Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: ETXRXqDvraIe1eC0QBBvjjw7rG4GyILAty9roCQHK3E=
Subject key identifier: E5:5A:83:CD:4B:08:F1:6E:80:3B:D8:9E:97:BA:43:1A:89:82:1F:08
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 01964D46E310AAB757597C7E26989F96AB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 09:00:13 +0000
Manifest this update: Sat 19 Apr 2025 09:00:13 +0000
Manifest next update: Sun 20 Apr 2025 09:00:13 +0000
Files and hashes: 1: ObbHotU_QnvsulgBzQaW4wh0HAk.roa (hash: mbgTfoasS2/JRLVjEdWRajTXVRhnW7d5YvctUH9mztI=)
2: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: OzojXtj4ZhDgn6D8Ga4ofbHZAC0MUjN2ZAzR2cKtDs8=)
3: sLdQOZGVUyb44hu-OktavwbL-fA.roa (hash: 61zdCvV2SZ1HoaLvCC14jhWwxqjS5pgyZuPOqRzMG/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:e3:10:aa:b7:57:59:7c:7e:26:98:9f:96:ab:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Apr 19 09:00:13 2025 GMT
Not After : Apr 20 09:00:13 2025 GMT
Subject: CN=e55a83cd4b08f16e803bd89e97ba431a89821f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:c7:66:27:e3:b5:b9:34:74:c8:9f:3a:31:
92:8a:38:03:c3:ee:e2:48:d1:2c:52:7e:e8:3d:b5:
6c:ec:66:63:c6:4f:58:a1:62:7e:ab:06:1f:8d:48:
8e:bc:48:40:9f:3a:b6:b2:61:72:9b:df:67:e8:18:
0f:f8:21:2d:6f:81:3c:ea:db:e7:6f:5c:b5:31:31:
6b:06:5c:ce:a5:b2:b7:18:ca:76:77:30:84:d0:01:
9b:19:90:08:df:52:d6:29:64:22:94:a0:00:32:78:
ec:a9:90:16:69:58:14:22:f8:f1:9f:8a:a0:d5:3d:
f4:bf:22:b4:fe:b9:e3:6a:b9:7f:3d:1f:b8:4d:d5:
3c:b8:7a:d0:92:12:30:b2:fd:9c:c8:a3:fa:0d:43:
5c:0f:52:9c:85:8d:0b:ea:50:38:3a:73:2a:67:b3:
be:8a:f7:a7:51:10:e2:52:07:f2:e4:9d:80:a5:a6:
60:6f:11:32:56:8c:9b:c3:ea:f2:f1:96:64:4f:77:
3b:ff:f1:8d:68:b1:d5:cd:c8:19:0d:1e:f8:fa:1e:
12:50:61:9d:c9:be:f4:da:a1:be:12:a9:a0:c0:d3:
28:5f:81:b8:80:8d:41:f4:47:0b:17:3f:15:bd:cb:
3e:87:dd:54:cb:cb:16:41:47:8e:fe:4f:f9:51:47:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5A:83:CD:4B:08:F1:6E:80:3B:D8:9E:97:BA:43:1A:89:82:1F:08
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:5d:0f:9d:63:16:55:44:91:57:37:f5:87:86:04:65:c7:ed:
8a:0c:f4:09:d1:d5:cf:c8:af:4a:6a:e1:26:de:32:60:75:71:
5a:82:97:f3:c2:7a:90:ec:4e:74:11:e2:b0:5b:0c:63:f5:a7:
3b:60:a4:bf:17:bc:01:e2:06:b6:8e:dd:60:9e:91:61:b2:37:
d5:24:24:19:51:05:16:e9:9f:52:c7:d6:3e:5d:e9:ca:ae:74:
4d:ea:bf:f6:87:04:1c:f0:44:4a:7d:f2:7d:5e:9e:5d:9a:64:
c8:0e:96:64:71:f6:b0:9e:94:04:db:dc:ed:b8:a9:df:8b:85:
47:4a:73:fb:23:c5:e4:53:ac:bc:ce:bb:94:6a:46:5e:72:a9:
91:95:ad:84:c5:a5:30:50:95:d7:28:4f:42:9a:45:a6:bf:69:
69:40:38:c3:de:45:db:a4:a1:6b:e8:bf:08:19:63:96:9e:26:
10:9f:82:b8:c7:74:dc:45:b5:6c:97:d3:60:c8:8a:78:21:a8:
f9:bc:8e:94:29:b2:1b:f9:06:87:4c:05:7d:57:26:cc:1c:a1:
17:a5:2f:8e:a7:0a:34:fd:33:16:a6:84:dc:e2:82:53:35:d4:
a5:24:60:83:79:ac:51:ec:2b:2d:d2:97:54:18:7e:2c:ae:40:
80:d2:53:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:50:00 2025 by rpki-client