Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
File: NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft (raw, json)
Hash identifier: t76sM/AFwZXTp3bz2R1yy7/kt9yPaKXvnf0l//r7ims=
Subject key identifier: E8:BA:87:44:7A:72:A0:5A:03:CD:73:35:E4:D4:23:69:B4:B6:AA:B2
Authority key identifier: 37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
Certificate issuer: /CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Certificate serial: 01965500D4D883E3BD957697D4AA67388020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 21:00:39 +0000
Manifest this update: Sun 20 Apr 2025 21:00:39 +0000
Manifest next update: Mon 21 Apr 2025 21:00:39 +0000
Files and hashes: 1: NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl (hash: wfgPI9PPoOn+WDm5beopOKLHKqca6DURqPdaWIvVKgs=)
2: P1xjhgcrB_82E1dr812SN7zD2jw.roa (hash: 1Ps5EidA8vmNxrrB6k3QxJd8xmqPpWh99eg7n4cVK7o=)
3: q3oH4WqBy89nlHf_ohkPgGYaYoc.roa (hash: /Ya4Ak12mdvsioIt2KLsqtGYRCnDo04vhdOQ06CJDUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:d4:d8:83:e3:bd:95:76:97:d4:aa:67:38:80:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Validity
Not Before: Apr 20 21:00:39 2025 GMT
Not After : Apr 21 21:00:39 2025 GMT
Subject: CN=e8ba87447a72a05a03cd7335e4d42369b4b6aab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:a8:92:fa:c8:88:89:27:85:cc:a9:e5:10:
d6:4b:63:7e:84:5d:39:62:39:f1:85:ac:17:79:29:
a6:17:3f:a1:f0:0c:0a:09:3a:c8:ae:23:b1:24:3d:
33:7b:4b:e1:97:67:d9:51:85:60:be:90:48:96:21:
ad:d1:bc:56:aa:da:70:17:10:cd:f4:9c:ce:7a:d6:
2f:68:82:59:34:9f:79:e4:a7:ee:ee:ec:fd:89:48:
f8:5c:0e:85:3e:a9:9d:fe:e0:44:69:5c:89:67:c5:
49:05:4b:0e:a4:c6:35:ea:12:fe:cd:00:c1:b7:40:
a0:13:a9:e2:d3:63:6a:2e:c4:31:1f:71:b1:3b:93:
98:ac:30:55:60:a4:cd:8c:95:ce:2a:63:28:3b:6a:
db:c1:bb:6e:7b:33:3a:5f:a8:dc:81:c7:bb:4f:b8:
b5:5a:ab:12:24:2f:e2:b6:4c:ed:aa:91:c4:db:17:
49:d6:31:c0:67:61:19:51:9c:8b:10:b8:45:9d:69:
de:46:eb:10:7b:33:ac:94:2e:95:ee:47:cb:79:65:
00:a6:89:5b:a6:6e:6d:76:88:e3:25:c0:df:4b:ed:
96:7e:75:73:cc:16:29:d9:3a:b7:c4:33:c5:fd:58:
31:93:12:14:ba:55:43:ad:37:7d:f2:cc:2c:87:ae:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BA:87:44:7A:72:A0:5A:03:CD:73:35:E4:D4:23:69:B4:B6:AA:B2
X509v3 Authority Key Identifier:
keyid:37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:90:0d:72:45:f2:05:44:ae:e1:4d:e6:7b:27:92:48:5a:e5:
