Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json)
Hash identifier: wloFHau/YsZbkyI81kjD6jd6x28vg5dgkBLXg03Q9uk=
Subject key identifier: 86:74:7E:63:C7:99:73:0A:A8:B8:B4:4D:ED:FD:DA:D4:9D:38:B2:AE
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 01975DCB700AC4AF0F076C8298697D4E60A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 07:01:42 +0000
Manifest this update: Wed 11 Jun 2025 07:01:42 +0000
Manifest next update: Thu 12 Jun 2025 07:01:42 +0000
Files and hashes: 1: IAQeRjmmu9Z-veumwyPKfDrKvbI.roa (hash: Ww+1iOsdAQGbUwn6gW9paX3J1FGXxxEHtorVkrDGTZc=)
2: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: BFCkGIPTx1AEfGL9jmRSews+tuJHci2kNd3pAjVW1NA=)
3: zE2nCBuCP3GWKcrh09m8L6FV9yA.roa (hash: iLVOHuiEHM03YeDql7RR17g8jhss2HwinXwx77EwMP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:70:0a:c4:af:0f:07:6c:82:98:69:7d:4e:60:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Jun 11 07:01:42 2025 GMT
Not After : Jun 12 07:01:42 2025 GMT
Subject: CN=86747e63c799730aa8b8b44dedfddad49d38b2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:a2:a2:dc:89:5c:d8:bd:b1:56:c5:15:66:
3c:0b:0b:98:1e:b3:61:c7:fc:33:c1:8f:b3:3c:c2:
ed:a6:16:77:78:7a:f3:bb:c4:b5:44:24:cd:37:7f:
f7:c7:20:f0:94:06:d9:9c:cd:9f:01:42:72:04:d1:
d5:e0:17:18:06:0a:f4:c6:bd:56:64:8d:00:97:ce:
6a:8b:20:0f:d8:f3:b3:01:30:45:a7:27:cc:69:15:
9c:9c:f1:3c:d8:63:63:77:c6:a1:65:20:33:04:f9:
06:ec:40:b7:57:b6:47:67:d8:df:8a:dc:c8:8e:03:
21:97:49:d6:96:ba:3a:21:80:b9:85:8f:14:08:ff:
6d:19:2a:4f:36:6d:8d:b7:ce:3a:08:ab:cd:b1:02:
19:a7:0b:6d:aa:e2:c9:50:01:44:0c:6b:2c:92:b3:
54:70:13:51:6b:f7:9b:54:6e:9b:77:79:36:16:69:
d8:09:2f:fe:53:b6:2b:6e:d0:22:d2:1b:86:b5:6b:
93:64:41:20:96:8c:ea:0d:b2:fc:a8:20:11:26:5c:
4e:a7:59:72:74:a7:0d:6b:f2:fc:9c:8a:2a:8f:b1:
3d:89:52:50:00:d7:27:63:ae:c7:55:af:af:cf:f0:
6a:ae:07:18:52:0e:03:25:29:8d:bb:e7:d7:d6:81:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:74:7E:63:C7:99:73:0A:A8:B8:B4:4D:ED:FD:DA:D4:9D:38:B2:AE
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1b:44:d1:7a:03:55:7a:c3:9b:5f:a0:b4:49:85:2c:2c:fa:
d5:32:c9:97:6d:05:be:28:32:7c:29:93:95:ac:02:79:05:e5:
78:39:05:2a:c1:67:1e:00:66:5b:ba:65:f3:fa:d2:46:89:da:
59:39:42:2f:54:37:e0:22:54:0d:cc:73:86:2b:b9:9a:6c:da:
33:b8:38:6e:b1:23:50:a4:b3:44:e4:45:27:5e:d5:f3:ad:53:
b4:d5:12:19:e6:98:fc:f0:ab:5d:92:6e:9c:81:69:a9:aa:4b:
9e:8d:94:a4:a2:a9:68:75:0f:99:14:a3:a8:11:20:03:1c:eb:
c5:94:ce:cb:d5:85:b1:0c:1f:58:bc:0f:ea:b5:f8:dc:73:6f:
35:5c:49:9b:a1:34:00:dd:be:9c:8b:63:73:7f:0d:98:ad:01:
55:4c:36:f2:8f:22:59:dc:78:7a:46:19:25:d3:4a:0b:41:9d:
9f:14:2e:a6:71:fa:38:cd:b2:fc:91:4f:08:0a:47:1f:70:4a:
0e:45:2e:42:9a:9d:7d:5d:f5:2f:92:46:2d:4f:8a:ea:b8:07:
f0:45:98:2a:b7:c5:a2:e4:5e:66:3f:8d:d3:60:4a:d5:fd:0f:
dc:2e:82:ac:74:02:1e:b2:8b:39:e8:df:62:35:f3:b7:b6:59:
b5:b6:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:48:15 2025 by rpki-client