0d:69:4e:6d:
6d:11:72:20:f0:b4:57:96:72:b8:a8:e8:4b:2a:54:
ba:10:57:c7:04:90:ec:75:2d:4b:fa:bf:a9:f3:d0:
08:4b:5b:28:34:90:77:44:5d:cb:fa:37:25:22:72:
0d:28:9a:6a:81:46:09:28:27:92:83:82:8f:e2:11:
11:96:0c:e0:5b:cd:e2:40:9b:6e:1f:e3:d1:bd:9f:
29:fa:0f:ed:90:da:e6:bb:5b:fe:1f:8f:55:05:d4:
64:32:14:34:b2:26:f5:81:84:97:bf:75:4d:32:9d:
77:de:97:17:38:69:75:93:93:80:57:58:42:73:ce:
a8:4d:34:d9:a8:a8:e0:f3:f7:99:e0:f0:40:88:0a:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:E1:B3:FF:27:C3:2F:C3:5A:C8:DC:DA:E2:A8:AF:F6:99:4D:84
X509v3 Authority Key Identifier:
keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f7:18:11:ef:b8:ad:e3:67:61:12:6d:ab:6d:ca:82:e8:32:
1c:8b:21:9e:73:a6:ea:d0:fd:6d:81:c3:fc:42:01:be:84:a3:
d5:c1:da:21:33:ad:81:59:af:10:df:68:f9:2c:54:02:af:f0:
1b:f2:fe:e7:15:aa:b6:3d:0d:97:ec:8f:21:f1:34:01:6c:cb:
31:31:bf:19:c9:3e:7e:91:43:bb:3b:6f:6d:cd:38:af:8a:0f:
a6:25:16:00:cb:27:89:d9:b0:d3:9f:86:ed:5b:78:d4:8b:a1:
f8:77:c1:fe:b7:ba:52:a3:87:0c:c6:95:b0:80:64:f3:5d:8a:
ed:03:4c:c0:da:c3:15:61:6e:d4:2f:4b:12:58:50:a7:9b:77:
d8:7e:74:0b:7b:5b:d3:af:41:4c:b7:7d:4f:81:d7:6f:fb:12:
d7:6f:e3:3d:07:ca:7b:1c:4a:a9:91:a6:b2:4e:1d:b8:ad:b1:
d1:37:94:fb:de:0a:0f:7a:b7:99:08:99:1d:e3:26:12:c0:b3:
07:a9:12:3e:3b:1f:85:0d:af:d1:8e:34:d7:4f:3d:0d:d6:b2:
48:72:cc:b0:47:a2:b2:d0:db:ad:d4:a0:84:15:1c:63:fb:01:
0e:f3:a4:ec:7b:10:67:59:2c:2b:cf:6c:be:98:dc:86:3b:88:
2f:f4:19:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/b5gAhOOKLevpSLyndXw7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWU0NTc5NGYwMTkyOWZkYWMyNzJjMjYyNmIzZTgyZWJj
OWM1ZGYwHhcNMjUwNTExMTMwMTIzWhcNMjUwNTEyMTMwMTIzWjAzMTEwLwYDVQQD
EygyYTZkZTFiM2ZmMjdjMzJmYzM1YWM4ZGNkYWUyYThhZmY2OTk0ZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wzGZ1E1Ywd5jEDJ5zAaqXblPTuZ
kqPJV76u2dttnvcujdeV/B9BLnU9LPWu3hHvVkZRXCAlTm/pu2FAF56vm9OxHzdz
jVVZqLKrLFA4iziBzb9VOqR3wE2cp4+y53cA9o+zRzEBlj8zVCbawpdbPT8udw1p
Tm1tEXIg8LRXlnK4qOhLKlS6EFfHBJDsdS1L+r+p89AIS1soNJB3RF3L+jclInIN
KJpqgUYJKCeSg4KP4hERlgzgW83iQJtuH+PRvZ8p+g/tkNrmu1v+H49VBdRkMhQ0
sib1gYSXv3VNMp133pcXOGl1k5OAV1hCc86oTTTZqKjg8/eZ4PBAiAq4KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpt4bP/J8Mvw1rI3NriqK/2mU2EMB8GA1UdIwQY
MBaAFDWeRXlPAZKf2sJywmJrPoLrycXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAt
Yjg0NGNlMWM2MjM4LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAtYjg0NGNlMWM2MjM4
LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPcYEe+4
reNnYRJtq23KgugyHIshnnOm6tD9bYHD/EIBvoSj1cHaITOtgVmvEN9o+SxUAq/w
G/L+5xWqtj0Nl+yPIfE0AWzLMTG/Gck+fpFDuztvbc04r4oPpiUWAMsnidmw05+G
7Vt41Iuh+HfB/re6UqOHDMaVsIBk812K7QNMwNrDFWFu1C9LElhQp5t32H50C3tb
069BTLd9T4HXb/sS12/jPQfKexxKqZGmsk4duK2x0TeU+94KD3q3mQiZHeMmEsCz
B6kSPjsfhQ2v0Y401089DdaySHLMsEeistDbrdSghBUcY/sBDvOk7HsQZ1ksK89s
vpjchjuIL/QZ0g==
-----END CERTIFICATE-----
Generated at Sun May 11 15:04:49 2025 by rpki-client