Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
File: NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json)
Hash identifier: xwU9CkQ0OC30bXfwNmiJNi6dfgeNyDAbyMCWSRLkRMg=
Subject key identifier: 07:11:1E:BF:F0:D6:41:E5:12:79:35:6B:B1:39:DD:18:25:4E:0B:EC
Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
Certificate issuer: /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Certificate serial: 01974A7BA255B83AABB12B0C7290144E77EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:01:45 +0000
Manifest this update: Sat 07 Jun 2025 13:01:45 +0000
Manifest next update: Sun 08 Jun 2025 13:01:45 +0000
Files and hashes: 1: Ex_2ickmNwSl468A43nBNWlR1U4.roa (hash: 2F6N+mLC+ZFSEAJYbcx9IRB+VD26lz+G1r697PEXjx4=)
2: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: Vfi994CkjEIppw5ksyr+tfHk60H3ckJyV/EFbu9FLUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:a2:55:b8:3a:ab:b1:2b:0c:72:90:14:4e:77:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Validity
Not Before: Jun 7 13:01:45 2025 GMT
Not After : Jun 8 13:01:45 2025 GMT
Subject: CN=07111ebff0d641e51279356bb139dd18254e0bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:cd:2b:d8:c8:d4:17:03:b1:15:c7:e3:21:
b3:5c:17:80:86:c2:ec:0c:6d:78:64:ea:15:ca:b1:
03:d2:cc:c5:92:d8:6d:03:ab:cf:df:83:12:7b:f4:
2d:87:23:ed:2b:a5:8a:fb:c3:ab:5c:38:98:72:8b:
f3:49:62:54:46:0d:e3:3d:d5:8a:be:9c:db:c4:00:
da:81:e9:fa:ec:5c:be:a6:69:a1:b1:b0:77:c5:10:
36:f3:78:06:db:07:0b:ff:2c:cc:3a:04:70:32:7b:
75:6b:69:c5:9a:ab:53:9b:43:be:bd:76:4c:00:d3:
d2:df:90:1d:b0:26:be:21:71:e6:cf:eb:d0:72:4d:
fc:01:27:19:eb:fe:d6:3d:f6:a3:8d:7c:39:1a:97:
2e:d0:0a:99:f0:6c:e0:2f:3e:8c:a9:88:6b:17:8a:
83:6f:5e:1c:da:3a:3c:d2:79:fa:a2:48:83:4b:8e:
0c:29:a4:e3:c0:1b:ee:c5:ce:83:0d:aa:da:89:ca:
36:1f:4f:41:87:ea:78:35:c5:10:17:a7:1c:4b:80:
ea:89:c8:6b:57:15:c4:de:f3:08:7b:d2:96:af:0a:
d4:46:f6:9d:71:6e:b3:1f:61:14:d8:40:93:aa:52:
29:48:27:13:1a:46:50:c7:52:1e:b8:68:1a:28:db:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:11:1E:BF:F0:D6:41:E5:12:79:35:6B:B1:39:DD:18:25:4E:0B:EC
X509v3 Authority Key Identifier:
keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2a:cc:17:bd:38:5b:3c:e5:06:d8:0e:e1:20:3e:96:12:8a:
30:c2:e1:59:0a:da:b6:b6:1d:ef:bd:e4:2e:bd:80:34:eb:d1:
fc:a4:1d:98:13:2e:a9:fc:0e:b6:5c:fd:75:23:e7:7d:ec:dd:
d2:e8:0f:b4:73:b0:a4:26:e9:7f:f3:d8:cf:c6:dd:c1:a3:69:
fb:a3:bb:15:46:0e:12:45:8b:c0:0c:aa:37:07:6d:ab:b0:21:
ea:08:99:df:73:27:92:64:63:a6:35:8a:f0:40:be:41:79:96:
4a:66:10:57:8b:fb:90:d4:07:70:38:cf:b9:8d:04:57:14:3d:
24:03:06:26:96:9f:bf:72:bb:1b:8a:86:76:c6:83:a7:3b:c5:
ad:2f:14:52:22:6b:65:0d:a4:c6:3c:f3:28:d0:65:6e:e2:24:
7c:e5:68:29:b1:00:60:0c:a8:8f:6f:2b:06:b8:e4:12:fe:85:
d7:b1:12:41:e9:97:24:ff:70:90:4a:01:27:33:1c:1f:b0:7d:
6d:50:51:13:41:15:92:b6:41:f4:d5:4e:88:f3:d1:25:6b:da:
ad:7d:74:57:bc:79:2d:c0:87:42:8d:58:4b:9c:99:5e:18:b3:
30:b2:75:99:d6:48:be:a1:1f:8a:84:6c:d1:86:a5:8c:0c:80:
76:50:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:00:05 2025 by rpki-client