Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: ax2vw+7lchrsdXleKnQtyFy7iuM8MtsDQunX9jPkcec=
Subject key identifier: 6B:70:0B:F8:8F:F6:AC:D5:C9:4E:B2:6D:77:36:08:C5:D5:A7:6C:F1
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 0196A1D2C3C657176E7A5C56CC4DF2579AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 1128
Signing time: Mon 05 May 2025 19:01:06 +0000
Manifest this update: Mon 05 May 2025 19:01:06 +0000
Manifest next update: Tue 06 May 2025 19:01:06 +0000
Files and hashes: 1: IfdUdkM_5ScEBaPG7l3GiRIWFuU.roa (hash: R1YS3LmUUMRjG9wj9Vs3Bys5gjm8WufD0RLPEG4kcAw=)
2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: jlIAfiisZBlzJeXoBdysUCgpy8HsGMiHHKrJSn3mc3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:c3:c6:57:17:6e:7a:5c:56:cc:4d:f2:57:9a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: May 5 19:01:06 2025 GMT
Not After : May 6 19:01:06 2025 GMT
Subject: CN=6b700bf88ff6acd5c94eb26d773608c5d5a76cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ee:44:ce:b8:1d:71:7a:41:83:53:d7:d2:7d:
5d:ea:34:79:24:75:79:3c:f0:16:6f:a2:cf:54:43:
bb:dc:c2:cc:a8:99:a1:32:9e:5e:1b:f4:fd:e7:db:
8e:d4:e1:52:af:33:2d:03:eb:57:cd:b8:ce:03:8c:
b8:22:17:60:a6:43:1e:77:29:88:89:73:4e:2a:cf:
d1:fd:c5:05:82:e6:6b:65:1d:f0:80:fd:24:18:8b:
e1:b2:a0:f3:8d:30:06:6e:b5:d6:cf:30:87:9e:d8:
13:22:73:3e:d0:ad:7f:8d:7e:b8:69:51:56:3c:73:
59:4d:9a:67:be:32:de:ca:ee:3e:87:88:39:b3:d4:
8d:4d:f1:2f:5e:69:a1:22:23:0b:73:70:99:a2:89:
62:cd:06:03:55:6d:b6:a1:26:94:26:5c:7d:04:9d:
df:a0:d6:11:1a:5a:b1:dc:54:70:79:51:03:a7:62:
6c:07:c3:0b:77:51:ab:e0:72:4d:07:de:40:48:9c:
d7:6a:84:fd:23:09:94:2b:be:62:aa:1b:54:b9:a7:
6e:61:a7:b8:bb:b7:88:e5:28:fb:9d:a8:00:99:28:
64:7b:f8:1a:6c:e6:89:37:ea:54:8b:38:a9:20:8a:
62:cc:fa:b5:6f:10:42:c0:a7:23:c1:6f:0f:60:8e:
7e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:70:0B:F8:8F:F6:AC:D5:C9:4E:B2:6D:77:36:08:C5:D5:A7:6C:F1
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e1:b2:bc:4d:c5:10:38:d9:e6:f9:e5:99:f4:ab:70:36:e5:
9d:60:c8:4f:43:5c:20:4e:a2:80:6a:7b:6b:a7:97:4a:aa:1e:
5b:a5:29:08:0a:58:01:a0:71:1e:f3:d0:42:9f:5a:50:d0:53:
15:93:bc:27:c4:3d:7b:0a:d6:da:c4:3f:23:24:0b:a2:d7:80:
bb:8a:92:f0:21:1d:32:45:90:98:f0:c1:5d:78:0a:17:6b:55:
a8:bb:b4:1d:76:df:58:74:85:a4:a9:ea:05:ac:8f:67:d8:27:
d6:cd:ee:37:fc:1b:d9:89:dd:a9:2b:58:b7:2d:3e:09:65:a3:
69:fc:5f:2b:76:5a:04:47:84:99:c5:b6:29:59:51:8f:78:b2:
73:53:a0:ed:fe:1e:f4:76:76:2d:70:8f:5d:fb:0a:07:a7:e1:
6f:a2:98:7b:da:c9:87:e4:bc:92:d2:e3:b8:6f:21:3e:00:7f:
5d:d4:84:2d:d7:e7:a2:ea:71:23:08:fb:b5:52:07:90:f6:73:
49:d2:34:29:a4:6a:21:90:39:f6:61:d3:f9:d4:fe:53:9c:e1:
ca:73:b8:89:7b:a0:ec:d7:c2:7a:7b:62:80:e1:8b:02:a2:e4:
95:02:5c:49:9c:0e:cc:48:6b:e8:13:e6:04:fb:e3:a3:c2:ee:
5f:8d:df:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZah0sPGVxduelxWzE3yV5qtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzNjNDU2NTc0M2FlNTdiZDJhZWE5YTM2M2MyYjNjM2Uy
NTBmNzIwHhcNMjUwNTA1MTkwMTA2WhcNMjUwNTA2MTkwMTA2WjAzMTEwLwYDVQQD
Eyg2YjcwMGJmODhmZjZhY2Q1Yzk0ZWIyNmQ3NzM2MDhjNWQ1YTc2Y2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu5EzrgdcXpBg1PX0n1d6jR5JHV5
PPAWb6LPVEO73MLMqJmhMp5eG/T959uO1OFSrzMtA+tXzbjOA4y4IhdgpkMedymI
iXNOKs/R/cUFguZrZR3wgP0kGIvhsqDzjTAGbrXWzzCHntgTInM+0K1/jX64aVFW
PHNZTZpnvjLeyu4+h4g5s9SNTfEvXmmhIiMLc3CZoolizQYDVW22oSaUJlx9BJ3f
oNYRGlqx3FRweVEDp2JsB8MLd1Gr4HJNB95ASJzXaoT9IwmUK75iqhtUuaduYae4
u7eI5Sj7nagAmShke/gabOaJN+pUizipIIpizPq1bxBCwKcjwW8PYI5+XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtwC/iP9qzVyU6ybXc2CMXVp2zxMB8GA1UdIwQY
MBaAFDbDxFZXQ65XvSrqmjY8Kzw+JQ9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNQRVZsZERybGU5S3VxYU5qd3JQRDRsRDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8wMTYxNTYtMDkzZS00MDViLTliMmQt
YTU3NDlkMjM0NmU3LzEvTnNQRVZsZERybGU5S3VxYU5qd3JQRDRsRDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8wMTYxNTYtMDkzZS00MDViLTliMmQtYTU3NDlkMjM0NmU3
LzEvTnNQRVZsZERybGU5S3VxYU5qd3JQRDRsRDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuGyvE3F
EDjZ5vnlmfSrcDblnWDIT0NcIE6igGp7a6eXSqoeW6UpCApYAaBxHvPQQp9aUNBT
FZO8J8Q9ewrW2sQ/IyQLoteAu4qS8CEdMkWQmPDBXXgKF2tVqLu0HXbfWHSFpKnq
BayPZ9gn1s3uN/wb2YndqStYty0+CWWjafxfK3ZaBEeEmcW2KVlRj3iyc1Og7f4e
9HZ2LXCPXfsKB6fhb6KYe9rJh+S8ktLjuG8hPgB/XdSELdfnoupxIwj7tVIHkPZz
SdI0KaRqIZA59mHT+dT+U5zhynO4iXug7NfCentigOGLAqLklQJcSZwOzEhr6BPm
BPvjo8LuX43f0Q==
-----END CERTIFICATE-----
Generated at Tue May 6 02:39:40 2025 by rpki-client