Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier: oEQ2JhOlcsCGUZ3tHTNk3vQWBNJO5LrElsTfOBpZvjA=
Subject key identifier: 66:5C:3D:28:39:7A:F8:46:09:D5:6F:A1:79:AC:07:21:78:8A:FC:87
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial: 019755DA340B92F9D5197D036BAC2F020BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number: 0752
Signing time: Mon 09 Jun 2025 18:00:52 +0000
Manifest this update: Mon 09 Jun 2025 18:00:52 +0000
Manifest next update: Tue 10 Jun 2025 18:00:52 +0000
Files and hashes: 1: GfCkDNWZJC7tTqAONgQkcSI9t8c.roa (hash: ioLhHD20h58KhY7GJ61ivoHQWsANqXCHQxdSr8iWjVQ=)
2: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: HsPl2yAXWkLkwXwghZRW8pJC/OrGc3nB7LKs1QSZ2to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:da:34:0b:92:f9:d5:19:7d:03:6b:ac:2f:02:0b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Validity
Not Before: Jun 9 18:00:52 2025 GMT
Not After : Jun 10 18:00:52 2025 GMT
Subject: CN=665c3d28397af84609d56fa179ac0721788afc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:03:cf:b5:ba:55:0f:d9:d6:c5:90:ba:5b:
5a:4b:aa:9d:33:80:3b:42:96:dd:47:f5:40:14:88:
c2:50:0e:f4:96:d7:85:5c:c0:eb:45:1d:0a:72:0e:
2f:a8:89:b8:55:62:f0:d1:43:69:47:5a:7d:5c:69:
94:ec:37:47:40:03:0a:42:12:3b:ab:2f:0b:9a:c0:
15:32:18:8a:df:74:10:7d:12:6d:38:80:09:e9:77:
f0:69:49:a9:4c:95:97:e4:a5:fe:85:e3:97:6c:ae:
25:f0:e5:fb:be:53:e8:c5:61:79:f7:00:e1:e0:74:
19:08:c6:f2:2a:ee:37:62:bc:c1:0c:ba:ad:27:4b:
01:9a:0d:e2:34:1f:fe:67:04:1f:3e:2b:32:87:79:
2b:ae:f4:de:1d:57:13:65:34:ad:ad:92:46:1e:b7:
88:7e:b7:1f:3b:d7:95:13:0d:53:07:05:f3:b5:bf:
d7:79:ee:ca:fc:8b:e4:06:2e:7a:3e:98:e4:08:be:
cd:76:28:51:dc:0e:0a:cc:f6:81:c5:cd:ea:6c:47:
a6:40:5e:c3:9e:5b:1b:8b:d4:b0:85:2a:e0:f6:7a:
a2:08:bc:cb:73:fb:e3:d3:b9:c4:0f:cc:f2:99:f3:
22:ff:8f:c0:67:6a:52:d0:b9:a3:34:af:9f:8f:c7:
51:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5C:3D:28:39:7A:F8:46:09:D5:6F:A1:79:AC:07:21:78:8A:FC:87
X509v3 Authority Key Identifier:
keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8c:7a:73:26:04:02:6c:92:d1:76:a9:2b:0c:89:ec:5a:26:
23:16:05:59:f4:5a:1b:ff:ac:72:dc:9f:6e:dc:07:de:4d:f4:
36:6c:e2:0d:78:13:32:c4:54:37:10:03:a1:11:1d:ac:e8:62:
6f:8d:15:85:4c:ba:84:98:b6:9b:3b:98:fd:ed:7a:35:2d:94:
fe:54:23:b7:ba:81:d8:e5:2f:f6:83:78:07:b6:01:fa:df:a6:
27:71:fa:c4:07:4c:27:25:ce:43:bb:72:f7:3a:6b:c3:09:de:
97:89:f4:5c:2a:de:99:5a:90:40:6d:97:28:81:a4:28:9b:0f:
86:00:9e:8e:f1:a3:91:9e:14:d8:20:eb:be:e8:da:4e:45:bf:
4a:94:4a:b8:3d:d2:6c:fd:e5:aa:24:11:80:e9:8f:11:40:cb:
20:35:8f:48:26:4b:8b:00:1e:24:89:ea:46:64:5a:5d:9f:56:
cb:ea:10:b4:17:73:b5:7c:fb:bd:92:69:bd:6f:b9:57:f8:47:
ed:29:9d:1e:d9:2e:b2:84:ea:1e:82:9b:02:db:d2:9d:69:a6:
2f:20:b0:2b:f9:b2:db:bc:57:ab:ae:c4:e6:e8:85:e7:c5:a5:
9f:7d:50:6a:fd:5f:fe:0b:3a:c2:1c:87:ca:47:7c:41:d0:d6:
70:90:83:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdV2jQLkvnVGX0Da6wvAgvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Mjg1YWUyMmQ3MWVmMjQ0NzhmMGNhZWMwZjI5YzdkZDkx
NGMzYzgwHhcNMjUwNjA5MTgwMDUyWhcNMjUwNjEwMTgwMDUyWjAzMTEwLwYDVQQD
Eyg2NjVjM2QyODM5N2FmODQ2MDlkNTZmYTE3OWFjMDcyMTc4OGFmYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun0Dz7W6VQ/Z1sWQultaS6qdM4A7
QpbdR/VAFIjCUA70lteFXMDrRR0Kcg4vqIm4VWLw0UNpR1p9XGmU7DdHQAMKQhI7
qy8LmsAVMhiK33QQfRJtOIAJ6XfwaUmpTJWX5KX+heOXbK4l8OX7vlPoxWF59wDh
4HQZCMbyKu43YrzBDLqtJ0sBmg3iNB/+ZwQfPisyh3krrvTeHVcTZTStrZJGHreI
frcfO9eVEw1TBwXztb/Xee7K/IvkBi56PpjkCL7NdihR3A4KzPaBxc3qbEemQF7D
nlsbi9SwhSrg9nqiCLzLc/vj07nED8zymfMi/4/AZ2pS0LmjNK+fj8dR4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZcPSg5evhGCdVvoXmsByF4ivyHMB8GA1UdIwQY
MBaAFDcoWuItce8kR48MrsDynH3ZFMPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEt
M2YyZWI1NmIyYmQzLzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEtM2YyZWI1NmIyYmQz
LzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4x6cyYE
AmyS0XapKwyJ7FomIxYFWfRaG/+sctyfbtwH3k30NmziDXgTMsRUNxADoREdrOhi
b40VhUy6hJi2mzuY/e16NS2U/lQjt7qB2OUv9oN4B7YB+t+mJ3H6xAdMJyXOQ7ty
9zprwwnel4n0XCremVqQQG2XKIGkKJsPhgCejvGjkZ4U2CDrvujaTkW/SpRKuD3S
bP3lqiQRgOmPEUDLIDWPSCZLiwAeJInqRmRaXZ9Wy+oQtBdztXz7vZJpvW+5V/hH
7SmdHtkusoTqHoKbAtvSnWmmLyCwK/my27xXq67E5uiF58Wln31Qav1f/gs6whyH
ykd8QdDWcJCDyg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 01:21:17 2025 by rpki-client