Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: ufuTe48n3VG/FqJVsVcR9Ql28usgfBd68cMCskoVufQ=
Subject key identifier: 77:43:FC:2B:26:9E:71:56:84:7F:60:37:B8:D6:B1:35:CB:E7:07:F1
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 01974C31F3633ACB0BC821978558D87EF146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0897
Signing time: Sat 07 Jun 2025 21:00:31 +0000
Manifest this update: Sat 07 Jun 2025 21:00:31 +0000
Manifest next update: Sun 08 Jun 2025 21:00:31 +0000
Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=)
2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=)
3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: Gtg/LoYoj5J+mpdqoc7AUpOP25kLshIaaUrkULYyQOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:f3:63:3a:cb:0b:c8:21:97:85:58:d8:7e:f1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Jun 7 21:00:31 2025 GMT
Not After : Jun 8 21:00:31 2025 GMT
Subject: CN=7743fc2b269e7156847f6037b8d6b135cbe707f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:c7:21:a4:90:97:1a:ce:4d:95:d1:95:03:
83:c0:0b:32:4f:66:4f:ec:04:07:0d:1f:7e:14:c2:
08:af:dd:83:dc:8e:da:2b:b6:ab:5e:c7:41:04:33:
4d:de:4b:3e:02:0e:9a:b1:d7:2b:b8:fd:7f:2f:ba:
cd:3f:f1:07:e9:1d:e1:3e:60:4a:50:8e:db:72:6b:
5a:08:52:e3:45:24:78:8c:e1:e3:c2:45:6d:df:24:
3d:12:aa:d6:bf:3b:39:aa:1c:93:70:2c:9c:0f:2b:
5c:d3:f6:01:2e:86:ed:d7:eb:7b:de:62:31:13:82:
72:10:ca:c1:22:2d:f4:34:e2:aa:16:ed:37:84:d5:
9f:2d:9e:a8:a7:dc:3e:56:28:04:49:3c:8b:70:ba:
fa:f1:a3:11:98:a5:db:f0:a3:8b:0f:f8:db:be:5d:
33:45:a8:90:ae:ff:85:aa:a5:15:84:26:e1:55:88:
fa:db:82:59:f6:3c:80:93:9c:e1:57:dd:31:14:f9:
5a:30:b1:9a:c5:cc:1b:21:08:0a:2e:29:ed:37:83:
9f:9c:de:d8:0a:78:fe:51:86:8b:61:40:b2:cf:5a:
96:ab:8f:bf:9a:27:48:ed:44:1d:d3:e7:17:27:fd:
75:46:36:ee:da:81:90:f7:64:02:5a:5e:5a:e0:b6:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:43:FC:2B:26:9E:71:56:84:7F:60:37:B8:D6:B1:35:CB:E7:07:F1
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6e:26:ae:61:b5:56:b7:9b:1d:55:02:7e:4b:84:f0:97:36:
91:09:f8:f4:bc:13:f9:11:55:38:0a:ec:d0:33:ff:b2:2b:39:
29:67:c7:7e:eb:29:12:97:ff:ae:64:fb:5d:dd:5c:78:e1:8c:
6b:c8:a8:c0:fb:18:0d:6e:48:46:a9:fc:51:42:3d:ef:35:e7:
54:ea:84:af:a7:58:d8:38:5f:63:96:0a:54:db:2f:ea:0e:a6:
72:27:3f:97:92:36:6c:6b:47:80:f4:4f:7b:53:14:37:0a:fd:
b6:a9:c6:f9:c7:26:4b:30:b2:3a:dd:28:45:90:98:03:ad:23:
f9:ed:59:20:84:93:44:15:d5:66:7c:69:e8:d7:fc:87:4c:81:
89:a1:0d:3d:30:78:79:35:55:44:d8:9c:77:ad:81:8c:b7:f6:
eb:7c:3f:0f:e8:c9:c1:1f:c1:22:06:4f:c3:74:1e:bd:bb:c0:
54:77:a9:9b:1c:70:9e:4e:31:3b:4b:48:e0:b0:da:d7:d9:fc:
2f:dd:14:33:44:07:44:2f:15:4c:52:02:30:a5:62:f6:1c:55:
ad:82:e5:16:58:44:97:55:a6:25:10:0e:6e:bc:0d:17:9e:bc:
63:c5:25:43:86:bf:71:5e:1b:a7:da:72:8e:b8:60:d4:d3:c1:
c2:f8:16:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:10:40 2025 by rpki-client