5b:d8:4f:0f:92:b2:aa:ac:18:b8:b2:06:da:bf:94:ad:0a:ca:
2b:94:db:11:14:0e:ca:0b:21:3f:b4:59:09:00:b9:66:1f:89:
90:dd:81:96:7a:23:f2:13:32:86:b3:f3:f1:9f:5e:fc:d3:72:
9e:c4:01:bd:c3:b2:01:16:53:07:52:3f:6b:33:aa:f3:2c:af:
cc:66:80:6a:ab:09:24:fa:7d:53:58:5d:62:f5:6a:0e:d2:c0:
cc:21:b1:da:48:5e:62:59:39:e5:48:85:bb:bb:d8:30:c7:5c:
54:38:30:e2:4b:d2:14:d6:b8:d7:65:c4:21:48:6e:80:c0:cd:
cb:98:16:80:7f:8b:eb:f8:12:44:30:7b:c0:e4:9a:5d:fb:1f:
02:73:98:ed:cd:9d:c4:2b:ef:4a:e5:74:24:7d:f9:27:ef:18:
69:62:21:cd:a3:08:a7:ca:32:8a:0e:bb:f1:a2:04:99:86:3f:
3e:1a:a2:1e:9d:11:07:96:25:fe:bb:6c:61:f4:75:cb:3f:e5:
72:91:26:25:c1:dd:62:39:f4:1b:61:60:ec:5c:78:5b:aa:ff:
e8:43:c7:3a:b2:a5:e4:92:42:1f:3d:46:66:44:73:6a:5c:c8:
e8:15:42:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVANTYg+O9lXaX1KpnOIAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MmFjNmVmOTJiODFkNzA1Nzg3YTRlZjg5ZmQ0NjczODA1
YzdhYmMwHhcNMjUwNDIwMjEwMDM5WhcNMjUwNDIxMjEwMDM5WjAzMTEwLwYDVQQD
EyhlOGJhODc0NDdhNzJhMDVhMDNjZDczMzVlNGQ0MjM2OWI0YjZhYWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6aokvrIiIknhcyp5RDWS2N+hF05
YjnxhawXeSmmFz+h8AwKCTrIriOxJD0ze0vhl2fZUYVgvpBIliGt0bxWqtpwFxDN
9JzOetYvaIJZNJ955Kfu7uz9iUj4XA6FPqmd/uBEaVyJZ8VJBUsOpMY16hL+zQDB
t0CgE6ni02NqLsQxH3GxO5OYrDBVYKTNjJXOKmMoO2rbwbtuezM6X6jcgce7T7i1
WqsSJC/itkztqpHE2xdJ1jHAZ2EZUZyLELhFnWneRusQezOslC6V7kfLeWUApolb
pm5tdojjJcDfS+2WfnVzzBYp2Tq3xDPF/VgxkxIUulVDrTd98swsh678AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOi6h0R6cqBaA81zNeTUI2m0tqqyMB8GA1UdIwQY
MBaAFDcqxu+SuB1wV4ek74n9RnOAXHq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlyRzc1SzRIWEJYaDZUdmlmMUdjNEJjZXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iMWE2N2QtNWZiMy00ODU1LThkMTkt
MDlhMjhlMGQ3MTc4LzEvTnlyRzc1SzRIWEJYaDZUdmlmMUdjNEJjZXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iMWE2N2QtNWZiMy00ODU1LThkMTktMDlhMjhlMGQ3MTc4
LzEvTnlyRzc1SzRIWEJYaDZUdmlmMUdjNEJjZXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZANckXy
BUSu4U3meyeSSFrlW9hPD5KyqqwYuLIG2r+UrQrKK5TbERQOygshP7RZCQC5Zh+J
kN2Blnoj8hMyhrPz8Z9e/NNynsQBvcOyARZTB1I/azOq8yyvzGaAaqsJJPp9U1hd
YvVqDtLAzCGx2kheYlk55UiFu7vYMMdcVDgw4kvSFNa412XEIUhugMDNy5gWgH+L
6/gSRDB7wOSaXfsfAnOY7c2dxCvvSuV0JH35J+8YaWIhzaMIp8oyig678aIEmYY/
PhqiHp0RB5Yl/rtsYfR1yz/lcpEmJcHdYjn0G2Fg7Fx4W6r/6EPHOrKl5JJCHz1G
ZkRzalzI6BVCuw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:39:33 2025 by rpki-client