Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: B1U+OW0evbSAEpJHoIBDN2m9OhfcOz9Gr2eOERRkobY=
Subject key identifier: FB:A7:40:67:72:2C:FA:F4:AF:C1:F8:78:A3:22:47:3A:DB:6A:4E:6D
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01969E9B09BDD5BAEACF3A2E644D3D3CBC7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 1547
Signing time: Mon 05 May 2025 04:01:22 +0000
Manifest this update: Mon 05 May 2025 04:01:22 +0000
Manifest next update: Tue 06 May 2025 04:01:22 +0000
Files and hashes: 1: 1-ULf-aQJ3fC-9_w7BYQULZHTnNw.roa (hash: A5jmxQDIS4oGLvhKUV0INjhfzuBh6+1jpId+3WjZlWc=)
2: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (hash: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=)
3: 6Jm2eoj9ZSHN-oOUb9pQlIZSyeM.roa (hash: g919cnEgUex9Vq6Cq0vNxzfmvBW8lAFZJ89+7u0kuuo=)
4: LfROe2I71eG6M7Z-gNeANYWPFpE.roa (hash: jYCJfZL3yCQ4hYWioDRR7adhtNmlY65zHqG2PPbV/Qo=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: pN2HK9ccZCN2yXqPESJ2PJY1QSsZr0+7bLozJB4BNSQ=)
6: WB5IR-rncEh5erhRHuCyer1roLg.roa (hash: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=)
7: dkDLfL12Mvt9oOTN814F8r3xyp4.roa (hash: Bf4qm+dtST2tX+x1TcvddLF9nRprjThyue/B71J9XDM=)
8: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (hash: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9b:09:bd:d5:ba:ea:cf:3a:2e:64:4d:3d:3c:bc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: May 5 04:01:22 2025 GMT
Not After : May 6 04:01:22 2025 GMT
Subject: CN=fba74067722cfaf4afc1f878a322473adb6a4e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:c7:25:95:3b:82:a9:45:30:90:97:95:43:
19:0a:d6:76:75:a0:74:49:b5:af:ca:99:c2:ad:a9:
1d:07:8a:75:d5:bb:1e:e5:b5:41:06:d8:e9:04:c4:
76:5c:5f:5f:d7:9e:ae:8d:29:57:19:9d:d6:15:44:
5e:07:0c:67:f8:dc:a5:44:93:0c:63:f6:15:be:8a:
88:61:7d:4d:4d:4f:44:ac:52:e6:94:5a:94:13:b6:
97:e5:28:ec:8f:ae:0e:63:17:cf:7d:08:cd:a5:88:
65:ec:db:10:77:de:60:ec:17:b3:a7:95:93:a9:48:
74:24:4a:69:31:d8:13:f9:eb:1c:35:3b:e6:ca:6a:
61:8b:6d:d8:34:d8:6b:d8:9e:36:2f:a7:6b:14:bb:
b2:ce:9e:f5:7e:37:4a:4d:c6:6e:c9:91:f6:a5:b5:
e5:63:28:69:0c:31:04:01:91:d5:84:5a:3b:29:a1:
0b:f6:39:89:6c:b3:e2:c9:f3:c0:5b:69:0e:b1:a1:
b0:60:fe:5a:58:b8:09:db:88:eb:2a:c0:f4:cb:3a:
d1:5c:42:98:e3:27:af:23:61:65:94:13:79:fd:96:
5f:ac:f9:27:63:dc:0b:87:24:10:83:ff:4c:90:4c:
60:94:b6:fb:2a:a4:7a:34:47:6e:70:b6:94:02:e7:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A7:40:67:72:2C:FA:F4:AF:C1:F8:78:A3:22:47:3A:DB:6A:4E:6D
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5d:c3:e8:98:58:39:54:c5:ef:b0:e6:2e:ff:3b:27:c0:7b:
13:63:b5:35:9b:8e:0d:77:7d:1b:36:1c:c5:c3:b6:43:24:c8:
41:f9:22:90:2e:9d:4e:64:61:22:22:64:0e:47:cb:d1:d8:ea:
f6:8d:d4:ee:1d:92:f8:0a:0b:8c:f1:f9:ab:c8:7a:df:10:9e:
c6:55:bb:21:4e:83:a5:6b:d3:f1:6a:c3:9e:bf:34:6d:f6:1f:
98:b7:fd:76:ed:dc:03:a0:7f:88:e6:b7:02:86:06:92:31:12:
ad:89:1a:32:6d:6a:e5:51:8e:24:0e:a1:4b:60:4f:85:8c:03:
38:8f:e7:5b:f7:0c:4b:91:40:78:a7:ce:bd:9d:ef:f1:38:41:
8f:e9:da:54:d5:4f:c1:4e:c0:c3:7d:05:82:db:aa:5d:dd:3b:
46:7c:ea:0e:aa:4a:4b:cf:77:d2:d0:59:81:1c:60:4a:ee:11:
eb:7f:a5:0e:35:9f:43:a4:ae:18:11:78:f6:22:5f:b3:0c:51:
43:47:93:0a:f5:f3:61:fc:ba:33:8f:86:97:b4:ee:43:e2:66:
ae:7d:95:95:f6:25:8f:d7:94:1d:99:5f:d9:43:8c:15:d7:b3:
c7:fc:33:73:d9:d4:98:a7:20:e5:1d:96:77:8b:30:0d:5f:78:
3d:7e:6a:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemwm91brqzzouZE09PLx8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjUwNTA1MDQwMTIyWhcNMjUwNTA2MDQwMTIyWjAzMTEwLwYDVQQD
EyhmYmE3NDA2NzcyMmNmYWY0YWZjMWY4NzhhMzIyNDczYWRiNmE0ZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDnHJZU7gqlFMJCXlUMZCtZ2daB0
SbWvypnCrakdB4p11bse5bVBBtjpBMR2XF9f156ujSlXGZ3WFUReBwxn+NylRJMM
Y/YVvoqIYX1NTU9ErFLmlFqUE7aX5Sjsj64OYxfPfQjNpYhl7NsQd95g7Bezp5WT
qUh0JEppMdgT+escNTvmymphi23YNNhr2J42L6drFLuyzp71fjdKTcZuyZH2pbXl
YyhpDDEEAZHVhFo7KaEL9jmJbLPiyfPAW2kOsaGwYP5aWLgJ24jrKsD0yzrRXEKY
4yevI2FllBN5/ZZfrPknY9wLhyQQg/9MkExglLb7KqR6NEducLaUAuf65wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPunQGdyLPr0r8H4eKMiRzrbak5tMB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV3D6JhY
OVTF77DmLv87J8B7E2O1NZuODXd9GzYcxcO2QyTIQfkikC6dTmRhIiJkDkfL0djq
9o3U7h2S+AoLjPH5q8h63xCexlW7IU6DpWvT8WrDnr80bfYfmLf9du3cA6B/iOa3
AoYGkjESrYkaMm1q5VGOJA6hS2BPhYwDOI/nW/cMS5FAeKfOvZ3v8ThBj+naVNVP
wU7Aw30FgtuqXd07RnzqDqpKS8930tBZgRxgSu4R63+lDjWfQ6SuGBF49iJfswxR
Q0eTCvXzYfy6M4+Gl7TuQ+Jmrn2VlfYlj9eUHZlf2UOMFdezx/wzc9nUmKcg5R2W
d4swDV94PX5qoQ==
-----END CERTIFICATE-----
Generated at Mon May 5 10:50:17 2025 by rpki-client