Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier: JzyKJe4pnANYCUGGnsf8Zwk0yXgH2GLV1s0xrzfiy9M=
Subject key identifier: 18:D9:BB:6A:08:53:7F:51:43:10:D9:8D:F0:61:94:57:D2:FF:1D:51
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial: 01962C058DCE3EE527ECBE19C46642BA5E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number: 06B7
Signing time: Sat 12 Apr 2025 22:01:23 +0000
Manifest this update: Sat 12 Apr 2025 22:01:23 +0000
Manifest next update: Sun 13 Apr 2025 22:01:23 +0000
Files and hashes: 1: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: GOsCoSz9dSN+kaTXKaiLr390QpEbgQyKV7WPJpQX6Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:05:8d:ce:3e:e5:27:ec:be:19:c4:66:42:ba:5e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Validity
Not Before: Apr 12 22:01:23 2025 GMT
Not After : Apr 13 22:01:23 2025 GMT
Subject: CN=18d9bb6a08537f514310d98df0619457d2ff1d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:4c:e0:39:dc:1d:20:2b:9a:3a:15:c6:89:
38:d1:50:4f:0f:46:27:67:ce:7b:a9:58:cb:06:66:
51:8b:c6:dd:a3:ff:4a:9f:7c:b4:82:b6:8c:ad:e2:
c2:1a:de:fd:07:25:16:f3:7f:21:65:c5:72:ab:12:
86:9e:93:30:71:1d:ea:3c:81:f9:2d:c4:a0:a3:b2:
f5:3d:5a:45:ef:9b:66:b8:1f:f1:db:df:99:c3:0e:
d0:ac:45:21:c7:28:c1:4d:a8:df:39:86:76:04:43:
10:9b:cd:17:f0:6a:be:2e:72:fb:1e:2f:61:4e:94:
20:b1:98:9b:4a:b3:6c:22:bc:e1:48:9a:fe:ed:21:
bb:48:2d:f4:6b:56:cb:20:93:18:2f:ef:ed:0c:d1:
fd:d9:5e:ae:17:e1:22:ad:fd:d2:82:7d:e9:5e:30:
fe:8a:42:48:44:bb:9a:de:a3:f6:20:90:72:ba:b7:
c7:93:0a:7d:62:b9:ea:fc:3f:f8:31:59:cb:2f:35:
5d:36:dc:85:5a:0c:dc:31:31:3f:fe:6f:dd:3f:be:
11:40:81:e1:68:5c:38:fa:6f:01:00:0c:28:bd:a4:
28:10:b0:ae:26:bf:55:2d:55:4b:26:24:3a:bc:2a:
1f:03:07:5d:a3:5e:36:96:a2:b4:d8:b4:43:d5:9f:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:BB:6A:08:53:7F:51:43:10:D9:8D:F0:61:94:57:D2:FF:1D:51
X509v3 Authority Key Identifier:
keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e8:be:ee:90:23:58:6a:85:e5:d9:38:d8:05:6e:5f:19:73:
87:ab:fc:21:57:e1:15:05:c0:96:48:a3:86:40:bf:3f:c6:dd:
19:d3:0b:80:c3:94:f5:65:ad:ba:b9:56:ea:9f:9d:a8:0a:4d:
8b:61:ca:ea:c4:60:0b:3e:03:2c:65:86:8b:62:6a:ae:db:bb:
28:b2:8e:79:4f:86:40:6f:c7:fd:76:31:71:d1:52:56:78:cb:
9f:dd:35:79:41:f7:96:8e:6a:4e:a2:21:55:6e:7f:33:a2:6a:
e8:6b:07:c9:08:fe:77:97:e9:ce:53:69:2b:e0:f6:b1:54:43:
65:00:e5:c6:26:7d:9e:d3:f0:75:71:f6:2f:2e:63:5f:56:3f:
37:1e:c3:b4:06:42:a3:31:e9:bf:8a:65:da:d0:ea:53:79:40:
c1:c7:d8:4a:73:12:37:53:78:00:e8:0f:39:e8:a3:ef:d6:78:
f4:87:bc:45:44:00:4a:49:e3:37:a1:0a:56:15:a1:88:9c:05:
b1:71:85:ab:a4:76:7a:2c:5a:5d:26:1a:c9:0f:ea:bc:6b:98:
14:fc:aa:2a:25:b7:75:38:a5:9d:fc:51:a4:20:26:03:48:04:
c1:d0:12:e0:b4:a6:bc:5d:ce:2f:fb:d6:5e:3a:14:36:27:92:
03:88:41:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:36:46 2025 by rpki-client