Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
File: NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft (raw, json)
Hash identifier: RSvjIRa7ZRpBM90pGN+voUTwH1gsIyhxwgQ7F7BgM3c=
Subject key identifier: BA:8A:67:26:B4:0E:46:63:63:3F:8E:0A:73:FE:2C:A4:FE:C3:28:21
Authority key identifier: 37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65
Certificate issuer: /CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
Certificate serial: 01974C6993E9F8DBA8BCC25ACA4C408BDC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
Manifest number: 129E
Signing time: Sat 07 Jun 2025 22:01:16 +0000
Manifest this update: Sat 07 Jun 2025 22:01:16 +0000
Manifest next update: Sun 08 Jun 2025 22:01:16 +0000
Files and hashes: 1: NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl (hash: rZXh2LFt2OHKeLU2M+UjeLvwzWJ6Y+pN0//RR8uC2rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:93:e9:f8:db:a8:bc:c2:5a:ca:4c:40:8b:dc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
Validity
Not Before: Jun 7 22:01:16 2025 GMT
Not After : Jun 8 22:01:16 2025 GMT
Subject: CN=ba8a6726b40e4663633f8e0a73fe2ca4fec32821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:21:59:90:f7:69:ba:63:32:27:4c:cf:17:
e7:e9:28:a6:8d:90:44:bd:25:d6:f8:98:65:0e:7c:
7d:48:43:be:0e:99:20:7c:91:38:68:1e:b1:55:74:
0d:14:9e:0d:06:e8:09:f8:15:7f:2e:ad:a4:12:af:
6f:e6:16:4b:e1:9c:06:bd:61:66:dd:3a:0d:f7:3a:
77:8a:d5:5d:c8:61:5f:47:e7:18:2d:45:10:c4:67:
21:db:f2:1d:57:05:ef:53:e6:b1:20:f9:8a:bb:3e:
a7:a9:1d:c2:2e:37:ee:2b:64:46:cc:4d:80:95:82:
0d:74:03:4f:86:f0:0a:5d:d1:79:56:bc:60:92:e7:
c8:a1:07:41:f3:0e:fe:e5:68:ae:b6:d0:e9:e0:12:
fc:a1:02:8d:ba:fb:8d:15:d6:40:a2:45:a8:0c:a5:
e4:e9:d5:f5:2a:bc:53:eb:49:06:58:ce:e3:b0:be:
54:fb:6c:c5:48:e8:d2:bd:b8:31:f7:99:80:14:77:
72:19:76:5d:73:fc:66:f6:d6:0e:ba:56:1b:86:1d:
06:d9:a7:b1:ad:47:51:29:f6:5e:b5:6a:ab:fe:79:
9f:90:97:2c:3f:62:3a:24:e1:6d:5c:73:94:8e:55:
3b:a3:6e:0f:32:aa:f5:8d:52:99:2b:c4:9a:a3:82:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8A:67:26:B4:0E:46:63:63:3F:8E:0A:73:FE:2C:A4:FE:C3:28:21
X509v3 Authority Key Identifier:
keyid:37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:af:c9:04:a1:23:04:7c:41:42:da:81:5b:ca:a5:91:cc:8f:
58:7a:2b:ed:55:c1:39:83:c5:79:45:5f:76:86:27:14:35:f3:
c9:bc:01:70:68:b2:21:f7:97:6d:c3:32:72:96:e1:3d:f2:8e:
67:f4:b5:bd:b2:29:ce:a5:e1:f4:1b:d4:cf:44:82:72:04:5a:
24:90:84:41:e5:62:c1:bc:ad:11:46:11:4d:7d:c3:6a:05:24:
08:2f:bb:e8:41:ba:75:bf:80:9b:9b:53:91:83:de:a9:51:06:
75:c2:db:da:85:6a:f1:29:57:36:3f:40:36:0f:c9:19:81:06:
05:99:f0:42:f6:0d:09:9a:c6:2f:47:60:02:3d:12:86:bf:0d:
13:7a:66:f4:df:10:65:cb:9b:bf:87:4b:92:8c:95:29:5c:eb:
e4:25:ae:09:96:85:c0:1e:bf:b9:21:b3:55:39:b7:1a:f0:c1:
1c:0f:09:c9:df:4b:d4:6c:d5:43:01:a3:38:69:a7:cb:65:20:
c0:c0:ea:6d:51:81:8e:9d:8b:ad:7b:01:d8:2e:c9:0f:ae:66:
4e:a9:b5:2f:c9:c5:35:1f:9a:83:3c:0d:82:9f:9f:8a:0f:cb:
67:10:d9:7c:a9:2d:b7:31:0f:5c:2f:2c:4d:38:68:bb:99:a9:
41:0e:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:32:00 2025 by rpki-client