Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: WWth74suYgWeMCj0U+OlfzvjbtOS5TnVV7D9yy2mp1M=
Subject key identifier: FC:B2:E3:BC:A8:71:15:2A:7B:B9:69:F2:C4:7B:B7:01:D0:20:CA:45
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019644B25533CC862F53A07940D8E862B65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 0C92
Signing time: Thu 17 Apr 2025 17:00:59 +0000
Manifest this update: Thu 17 Apr 2025 17:00:59 +0000
Manifest next update: Fri 18 Apr 2025 17:00:59 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: tCOXH8LlAEoRmdLI0OymUlvSDmidlp6blEhR761r+JE=)
2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:55:33:cc:86:2f:53:a0:79:40:d8:e8:62:b6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Apr 17 17:00:59 2025 GMT
Not After : Apr 18 17:00:59 2025 GMT
Subject: CN=fcb2e3bca871152a7bb969f2c47bb701d020ca45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:1d:59:78:34:03:72:0c:53:86:8b:a9:ae:
53:8e:90:92:f8:33:1d:5d:d0:4b:6c:48:1d:84:20:
8a:e0:2d:ce:43:1e:f3:9c:74:f8:29:1a:14:ba:64:
30:d5:07:aa:e5:61:5f:86:c7:9f:e6:13:b9:60:ff:
61:32:b6:ca:2d:01:c3:45:a7:c6:23:58:56:93:bd:
36:e0:9e:61:b6:68:03:e5:80:8b:a2:ec:c8:ab:b5:
69:92:66:be:df:57:07:06:6f:f1:e8:fa:81:ae:e5:
ee:4c:ec:b4:eb:d6:ea:21:87:11:df:3d:28:a0:c0:
08:52:e1:ac:99:99:9b:d5:be:02:e4:cc:05:d8:d8:
3f:10:98:5a:73:a6:18:58:be:95:66:83:81:f7:85:
01:67:80:78:5a:ee:c0:f6:30:9d:46:c8:09:e4:eb:
6b:13:f5:81:c0:4b:7b:88:90:b6:d3:50:06:30:7c:
86:01:7b:70:24:c5:e4:58:bb:b9:8d:a8:d5:2b:ea:
49:ff:49:b8:eb:79:df:a4:c7:04:e0:5b:25:f8:6a:
9d:4c:3d:32:6b:9a:34:fa:83:21:29:0b:ee:85:12:
37:c0:60:b0:2b:8e:c3:53:b0:a8:f1:aa:57:0e:5e:
70:56:b5:f3:29:a4:28:4e:4b:ac:0e:66:7b:ff:15:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B2:E3:BC:A8:71:15:2A:7B:B9:69:F2:C4:7B:B7:01:D0:20:CA:45
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:28:c1:d2:4a:c3:3d:9b:1e:83:03:29:fc:09:1c:d3:50:e1:
3f:f8:32:74:b9:03:79:61:9f:89:09:6e:3d:fa:8c:e8:3a:48:
03:e1:6f:0e:3c:52:82:18:d2:b6:d7:b1:5c:c6:20:98:d2:61:
8c:a4:4b:d8:c7:50:82:38:ad:a3:06:8b:20:3b:f0:22:92:17:
f3:a6:0e:a2:2c:50:59:91:7d:8c:f4:fe:5c:64:ee:5e:72:f5:
93:ed:0d:91:35:84:2d:d2:8e:57:b5:43:3f:08:99:59:ff:3a:
aa:af:78:8c:82:96:06:fb:dc:bb:5f:fd:d6:df:1d:9b:63:bb:
1a:02:c1:27:38:ae:5f:7f:4d:29:a5:f1:ea:8d:d3:f7:53:9d:
61:92:2f:9b:07:96:a8:c8:c4:23:40:9f:f7:47:b2:46:28:b8:
bc:61:5d:47:b8:c7:d2:bd:79:35:f2:75:8a:03:2e:58:fa:84:
e2:56:9e:78:7e:80:11:0a:95:b0:07:e8:ad:f2:e0:3c:2a:80:
e5:51:c4:e9:e8:78:20:f5:31:54:a2:97:99:68:84:36:6c:f8:
68:a1:ba:d6:24:7e:80:7c:57:68:de:6e:4d:96:80:19:18:02:
b9:ae:10:87:d4:49:11:13:f0:20:5b:9d:a5:b4:53:59:d0:c5:
a3:30:65:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:27:01 2025 by rpki-client