Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier: SXtBql6AjXGbID3W79ceRuDOLICnlFnzvfmszeX45Nk=
Subject key identifier: 2B:BE:7E:9C:A7:D7:4C:9A:97:B2:8B:B6:44:D8:CC:05:A0:FA:28:1F
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial: 0197673BB902A9B08E2F5E87C60FC4BA729F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number: 075B
Signing time: Fri 13 Jun 2025 03:00:56 +0000
Manifest this update: Fri 13 Jun 2025 03:00:56 +0000
Manifest next update: Sat 14 Jun 2025 03:00:56 +0000
Files and hashes: 1: GfCkDNWZJC7tTqAONgQkcSI9t8c.roa (hash: ioLhHD20h58KhY7GJ61ivoHQWsANqXCHQxdSr8iWjVQ=)
2: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: bQi/2JI43WBpDRJK/Pii1ECgfM2IbO1nUc8pZkfMAmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:3b:b9:02:a9:b0:8e:2f:5e:87:c6:0f:c4:ba:72:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Validity
Not Before: Jun 13 03:00:56 2025 GMT
Not After : Jun 14 03:00:56 2025 GMT
Subject: CN=2bbe7e9ca7d74c9a97b28bb644d8cc05a0fa281f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:f1:dd:c7:73:01:d8:34:4c:d8:f4:84:74:
48:3f:a3:2a:cd:b8:5a:4b:7a:a0:f9:68:02:c3:7b:
bb:04:a0:03:c0:36:c4:fb:c0:93:bd:08:0e:72:b2:
00:a4:0e:eb:79:2f:82:53:83:47:ad:cd:0c:ed:65:
0c:8a:ce:4b:76:85:5c:f8:46:9a:ca:c2:f1:d2:82:
51:27:67:84:9f:4a:85:ce:53:2c:c5:d7:05:05:c6:
26:2d:98:86:a0:71:39:fe:e0:e8:1f:17:9f:49:45:
b3:d4:f7:67:18:10:76:bc:b2:84:03:96:b3:d3:09:
c0:35:98:5f:b5:3c:9a:fe:3f:99:28:ee:76:d1:7e:
0f:81:c3:ff:1b:f3:93:1d:9f:98:1f:7e:59:fe:5f:
87:fe:a6:46:9d:98:35:df:32:f8:d3:fc:ad:fa:32:
50:32:db:0b:77:b5:91:3c:08:2f:bd:19:02:a2:ed:
30:12:d0:d7:58:33:2f:77:da:44:5d:94:b5:bc:44:
f5:08:43:e6:b8:b1:8e:c6:43:b9:cc:d8:af:93:15:
f1:ec:52:c9:c2:84:4e:bc:45:30:85:f2:59:7d:64:
57:d8:c0:39:c8:cb:af:7a:af:e1:11:72:e8:17:b0:
32:5f:03:5b:ba:00:c2:91:e2:0d:2d:08:da:82:d9:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BE:7E:9C:A7:D7:4C:9A:97:B2:8B:B6:44:D8:CC:05:A0:FA:28:1F
X509v3 Authority Key Identifier:
keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e2:4d:6d:7b:ac:36:fc:f3:91:12:32:52:45:f1:67:90:47:
60:9b:a2:b8:3c:81:24:94:57:b3:17:dc:1c:8b:91:6d:cb:54:
c4:1b:bd:1f:06:d0:bb:0a:ed:74:aa:23:1e:61:d6:5c:98:e4:
28:51:d1:3a:54:55:1a:ec:14:1d:5e:d8:27:59:9e:a1:a7:73:
bc:d9:55:4d:c7:f8:5c:96:10:4c:ff:23:d4:a3:e0:06:50:32:
da:40:fb:e4:c8:7f:04:76:5b:b2:ea:59:af:7b:b6:f5:08:d5:
e1:1d:2a:10:17:be:28:5b:8a:02:11:13:6a:45:cb:f8:4e:2c:
33:33:cc:76:30:b2:4e:1d:86:2e:74:08:8f:62:3e:f3:7a:ec:
b5:86:52:1c:5f:cb:53:2a:8c:b0:63:19:4e:40:74:13:51:b2:
20:e4:86:39:87:23:77:61:ec:e7:e7:8a:00:38:1f:1b:b6:2f:
62:68:c1:5b:6d:85:f7:43:48:d2:e8:12:29:5a:60:c2:d6:2e:
f3:ed:e5:73:bb:cc:dc:71:b2:d9:c4:b4:ba:64:b8:7a:0c:97:
b9:ac:91:8f:0b:81:ed:d9:6b:4c:d9:df:9f:21:e1:44:3c:b9:
16:43:d5:70:8e:22:20:c8:08:bf:9c:bc:62:a0:cd:fd:e7:8f:
e4:74:a3:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdnO7kCqbCOL16Hxg/EunKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Mjg1YWUyMmQ3MWVmMjQ0NzhmMGNhZWMwZjI5YzdkZDkx
NGMzYzgwHhcNMjUwNjEzMDMwMDU2WhcNMjUwNjE0MDMwMDU2WjAzMTEwLwYDVQQD
EygyYmJlN2U5Y2E3ZDc0YzlhOTdiMjhiYjY0NGQ4Y2MwNWEwZmEyODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArULx3cdzAdg0TNj0hHRIP6Mqzbha
S3qg+WgCw3u7BKADwDbE+8CTvQgOcrIApA7reS+CU4NHrc0M7WUMis5LdoVc+Eaa
ysLx0oJRJ2eEn0qFzlMsxdcFBcYmLZiGoHE5/uDoHxefSUWz1PdnGBB2vLKEA5az
0wnANZhftTya/j+ZKO520X4PgcP/G/OTHZ+YH35Z/l+H/qZGnZg13zL40/yt+jJQ
MtsLd7WRPAgvvRkCou0wEtDXWDMvd9pEXZS1vET1CEPmuLGOxkO5zNivkxXx7FLJ
woROvEUwhfJZfWRX2MA5yMuveq/hEXLoF7AyXwNbugDCkeINLQjagtn3EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu+fpyn10yal7KLtkTYzAWg+igfMB8GA1UdIwQY
MBaAFDcoWuItce8kR48MrsDynH3ZFMPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEt
M2YyZWI1NmIyYmQzLzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEtM2YyZWI1NmIyYmQz
LzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuJNbXus
NvzzkRIyUkXxZ5BHYJuiuDyBJJRXsxfcHIuRbctUxBu9HwbQuwrtdKojHmHWXJjk
KFHROlRVGuwUHV7YJ1meoadzvNlVTcf4XJYQTP8j1KPgBlAy2kD75Mh/BHZbsupZ
r3u29QjV4R0qEBe+KFuKAhETakXL+E4sMzPMdjCyTh2GLnQIj2I+83rstYZSHF/L
UyqMsGMZTkB0E1GyIOSGOYcjd2Hs5+eKADgfG7YvYmjBW22F90NI0ugSKVpgwtYu
8+3lc7vM3HGy2cS0umS4egyXuayRjwuB7dlrTNnfnyHhRDy5FkPVcI4iIMgIv5y8
YqDN/eeP5HSj+A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 10:52:45 2025 by rpki-client