Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
File: NGbkl-i6koMIR7TYtnEDJdI72oU.mft (raw, json)
Hash identifier: 0DK9a8sC6mRyg2ZrbtqtJNQ7yNjfFNJRkUo0m7muO2Y=
Subject key identifier: 68:85:9D:EF:78:49:88:39:12:D1:3E:51:60:72:B6:C1:95:3B:B7:6E
Authority key identifier: 34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
Certificate issuer: /CN=3466e497e8ba92830847b4d8b6710325d23bda85
Certificate serial: 01969F3F833AFD2EAC1524C73990DBD5E0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
Manifest number: 0583
Signing time: Mon 05 May 2025 07:01:01 +0000
Manifest this update: Mon 05 May 2025 07:01:01 +0000
Manifest next update: Tue 06 May 2025 07:01:01 +0000
Files and hashes: 1: NGbkl-i6koMIR7TYtnEDJdI72oU.crl (hash: /ZzRJiGXParImTNutWWL/OgIkMctp0equReSvsPN33g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:83:3a:fd:2e:ac:15:24:c7:39:90:db:d5:e0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3466e497e8ba92830847b4d8b6710325d23bda85
Validity
Not Before: May 5 07:01:01 2025 GMT
Not After : May 6 07:01:01 2025 GMT
Subject: CN=68859def7849883912d13e516072b6c1953bb76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e5:f2:79:8e:72:f4:fb:94:53:1e:22:6f:d1:
a5:a8:c6:70:a2:5d:6f:b8:8b:09:6b:09:20:a6:cb:
a0:0d:b7:ae:96:62:f2:e6:00:5d:8e:8c:e6:c5:60:
51:8a:26:8e:fd:69:60:89:10:2f:1d:04:9c:68:fe:
41:35:e7:cb:38:8c:3c:5f:85:34:47:64:c1:2c:ec:
e7:6d:f9:8d:22:f5:cc:82:ef:a1:76:ac:5a:08:8f:
ab:e5:18:c6:80:e6:23:d5:88:85:ef:1b:56:b5:0b:
69:c3:23:c8:88:7e:38:13:81:fd:a7:c9:18:ef:74:
5d:4f:a5:d8:70:f9:ea:8d:fc:0f:3e:c0:31:e6:c3:
91:d1:fd:3e:82:19:93:7c:99:0a:62:0b:1c:cf:15:
38:ae:e9:ea:7e:40:d2:f8:29:31:c1:27:d6:42:33:
d4:15:5b:9c:95:34:fa:40:f9:05:b2:54:49:41:22:
6e:1f:21:ad:80:0c:16:47:d3:69:b5:a4:e2:e2:d8:
c0:c1:26:51:74:bd:c2:f6:f0:bc:b1:e6:47:ad:12:
47:6d:a9:53:4e:e2:73:25:33:ed:af:84:30:65:d7:
84:85:4d:ff:aa:e8:b2:76:fb:ab:d9:51:c7:6e:f4:
3e:2b:e4:34:11:e9:a5:83:6f:61:7f:8b:86:9d:72:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:85:9D:EF:78:49:88:39:12:D1:3E:51:60:72:B6:C1:95:3B:B7:6E
X509v3 Authority Key Identifier:
keyid:34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9b:ad:e8:75:ba:6d:88:c2:50:18:87:68:51:29:b9:ab:97:
96:d7:38:14:59:49:11:55:ec:77:bb:c7:f3:36:35:2c:3d:21:
66:0b:72:40:77:f7:bc:f4:1b:e8:46:6e:4b:f6:a5:7b:f0:06:
08:99:9c:d3:86:e7:6d:a1:24:e7:9f:2a:4d:ac:fd:e2:15:66:
d2:d6:a6:df:cb:71:24:ea:ae:d7:cf:5f:a7:68:44:3c:5d:16:
3f:3c:07:02:c7:bd:37:17:4b:e6:a6:b8:e9:2d:f7:98:e7:8d:
42:96:ae:8b:18:d8:5f:d4:c1:c4:61:f7:7f:cf:d1:08:f6:bb:
e2:d0:7a:b6:4c:63:01:dc:a1:a2:a6:7a:8e:8d:8b:8e:ae:ee:
a7:ba:6f:1e:ce:0b:87:ce:3e:64:f2:fb:68:5c:8e:a7:79:91:
9a:dc:b1:94:b6:c1:2c:fb:cb:1f:8b:47:32:41:0f:03:a5:2f:
85:54:a1:20:28:ac:f9:ad:e0:9e:13:a8:2f:26:89:70:51:e4:
0a:63:3f:dc:a7:f6:5d:95:b3:2f:12:e8:15:45:4b:97:e7:29:
db:92:f3:3b:13:40:be:5e:9c:fb:6f:0f:0c:66:22:e9:bd:a3:
32:a3:ee:4c:7e:91:a4:a5:3e:39:1c:6f:1b:64:9a:cd:c0:64:
22:c4:8b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafP4M6/S6sFSTHOZDb1eC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NjZlNDk3ZThiYTkyODMwODQ3YjRkOGI2NzEwMzI1ZDIz
YmRhODUwHhcNMjUwNTA1MDcwMTAxWhcNMjUwNTA2MDcwMTAxWjAzMTEwLwYDVQQD
Eyg2ODg1OWRlZjc4NDk4ODM5MTJkMTNlNTE2MDcyYjZjMTk1M2JiNzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OXyeY5y9PuUUx4ib9GlqMZwol1v
uIsJawkgpsugDbeulmLy5gBdjozmxWBRiiaO/WlgiRAvHQScaP5BNefLOIw8X4U0
R2TBLOznbfmNIvXMgu+hdqxaCI+r5RjGgOYj1YiF7xtWtQtpwyPIiH44E4H9p8kY
73RdT6XYcPnqjfwPPsAx5sOR0f0+ghmTfJkKYgsczxU4runqfkDS+CkxwSfWQjPU
FVuclTT6QPkFslRJQSJuHyGtgAwWR9NptaTi4tjAwSZRdL3C9vC8seZHrRJHbalT
TuJzJTPtr4QwZdeEhU3/quiydvur2VHHbvQ+K+Q0Eemlg29hf4uGnXIrQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiFne94SYg5EtE+UWBytsGVO7duMB8GA1UdIwQY
MBaAFDRm5JfoupKDCEe02LZxAyXSO9qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80NDg0NmQtNTVkMC00YTIwLWJkMTEt
ZGNhZDA4ZjJmMjNmLzEvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80NDg0NmQtNTVkMC00YTIwLWJkMTEtZGNhZDA4ZjJmMjNm
LzEvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZut6HW6
bYjCUBiHaFEpuauXltc4FFlJEVXsd7vH8zY1LD0hZgtyQHf3vPQb6EZuS/ale/AG
CJmc04bnbaEk558qTaz94hVm0tam38txJOqu189fp2hEPF0WPzwHAse9NxdL5qa4
6S33mOeNQpauixjYX9TBxGH3f8/RCPa74tB6tkxjAdyhoqZ6jo2Ljq7up7pvHs4L
h84+ZPL7aFyOp3mRmtyxlLbBLPvLH4tHMkEPA6UvhVShICis+a3gnhOoLyaJcFHk
CmM/3Kf2XZWzLxLoFUVLl+cp25LzOxNAvl6c+28PDGYi6b2jMqPuTH6RpKU+ORxv
G2SazcBkIsSLMA==
-----END CERTIFICATE-----
Generated at Mon May 5 11:03:05 2025 by rpki-client