Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: 2b2mnRWUTf1u76IGLaWgGo8c76ikkUaSpMxzejTs9ZI=
Subject key identifier: F3:77:F9:F1:4E:72:5F:71:15:DF:8A:26:22:D1:AD:83:F3:00:34:8C
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 0196C4CC3F5BC57609683E570B0BF38AAD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 14:00:41 +0000
Manifest this update: Mon 12 May 2025 14:00:41 +0000
Manifest next update: Tue 13 May 2025 14:00:41 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: aAK7o90fe8IBOkDRoGbzTHv9Oi4ccitimpiHsf1STdk=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:3f:5b:c5:76:09:68:3e:57:0b:0b:f3:8a:ad:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: May 12 14:00:41 2025 GMT
Not After : May 13 14:00:41 2025 GMT
Subject: CN=f377f9f14e725f7115df8a2622d1ad83f300348c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:e0:b5:7d:c7:23:43:58:21:9b:f5:7e:f2:
a6:00:4a:3b:1e:22:40:25:69:47:27:65:1a:70:04:
5d:e2:15:44:c3:30:48:41:e0:72:d2:e6:bf:82:c7:
02:90:f3:42:7d:29:04:7e:7f:1d:99:9e:ed:3b:c4:
88:4d:81:22:22:d6:1a:46:7f:6d:64:e9:76:35:58:
17:0a:2f:4b:ae:6d:c6:ba:a4:09:85:73:cf:30:5e:
b9:a8:dd:95:2d:84:cc:3f:37:7c:cd:18:62:16:ec:
17:9c:8f:05:74:ee:94:99:0f:e5:d0:f6:b6:71:6f:
ea:4b:b9:e3:6e:34:1e:95:c3:9e:d2:4b:05:1d:d6:
35:55:42:fb:db:23:77:4a:cb:19:d4:c7:0c:c8:48:
a6:0f:a4:4c:81:1b:fa:0d:76:76:cc:2b:cb:b4:65:
30:57:56:c7:08:18:75:45:36:d4:c6:53:b3:e0:77:
cd:a2:3e:a3:46:0e:00:1e:88:b2:d8:2a:e3:78:ef:
c2:42:7a:6a:a6:be:64:9e:e8:dc:e6:a4:77:1c:f8:
af:7e:22:d1:ad:f9:8e:85:b7:c4:73:27:fb:f8:2f:
a0:7f:e5:db:93:a3:66:c7:9b:6e:17:52:5c:a7:8d:
a6:b4:57:18:5c:20:3d:26:3d:1d:5e:ef:ad:c4:f4:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:77:F9:F1:4E:72:5F:71:15:DF:8A:26:22:D1:AD:83:F3:00:34:8C
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:80:10:66:28:0a:6b:f0:90:e2:a3:00:eb:64:35:9c:87:22:
be:07:7a:62:08:ca:d8:c1:24:d0:0e:ff:45:a8:c1:ef:e1:58:
2d:c0:7c:79:93:ff:18:1e:3e:40:e5:ae:98:50:d3:ee:77:c1:
cc:e4:6a:7d:09:2a:52:19:ff:59:76:99:bb:3f:f2:ba:b4:fc:
92:e4:51:af:58:84:48:9e:b7:a8:ce:4b:2f:f9:d0:d1:97:73:
06:ce:fa:a5:73:1b:96:6f:89:0b:0c:5d:a3:4c:78:5e:51:a1:
35:4b:60:57:31:0c:d0:96:8f:b9:ce:7e:1c:3d:26:e3:03:1f:
16:8a:8e:57:81:14:55:05:0f:a9:8f:41:88:2e:9e:50:5a:85:
f1:bd:c2:00:08:5b:90:b4:e5:04:1a:09:ce:14:f5:0c:92:a8:
ea:28:34:bd:4d:eb:d7:f9:6f:a0:f3:36:2a:fe:ee:34:31:7b:
65:7b:56:1a:af:af:72:b3:05:76:33:84:f7:7e:e4:34:7e:82:
c9:da:27:2c:23:10:02:54:7e:59:38:c8:13:6a:1c:99:6b:06:
25:5a:1d:fa:b9:5f:13:a2:1d:87:dd:7f:3e:c9:19:4c:61:e5:
a1:10:38:49:42:98:39:37:95:30:23:5a:90:dd:ed:2e:05:80:
5c:ea:8f:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEzD9bxXYJaD5XCwvziq09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDQ1ZjJhYzViY2UxNTY5ZGY2YjJhZDgwZDE2ZjFiOTJm
YmQ4NWMwHhcNMjUwNTEyMTQwMDQxWhcNMjUwNTEzMTQwMDQxWjAzMTEwLwYDVQQD
EyhmMzc3ZjlmMTRlNzI1ZjcxMTVkZjhhMjYyMmQxYWQ4M2YzMDAzNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1fgtX3HI0NYIZv1fvKmAEo7HiJA
JWlHJ2UacARd4hVEwzBIQeBy0ua/gscCkPNCfSkEfn8dmZ7tO8SITYEiItYaRn9t
ZOl2NVgXCi9Lrm3GuqQJhXPPMF65qN2VLYTMPzd8zRhiFuwXnI8FdO6UmQ/l0Pa2
cW/qS7njbjQelcOe0ksFHdY1VUL72yN3SssZ1McMyEimD6RMgRv6DXZ2zCvLtGUw
V1bHCBh1RTbUxlOz4HfNoj6jRg4AHoiy2CrjeO/CQnpqpr5knujc5qR3HPivfiLR
rfmOhbfEcyf7+C+gf+Xbk6Nmx5tuF1Jcp42mtFcYXCA9Jj0dXu+txPQ4pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPN3+fFOcl9xFd+KJiLRrYPzADSMMB8GA1UdIwQY
MBaAFDXUXyrFvOFWnfayrYDRbxuS+9hcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUt
NmI3ZDdlNGVkNzAxLzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUtNmI3ZDdlNGVkNzAx
LzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYAQZigK
a/CQ4qMA62Q1nIcivgd6YgjK2MEk0A7/RajB7+FYLcB8eZP/GB4+QOWumFDT7nfB
zORqfQkqUhn/WXaZuz/yurT8kuRRr1iESJ63qM5LL/nQ0ZdzBs76pXMblm+JCwxd
o0x4XlGhNUtgVzEM0JaPuc5+HD0m4wMfFoqOV4EUVQUPqY9BiC6eUFqF8b3CAAhb
kLTlBBoJzhT1DJKo6ig0vU3r1/lvoPM2Kv7uNDF7ZXtWGq+vcrMFdjOE937kNH6C
ydonLCMQAlR+WTjIE2ocmWsGJVod+rlfE6Idh91/PskZTGHloRA4SUKYOTeVMCNa
kN3tLgWAXOqPqw==
-----END CERTIFICATE-----
Generated at Mon May 12 16:35:59 2025 by rpki-client