Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier: IkF3WfqPxBn9jBqix3a8wDsdXIhU1e3AI3TKBVuiMu8=
Subject key identifier: F8:50:F7:5E:1E:FB:A3:68:B5:A6:9A:12:DE:06:7D:7E:45:CA:F8:FA
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 0196BC6E568B7480B550587DEF43FFE50A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number: 038E
Signing time: Sat 10 May 2025 23:01:09 +0000
Manifest this update: Sat 10 May 2025 23:01:09 +0000
Manifest next update: Sun 11 May 2025 23:01:09 +0000
Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: X5xRBjA9nQoYfhUdr3nYxWItWcLG+QhO92awdfEMTCk=)
2: YYXnMCAt040NcLATlrH2pdrRzy4.roa (hash: //AxvWil0+RRuTzD9Iyynz1Qj6s3Pa74fW9rqeU5a2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:56:8b:74:80:b5:50:58:7d:ef:43:ff:e5:0a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: May 10 23:01:09 2025 GMT
Not After : May 11 23:01:09 2025 GMT
Subject: CN=f850f75e1efba368b5a69a12de067d7e45caf8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:37:a3:65:de:2d:33:b5:c3:6a:0b:95:e8:
5b:fa:07:30:0c:2f:97:fb:f5:4e:32:5c:f3:69:53:
9f:7e:94:b7:9e:a3:f4:6d:6b:22:f7:71:12:8b:be:
6e:db:00:75:b0:5a:97:68:14:e1:8c:77:53:f2:e3:
3e:d2:63:14:f9:9d:ac:14:95:2e:d2:0a:93:c2:7d:
d6:c9:e3:01:7f:c2:17:48:4b:40:99:b8:66:c7:ce:
35:b8:80:10:e4:fb:12:a6:21:a4:a5:9d:6f:f6:59:
41:ba:8c:ad:3b:89:1b:91:85:b3:eb:64:a7:b1:33:
10:6e:96:e2:ff:43:c5:54:10:14:78:78:b6:07:30:
39:3d:7f:57:50:19:48:6c:59:dd:56:3c:c4:fc:aa:
a5:9f:0e:e6:37:2d:29:32:70:6d:1d:07:cd:67:ac:
a8:79:8d:b1:a0:73:4a:d8:b8:14:12:42:c9:b9:20:
06:85:9a:ab:93:df:8c:ad:07:da:df:fb:b1:7c:12:
7a:b7:49:c7:10:8d:cb:2c:6c:60:8c:2f:8d:9b:80:
35:e4:af:c2:60:eb:8a:c3:03:83:c1:e2:4a:5f:59:
1b:04:ae:37:98:33:87:ac:d0:a3:93:91:87:6d:b4:
7c:1b:df:b1:3f:00:aa:b3:ad:27:43:19:85:d0:42:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:50:F7:5E:1E:FB:A3:68:B5:A6:9A:12:DE:06:7D:7E:45:CA:F8:FA
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:94:b9:83:a5:eb:a5:40:b9:e7:55:79:70:01:9f:c5:50:36:
f0:fd:3f:1c:2b:5b:39:f0:47:29:73:c0:b0:e7:79:97:e3:6a:
ff:2f:16:78:cb:0a:84:9e:3a:48:c6:8d:7c:c9:fd:96:5a:a7:
9f:da:bd:2d:92:94:a2:c7:4c:e5:81:56:42:ec:a1:6e:e0:37:
7b:eb:70:c8:1f:08:b0:d8:ca:d9:0c:19:26:d5:be:c5:8b:0f:
40:24:f7:c3:d4:74:96:35:a1:c2:94:0b:a0:d9:4d:76:61:b3:
60:d9:62:27:c7:42:b9:1a:56:24:8f:a9:2b:fa:cb:a2:b5:fd:
5d:3b:ca:74:f9:64:d6:26:cf:5d:aa:ab:68:e6:7d:6f:da:ab:
52:7e:dc:b7:ac:b2:51:4a:8e:06:06:47:f6:5f:65:13:d1:9e:
82:d6:86:19:a9:45:bc:2b:fd:65:0a:6a:6c:97:0a:59:23:5f:
ce:88:5f:00:8a:c1:a7:78:58:5d:fc:b7:e5:68:eb:b7:a5:15:
2c:48:b7:09:86:f4:c3:fe:03:c9:bb:b6:b2:97:40:c8:68:13:
87:d6:6b:12:cc:85:74:b5:b3:c6:45:31:39:ca:ce:5b:92:08:
1b:1c:be:4e:e0:89:86:c8:9e:01:82:d3:b0:7a:5a:5b:3f:42:
27:50:5f:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8blaLdIC1UFh970P/5QpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MzYyMGRhNDQ1MmFjODJhYWY0YzhjMDg4MTllYjBiODI1
MTNiODMwHhcNMjUwNTEwMjMwMTA5WhcNMjUwNTExMjMwMTA5WjAzMTEwLwYDVQQD
EyhmODUwZjc1ZTFlZmJhMzY4YjVhNjlhMTJkZTA2N2Q3ZTQ1Y2FmOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArow3o2XeLTO1w2oLlehb+gcwDC+X
+/VOMlzzaVOffpS3nqP0bWsi93ESi75u2wB1sFqXaBThjHdT8uM+0mMU+Z2sFJUu
0gqTwn3WyeMBf8IXSEtAmbhmx841uIAQ5PsSpiGkpZ1v9llBuoytO4kbkYWz62Sn
sTMQbpbi/0PFVBAUeHi2BzA5PX9XUBlIbFndVjzE/Kqlnw7mNy0pMnBtHQfNZ6yo
eY2xoHNK2LgUEkLJuSAGhZqrk9+MrQfa3/uxfBJ6t0nHEI3LLGxgjC+Nm4A15K/C
YOuKwwODweJKX1kbBK43mDOHrNCjk5GHbbR8G9+xPwCqs60nQxmF0EL/YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhQ914e+6NotaaaEt4GfX5Fyvj6MB8GA1UdIwQY
MBaAFDU2INpEUqyCqvTIwIgZ6wuCUTuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2It
NTUxNTg0ZTVjMGE0LzEvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2ItNTUxNTg0ZTVjMGE0
LzEvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5S5g6Xr
pUC551V5cAGfxVA28P0/HCtbOfBHKXPAsOd5l+Nq/y8WeMsKhJ46SMaNfMn9llqn
n9q9LZKUosdM5YFWQuyhbuA3e+twyB8IsNjK2QwZJtW+xYsPQCT3w9R0ljWhwpQL
oNlNdmGzYNliJ8dCuRpWJI+pK/rLorX9XTvKdPlk1ibPXaqraOZ9b9qrUn7ct6yy
UUqOBgZH9l9lE9GegtaGGalFvCv9ZQpqbJcKWSNfzohfAIrBp3hYXfy35Wjrt6UV
LEi3CYb0w/4Dybu2spdAyGgTh9ZrEsyFdLWzxkUxOcrOW5IIGxy+TuCJhsieAYLT
sHpaWz9CJ1Bfrg==
-----END CERTIFICATE-----
Generated at Sun May 11 02:09:09 2025 by rpki-client