Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File: nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier: HakJH5YWYg0OHn4+9Z29sDr95MvxrQD+9zOF1AzkL8I=
Subject key identifier: 06:42:FF:20:43:9E:1D:A1:48:23:46:8A:BF:42:0E:40:97:2C:F2:0F
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial: 019655DC92BC9D22F696B69156B6628AE2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number: 11DD
Signing time: Mon 21 Apr 2025 01:00:40 +0000
Manifest this update: Mon 21 Apr 2025 01:00:40 +0000
Manifest next update: Tue 22 Apr 2025 01:00:40 +0000
Files and hashes: 1: T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa (hash: RdeAevZDp8XmGqqAvK8gJZd85NjETWsjIIExe3sxUXY=)
2: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: 7RkgOVCH5P7RyAC6An71Fm2SVzA4mGA1CRycP9n/sN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:92:bc:9d:22:f6:96:b6:91:56:b6:62:8a:e2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
Validity
Not Before: Apr 21 01:00:40 2025 GMT
Not After : Apr 22 01:00:40 2025 GMT
Subject: CN=0642ff20439e1da14823468abf420e40972cf20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:d3:4b:4f:dc:b9:69:cc:d2:a5:69:69:ad:
8a:f4:ea:5c:b8:e4:c5:44:6c:b2:93:99:70:4a:8a:
ea:f4:78:6e:b4:56:63:96:37:b8:13:da:7a:00:08:
8d:d4:23:7b:2b:4a:47:48:b1:4c:f2:ec:8e:c0:13:
65:76:1b:2d:d9:e9:11:c0:47:a5:3c:cd:78:cc:42:
e2:ac:ed:40:66:c4:e5:de:d1:e0:ba:4f:10:49:de:
29:e8:17:da:26:eb:8c:e4:e5:5b:58:4b:87:f2:32:
d6:5d:20:bc:24:7f:26:77:be:d6:e0:46:08:13:d9:
ec:13:7d:8e:91:0f:76:0f:dd:76:20:16:ea:03:e2:
d1:c1:8d:f0:b8:a2:f7:96:4b:8d:ea:7d:7e:36:2c:
b5:18:7f:1d:ef:ec:ee:b4:47:e5:09:7b:9b:21:b6:
e4:04:a8:42:ae:e2:da:6b:69:f7:1b:e4:1a:f0:ae:
1b:36:62:36:dc:74:c2:b6:6e:8d:a5:0d:9d:2b:b2:
f2:fa:94:55:1c:98:73:57:3d:82:e2:b0:ad:28:9d:
76:9e:67:a4:4e:2e:68:c9:74:cf:97:6d:81:43:bf:
99:45:dc:f6:a1:2f:71:83:bf:b5:69:96:39:2d:cd:
65:a8:0f:a5:5e:68:a8:56:56:e9:30:92:6f:cb:06:
51:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:42:FF:20:43:9E:1D:A1:48:23:46:8A:BF:42:0E:40:97:2C:F2:0F
X509v3 Authority Key Identifier:
keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:11:7e:b2:fa:03:92:15:2f:6d:bd:34:dc:e8:39:c8:e9:60:
01:68:59:fa:0e:e4:e8:e6:ab:7b:c0:ff:40:12:e6:ca:84:7a:
ad:38:bb:ca:60:b5:ef:03:95:3c:df:4d:40:41:b2:ed:fb:f8:
b0:2b:46:41:f3:cb:79:13:2f:1a:20:c2:80:39:2f:5b:44:49:
d1:98:e1:1e:f3:f0:b5:59:85:5f:5c:14:2e:1c:48:7d:73:cf:
6e:7d:51:f6:75:ed:a2:d3:80:f5:f8:24:b4:47:be:31:14:0f:
f2:ec:5a:c0:40:fd:bd:ea:85:51:6c:f9:c5:06:4e:07:7d:3f:
77:b9:56:47:da:af:0b:0f:83:5f:4e:0f:a9:82:f3:42:ad:36:
5c:d0:d1:0e:5c:94:bc:cf:2f:59:77:84:5f:9c:ab:7b:f2:ac:
6e:f1:53:cf:d5:fd:48:7f:6c:4e:81:80:53:31:5c:2a:76:5e:
1d:98:dc:61:2d:69:56:f3:10:5f:ce:df:a5:f3:56:44:75:b1:
ea:c5:e8:f3:02:d7:86:32:a5:fa:a7:5a:3a:fb:bf:5f:b8:3a:
f9:3e:74:ce:2c:ea:59:b9:b3:dd:ce:2a:d7:2f:0c:09:56:ed:
d4:4b:9e:82:39:33:d5:e3:e3:b9:65:e1:cd:fb:00:36:e0:c2:
08:4d:9d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:52:04 2025 by rpki-client