Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: D//JXNaJHgZc6MgNbS7MhLKhWXmDeB7rVcaENLH3xxM=
Subject key identifier: DF:DD:67:B6:70:2F:15:BE:E3:F2:37:11:84:0F:DB:27:B8:27:B6:12
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 0197496855769EC170CE9DAD8BC6C89ACEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 0D19
Signing time: Sat 07 Jun 2025 08:01:03 +0000
Manifest this update: Sat 07 Jun 2025 08:01:03 +0000
Manifest next update: Sun 08 Jun 2025 08:01:03 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: fAwWsq1IzCAivC2ZQiP/tl8qdjv7TJTVT7mhBdDJtQ8=)
2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:55:76:9e:c1:70:ce:9d:ad:8b:c6:c8:9a:ce:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Jun 7 08:01:03 2025 GMT
Not After : Jun 8 08:01:03 2025 GMT
Subject: CN=dfdd67b6702f15bee3f23711840fdb27b827b612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:0f:f5:bc:64:93:af:91:1b:cb:c2:39:13:
92:cf:a4:08:3c:c5:f6:ad:cc:65:0f:8c:b2:dd:6d:
a9:73:f1:bf:ab:3d:ff:3c:1c:44:e1:14:12:bb:04:
5b:0a:4e:34:79:4c:c3:38:4b:85:7b:ad:83:55:ca:
b5:66:e7:cd:d1:ec:b9:14:7d:7b:5f:0a:9d:c4:a8:
6f:c0:e3:72:28:2d:5d:f9:22:c4:9c:b6:62:7a:97:
f4:7d:47:88:a4:ad:55:17:0a:a3:4b:43:dc:9f:94:
ca:30:51:ec:1d:f4:e1:f7:b0:eb:09:f0:a2:f5:64:
03:36:43:5f:53:1f:7c:94:9e:ae:2a:bf:cc:87:d1:
2d:12:45:e1:78:52:df:58:70:7e:68:47:05:d0:4b:
53:78:56:6c:45:bf:a2:4f:86:5a:94:92:06:8d:8a:
1a:23:d4:70:24:63:63:d3:7a:fc:a3:80:79:6a:7f:
c0:9b:a3:d9:50:1a:76:ab:aa:23:8f:4a:03:b5:38:
ae:20:97:16:67:b6:f8:95:24:c3:a4:af:37:ca:ac:
3a:95:cc:94:b9:28:77:f8:26:d7:08:d5:b3:6d:5c:
f7:0a:5e:4a:fa:3e:5e:40:f6:68:5f:24:37:d1:8c:
d5:01:7e:1c:50:3e:95:20:08:7e:a5:25:83:e3:55:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:67:B6:70:2F:15:BE:E3:F2:37:11:84:0F:DB:27:B8:27:B6:12
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8c:af:f7:0e:c3:5d:5e:98:95:68:1e:20:c4:96:52:f2:4e:
0e:09:9a:2c:cc:64:2e:d4:0d:f5:40:8f:0a:27:41:78:63:6a:
c8:d5:8d:e4:80:6a:73:91:41:a5:b5:ac:6e:c8:2e:37:6e:42:
05:75:b0:35:74:33:18:58:f0:bb:ea:e4:89:fa:f2:ce:ef:dc:
82:e8:75:01:12:7e:8f:b6:10:f6:1e:0e:57:b6:a9:c9:c4:f6:
13:5f:7c:65:8a:45:6b:1d:11:f0:9d:10:71:27:6f:64:06:e9:
c0:47:d6:b4:a8:0c:af:d2:cc:04:d1:84:15:9b:9d:d3:a2:f9:
1c:1e:a6:23:44:e5:92:7f:8e:26:80:b8:e6:59:72:6b:de:7f:
58:73:ec:19:42:0a:1f:71:27:9f:e2:db:d1:46:81:3c:d1:5d:
07:4c:52:8d:46:73:44:e5:4f:d3:92:a5:86:08:68:f8:ee:a7:
05:7c:2c:05:ee:4a:a4:7c:6d:89:9d:12:08:04:c8:ca:df:d2:
e2:80:fd:f2:7a:70:5d:44:74:30:c8:d7:79:5b:b7:29:ae:36:
97:b1:a3:e0:7f:d7:62:ca:97:0e:9a:24:69:ab:db:6c:18:87:
cb:be:c2:6b:16:e5:e8:62:0b:a7:42:45:c1:c3:03:92:10:41:
85:a4:b3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:10 2025 by rpki-client