Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier: vetiIU4MFG/VkPuZM3hoj1YTYcev2bdPvmQKVem0V+c=
Subject key identifier: 75:7C:55:1D:DC:5C:D0:29:C6:BD:82:DE:16:0C:5A:F9:1A:D4:A1:8D
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial: 01976170A9A53A8EE2307DB39703A8EA7F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number: 0758
Signing time: Thu 12 Jun 2025 00:01:02 +0000
Manifest this update: Thu 12 Jun 2025 00:01:02 +0000
Manifest next update: Fri 13 Jun 2025 00:01:02 +0000
Files and hashes: 1: GfCkDNWZJC7tTqAONgQkcSI9t8c.roa (hash: ioLhHD20h58KhY7GJ61ivoHQWsANqXCHQxdSr8iWjVQ=)
2: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: 8bzLl6sHiLdLi8tvYS+TbyUzC/r1JIfT5ydXBK7KUwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:70:a9:a5:3a:8e:e2:30:7d:b3:97:03:a8:ea:7f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Validity
Not Before: Jun 12 00:01:02 2025 GMT
Not After : Jun 13 00:01:02 2025 GMT
Subject: CN=757c551ddc5cd029c6bd82de160c5af91ad4a18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:84:6f:1c:4b:92:8f:71:49:19:e1:58:aa:
fe:da:a0:c3:10:0c:42:33:3d:23:c2:bf:2b:a9:01:
7d:77:8f:23:01:38:b9:54:31:c0:2c:08:a8:a1:ff:
66:7a:95:2e:03:d9:70:d5:a7:6c:fd:e1:33:3d:f0:
da:61:ea:66:5e:64:dc:ab:93:63:e2:f0:19:77:56:
17:b0:99:b0:17:c0:3f:7e:b0:13:d1:87:ee:4f:25:
cc:5a:f2:db:81:f2:59:28:da:c4:c1:68:b0:64:53:
f9:90:06:e3:8a:55:45:73:1c:28:98:bd:9a:ea:75:
61:02:66:b8:f1:fb:4c:c2:6c:a9:54:32:04:7f:f8:
c0:ee:46:21:53:7e:ac:2a:00:cf:22:cb:20:03:f0:
c7:9b:56:ee:f4:42:15:90:d0:2b:31:a2:ac:35:5c:
d5:c2:dc:26:39:b0:dd:49:33:06:b9:1f:5f:b2:49:
82:fe:35:a0:7e:f2:ec:e2:c0:85:e0:c3:04:8d:f2:
26:40:03:4a:96:7a:b7:c4:f7:59:0c:05:8e:ac:59:
b5:0c:80:e7:56:37:a4:06:03:ec:e0:1d:8a:8d:0c:
a8:71:b7:65:79:ed:8b:4e:ce:0e:e2:f7:33:d7:55:
10:f7:91:3a:84:41:d1:de:1d:1d:42:61:bd:c9:d9:
8c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7C:55:1D:DC:5C:D0:29:C6:BD:82:DE:16:0C:5A:F9:1A:D4:A1:8D
X509v3 Authority Key Identifier:
keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ff:8a:e1:51:c3:7c:c5:e3:5b:be:3c:4c:66:b3:c6:75:e3:
02:63:75:2e:23:e7:23:cc:56:8b:17:a3:92:16:3e:a8:d7:42:
0a:fc:95:11:a3:f9:f1:25:4c:b9:9d:d3:74:f1:26:87:4c:39:
14:b6:42:e5:16:1b:cf:53:90:0e:21:58:9b:01:17:44:5a:bd:
b2:db:09:d0:fc:d6:9a:23:8c:3a:76:e9:28:4e:89:8d:ac:bf:
84:c9:f4:27:62:6d:da:20:9f:c2:d3:ce:6b:bd:f9:dd:68:66:
69:ae:72:3b:5f:31:a2:83:20:bb:5a:a8:b8:d2:04:e2:30:ba:
24:f8:cc:9d:c4:96:9d:bb:b5:8d:d2:40:df:21:e7:30:d3:47:
b3:06:a3:1c:35:93:52:08:94:40:bd:f6:1b:df:37:55:ce:8b:
1a:e6:4d:6f:87:c4:b8:07:fc:57:4d:6c:e3:a5:80:6c:bd:5b:
02:f0:8c:21:2c:90:a2:ed:dc:af:c3:44:62:40:b2:e9:ec:8f:
f9:b9:f0:ca:3a:76:79:d2:23:07:0b:a9:c5:7b:8e:dd:c5:d8:
30:e6:09:36:8c:db:19:c6:21:79:de:bc:0e:ef:a2:ec:e8:44:
bd:9f:63:85:d9:a8:75:fa:17:f2:d5:5e:9f:be:3c:2d:f7:54:
ae:bf:a6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:14:49 2025 by rpki-client