Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier: 5sb8AZt0e7oPI/iScibfH89Utuo7u0+F9HsOhmhIhOQ=
Subject key identifier: 75:90:9E:66:E2:7B:F2:94:5D:48:45:A4:77:7D:17:D0:A8:00:DC:C3
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial: 0197654D184C17AC51E7750DCB4A2854C649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number: 075A
Signing time: Thu 12 Jun 2025 18:00:40 +0000
Manifest this update: Thu 12 Jun 2025 18:00:40 +0000
Manifest next update: Fri 13 Jun 2025 18:00:40 +0000
Files and hashes: 1: GfCkDNWZJC7tTqAONgQkcSI9t8c.roa (hash: ioLhHD20h58KhY7GJ61ivoHQWsANqXCHQxdSr8iWjVQ=)
2: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: J4nFD47ncsl0NIWcjls4ybBxTwnfDP8VwZ9da9zB628=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:4d:18:4c:17:ac:51:e7:75:0d:cb:4a:28:54:c6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Validity
Not Before: Jun 12 18:00:40 2025 GMT
Not After : Jun 13 18:00:40 2025 GMT
Subject: CN=75909e66e27bf2945d4845a4777d17d0a800dcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:e3:9a:af:83:53:db:e1:77:c8:92:13:ba:
0c:7b:98:a3:bd:c4:63:05:34:ee:94:70:5f:4a:6d:
23:d7:58:6f:fc:33:40:8c:8f:11:4e:a7:60:23:1a:
12:70:6b:6c:0c:c0:7a:46:a9:9e:50:d7:61:40:aa:
47:03:8b:b0:b8:cb:c7:a0:8c:8d:ea:62:00:60:23:
4d:5a:35:29:68:bb:da:ec:54:67:50:7c:b4:a4:91:
8b:f4:ff:4f:40:9f:1d:69:2d:d3:65:b8:33:b1:14:
69:85:df:08:8a:c3:bd:10:2e:58:38:c8:a7:1a:39:
e6:5a:02:3c:53:24:a4:3d:05:4a:a5:e9:b8:4b:a4:
e8:ca:65:09:0b:4f:71:8f:06:c6:66:b1:0b:dc:bf:
9e:5c:18:60:ac:e2:78:5c:58:4b:af:a4:cb:4d:dc:
b4:1a:d6:f0:b8:05:14:00:f5:ef:65:bb:d2:e9:59:
5b:97:9a:e4:4a:82:ab:51:31:74:ce:3b:8a:fd:98:
59:38:b2:a2:88:da:78:51:d2:58:85:ca:98:ee:0c:
b4:19:9b:f1:19:4f:df:5b:9c:49:b7:ee:c6:c2:02:
c1:b3:23:39:20:b7:3d:97:7e:9d:e6:e1:b1:c0:35:
c7:2d:cb:e0:d1:13:40:e0:05:40:57:4b:50:89:f1:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:90:9E:66:E2:7B:F2:94:5D:48:45:A4:77:7D:17:D0:A8:00:DC:C3
X509v3 Authority Key Identifier:
keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:97:2c:bd:15:cc:99:4d:3a:a7:70:f4:7f:97:8a:5c:7d:3e:
8d:84:df:5a:42:43:d5:96:f9:b2:1d:71:50:8e:52:c7:98:ea:
09:20:2b:88:6b:b9:73:b2:d5:1e:63:df:49:38:b8:7e:73:f0:
78:48:3b:bf:05:c4:b0:4a:5d:a7:aa:28:bd:57:e4:d4:61:85:
9f:d5:64:89:a4:b9:cf:d0:c7:2b:a4:a1:fd:7f:ed:09:b4:3e:
70:8f:c3:24:99:ee:e4:27:77:5d:c7:c1:3e:06:0e:38:8b:27:
c9:ff:ab:6f:8f:97:20:64:f7:a0:e7:05:6d:c7:35:74:41:8e:
61:fa:03:ba:0f:f4:b3:5e:46:36:df:19:5e:c3:cc:14:d4:d8:
20:ab:55:5c:f2:3e:a2:d5:19:3b:46:d8:13:2c:d7:a2:18:e2:
77:fb:6e:13:ad:7e:55:4b:ae:ac:5e:66:6d:9b:97:51:37:3c:
01:97:73:5f:d6:4a:a7:cb:95:df:d1:d2:66:7a:1d:2c:f4:b3:
a8:13:aa:d5:4b:72:98:20:0c:f7:4c:e0:39:b6:b8:4a:3e:b2:
ad:4a:45:4b:16:3b:23:d3:30:c6:2f:87:fd:62:6d:36:2e:90:
ce:ca:82:59:56:2a:f2:36:b5:63:e3:39:f0:6e:aa:c8:47:89:
70:6d:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:55:39 2025 by rpki-client