Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier: AQtEbWYeK3D4s62Q8kKOLrriyWOaSX0wRd/eGLSmsOw=
Subject key identifier: 8F:6E:D7:71:89:45:9F:E3:EE:50:5D:3B:FC:92:81:91:4A:91:65:10
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial: 0197635EEE5E7C0A7E9A8BD9CD2817708A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number: 0759
Signing time: Thu 12 Jun 2025 09:00:55 +0000
Manifest this update: Thu 12 Jun 2025 09:00:55 +0000
Manifest next update: Fri 13 Jun 2025 09:00:55 +0000
Files and hashes: 1: GfCkDNWZJC7tTqAONgQkcSI9t8c.roa (hash: ioLhHD20h58KhY7GJ61ivoHQWsANqXCHQxdSr8iWjVQ=)
2: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: bNfXS0gAbU9s/L4cuCd7YRbnDxjrtlvPyd8QptSovPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5e:ee:5e:7c:0a:7e:9a:8b:d9:cd:28:17:70:8a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Validity
Not Before: Jun 12 09:00:55 2025 GMT
Not After : Jun 13 09:00:55 2025 GMT
Subject: CN=8f6ed77189459fe3ee505d3bfc9281914a916510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:e5:56:af:c3:1d:59:48:fd:73:6c:59:c9:
41:db:1f:b2:69:f2:9d:f4:9e:ae:80:cf:f0:35:3f:
7c:a5:96:b8:56:21:f9:35:64:44:92:64:31:68:85:
b6:4c:44:57:46:78:7e:5a:fb:2d:d2:cc:0c:47:b7:
85:92:b4:d2:f3:f0:24:19:24:52:31:e8:b6:28:2c:
be:e9:61:17:1e:f5:d8:df:d3:c1:a7:b4:27:a1:1e:
ab:3e:b4:e9:34:ea:30:a1:6b:28:ae:0b:a7:02:8c:
bf:c2:94:32:95:a8:ea:9b:08:28:79:33:e0:05:e1:
fd:11:05:2f:64:e5:a8:62:65:bb:f7:1b:f4:50:cd:
97:0a:cb:1f:bf:fa:73:54:cf:24:ca:5f:94:21:a9:
7d:bf:06:80:d7:35:2e:60:a7:5d:d9:1d:6f:27:23:
97:1d:f4:9c:55:dc:01:c2:41:97:61:25:a0:88:39:
fa:a4:d0:c4:12:d3:e2:5a:77:6d:bb:89:25:ba:4d:
9a:d8:57:61:a6:55:bb:a0:ea:c8:ca:0c:91:77:20:
8b:2f:92:cc:2d:d1:51:1f:59:1b:fe:26:ec:24:9b:
f9:6e:ea:e3:23:09:8f:15:e3:a2:8c:93:d0:98:18:
18:2a:63:03:58:84:57:0d:7b:93:f3:79:79:06:48:
24:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6E:D7:71:89:45:9F:E3:EE:50:5D:3B:FC:92:81:91:4A:91:65:10
X509v3 Authority Key Identifier:
keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:40:2a:48:eb:d8:47:7a:e8:f5:7e:bd:09:9f:6a:06:8e:ed:
96:a5:9f:f6:2a:ab:5f:55:1b:a7:cd:ba:6d:49:80:ff:3a:49:
05:96:59:c1:6e:7d:f9:28:f5:3f:a7:96:9a:9e:52:c6:1b:a7:
1d:31:ca:8b:a7:4c:b8:1c:f6:31:f5:f1:46:9b:b5:47:46:23:
94:7f:26:ad:06:6c:db:b0:3b:9d:78:a2:dd:b9:c2:d9:11:f1:
d2:b1:11:c2:11:6d:52:40:6f:ba:9a:72:12:2d:e4:a5:df:0d:
1a:97:aa:7d:72:1a:8d:bb:f2:6f:3b:2b:52:10:dc:d7:7c:33:
cc:37:08:1a:6c:4d:6d:3f:9b:e2:2f:30:87:f5:1d:f9:a3:59:
03:02:96:02:ae:50:e8:f8:4f:2b:3d:95:22:35:da:7a:91:87:
07:43:84:18:74:44:9b:9e:cb:a5:1b:71:c1:c6:5b:87:98:30:
16:80:65:64:a4:70:83:30:dd:10:e0:8f:c1:e3:93:6d:87:a1:
a8:53:48:1e:8b:50:84:82:5d:83:9b:7a:69:70:51:71:2b:42:
80:ce:c3:2b:f6:95:a1:e6:37:95:d6:47:4d:be:d0:6d:cf:a2:
e1:9c:13:43:4a:bf:24:0f:b4:9c:b6:00:5b:6b:ca:ed:e5:ce:
fd:71:87:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:25:55 2025 by rpki-client