Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: 5QghouPU/LCxW7BvuBVWBufUFQfbr13DfVV2cocKWpI=
Subject key identifier: BC:9F:3E:68:EA:E0:BE:8D:A0:FF:42:9F:10:9C:EB:F3:0E:59:EB:BA
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 019659823E11AC3C2E7B105E85C818F8BAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 0806
Signing time: Mon 21 Apr 2025 18:00:29 +0000
Manifest this update: Mon 21 Apr 2025 18:00:29 +0000
Manifest next update: Tue 22 Apr 2025 18:00:29 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: SUGyNtvd8ATDl6kNp1KHOx41vuMikztt5NFoYtpheuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:3e:11:ac:3c:2e:7b:10:5e:85:c8:18:f8:ba:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: Apr 21 18:00:29 2025 GMT
Not After : Apr 22 18:00:29 2025 GMT
Subject: CN=bc9f3e68eae0be8da0ff429f109cebf30e59ebba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:e6:c7:34:88:70:8d:a0:74:f3:6d:84:80:
0a:15:ff:19:99:02:c6:97:d0:b4:07:ef:68:71:7e:
76:49:55:9c:a6:b3:eb:8a:2d:82:f7:18:21:82:e9:
e1:40:76:02:34:1b:7c:83:0b:af:e6:44:b7:0e:aa:
28:af:02:4b:a7:8b:19:89:d6:4f:ab:f9:e9:13:9c:
da:13:ad:6b:25:77:9b:37:56:b0:fd:47:bf:18:a9:
1f:95:23:2b:cf:39:9d:b9:05:70:50:d2:d7:55:c2:
e9:f6:4f:fe:e4:86:98:16:8d:1c:d8:06:8b:d3:de:
e1:e1:b5:f0:55:fb:14:cf:ed:5a:51:3c:70:48:30:
9e:d9:6b:cf:da:85:c7:ef:d2:35:62:47:53:8f:43:
59:90:78:38:e6:c7:8e:20:75:71:27:e9:e1:6a:da:
5f:fd:50:da:17:9c:82:a9:05:ab:30:7d:49:7d:af:
20:56:33:13:5e:0b:27:a6:17:c8:02:d5:74:59:a1:
ca:7f:e7:6c:d9:0b:d1:af:18:7d:58:a6:8c:97:0e:
42:50:74:8d:2a:ef:29:7d:05:03:4c:3d:4d:24:41:
59:b3:b0:cb:e3:77:15:62:07:63:45:16:42:08:98:
ce:c7:dd:67:3b:fa:eb:3c:3d:42:92:3f:8c:ac:c7:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9F:3E:68:EA:E0:BE:8D:A0:FF:42:9F:10:9C:EB:F3:0E:59:EB:BA
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d3:b8:ac:47:50:bd:4d:e7:c4:88:29:2e:be:38:8b:b5:96:
11:62:2a:c5:b5:88:b3:58:67:51:a2:13:f1:61:87:89:fd:82:
3a:87:a1:d7:19:47:79:ee:d8:b4:de:3f:6c:98:f8:64:5d:f2:
0a:62:1d:0f:69:27:12:5a:63:27:4e:74:8d:90:20:45:89:af:
85:67:98:73:69:f7:04:8c:e2:6a:eb:2e:fa:4c:98:d2:d5:d9:
bd:ab:d3:f4:98:0e:92:e1:88:09:72:a7:cb:fa:e8:69:70:93:
fa:62:eb:9c:92:39:95:b1:b1:c6:0d:89:42:28:f7:bb:e3:10:
6f:57:c5:6f:bc:b4:e9:e2:9f:85:32:49:03:6f:7f:ce:50:56:
4a:d1:e0:8b:95:91:09:24:46:da:7d:4e:79:c5:53:e9:85:6c:
ab:94:4c:8d:8f:1d:0e:9a:a1:55:da:97:09:29:fb:ba:b7:71:
8e:c2:6b:7b:8a:ee:dd:ac:84:20:dc:df:8d:8f:92:66:0b:65:
cf:0f:1c:ea:eb:9c:00:b3:40:bb:be:0f:50:f8:9a:15:b1:a7:
cc:e6:71:7d:b1:8a:58:7d:82:b6:34:66:9a:66:26:78:3e:49:
30:89:46:81:19:3d:3c:b9:e5:ca:9c:ce:9c:55:c1:09:23:a6:
ae:f9:28:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:40:58 2025 by rpki-client