Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
File: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft (raw, json)
Hash identifier: 2XLjaYma0cNT5AY1oM7gZ5jiTqbFEWKzBjeB/TTwbSc=
Subject key identifier: 27:83:8D:27:23:34:F3:3C:C1:D0:B6:FE:23:0F:61:BD:E1:96:81:BC
Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
Certificate issuer: /CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Certificate serial: 019659B9680F7795595F2805DE608AF75DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
Manifest number: 01E4
Signing time: Mon 21 Apr 2025 19:00:45 +0000
Manifest this update: Mon 21 Apr 2025 19:00:45 +0000
Manifest next update: Tue 22 Apr 2025 19:00:45 +0000
Files and hashes: 1: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl (hash: wBHFYbiLJhuYQjWHu7MEj58Gm9viQ9U0eOctfKvw30U=)
2: dbO_KM950SVoV4qdoDfieNWIw0s.roa (hash: DCE7AE8Wo5HEULV6TjwRejnJ6LMRCD866TcEBq5yg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:68:0f:77:95:59:5f:28:05:de:60:8a:f7:5d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Validity
Not Before: Apr 21 19:00:45 2025 GMT
Not After : Apr 22 19:00:45 2025 GMT
Subject: CN=27838d272334f33cc1d0b6fe230f61bde19681bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:4a:5c:be:55:62:c9:a6:91:90:ac:25:be:
5e:7c:1c:f6:41:b4:38:67:40:cc:41:af:c1:05:13:
c8:76:5c:9f:33:c3:7e:9b:07:01:30:0a:f2:7d:c7:
20:05:ea:80:e7:dd:75:e7:29:d9:bf:cf:4d:f2:a7:
b1:57:d7:a1:9a:d8:39:81:f9:f9:7d:71:10:10:47:
bd:4f:d0:44:39:77:3a:96:6f:36:ff:03:c4:e7:e2:
4d:ad:71:06:55:9f:30:38:d2:ce:d4:6f:9a:89:12:
29:4c:ea:8c:46:42:e6:49:0a:12:3c:35:4b:a2:03:
67:6a:30:81:5f:46:53:86:cd:85:62:f5:22:5f:04:
62:9e:e5:5b:17:b7:1f:0e:96:9c:70:57:f0:ca:73:
72:41:1b:20:35:8d:78:99:9d:81:2c:d0:2a:6a:8d:
77:47:a1:df:26:69:12:56:17:f0:b2:3c:04:dd:91:
0f:0b:40:e2:ec:12:b9:75:fb:00:5c:bc:52:c8:95:
70:4b:aa:4c:c4:ce:6f:e1:75:a9:e8:98:d4:d4:ca:
d6:dc:13:bb:a9:83:37:fc:f3:22:6c:6d:a8:a5:7f:
35:90:b7:f7:00:b6:20:88:cc:d0:e3:03:d4:3a:cb:
f2:9a:99:79:7a:37:3f:71:a7:4e:40:9f:d0:e0:e0:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:83:8D:27:23:34:F3:3C:C1:D0:B6:FE:23:0F:61:BD:E1:96:81:BC
X509v3 Authority Key Identifier:
keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ed:57:f6:ce:2f:fa:f3:ae:93:24:19:31:28:87:1f:94:71:
0e:0f:df:96:dc:f0:61:9c:c4:11:a2:e4:37:28:1b:2c:b8:f1:
af:37:1f:cd:6d:fb:0a:f4:4b:b7:1a:38:e4:23:a2:f5:03:b7:
ff:45:92:38:e2:8b:f8:20:d9:a0:75:61:b3:27:1f:be:f8:06:
a3:3a:e6:fa:27:1e:c9:26:2d:7b:cc:d9:02:07:9b:ed:75:ad:
4a:0b:3d:4c:ba:8c:e7:2f:d9:4b:8d:66:70:c9:d0:45:31:94:
f4:1f:b7:64:d9:d7:8f:e2:b5:74:e1:ac:71:ab:fe:c6:39:0b:
d2:0a:fe:f9:0a:b9:45:35:7f:72:23:d8:1a:89:66:29:e4:34:
13:70:3b:d5:b1:ce:d4:34:91:c5:d5:c0:a8:8e:f2:23:95:12:
c0:30:fd:56:e5:ff:e9:a9:e5:3c:47:5f:61:e9:54:58:e8:96:
fb:89:f1:53:cc:54:d7:36:bf:89:05:b6:16:c7:34:2a:f8:37:
ce:2a:2a:72:45:f5:8d:64:8d:d1:2d:37:a9:6c:6f:6d:e9:fd:
56:8e:74:48:61:fd:0a:b7:b8:cb:47:ed:b1:55:36:67:70:a8:
0e:6b:fc:e0:91:8f:c2:72:7a:cb:d6:db:4b:02:0e:51:a5:8e:
e0:45:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:31 2025 by rpki-client