Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
File: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft (raw, json)
Hash identifier: ak5OapaIXwOIH/SCd3x9smpoBn/E+6OTJHGc8aEnK10=
Subject key identifier: 85:63:D6:66:EA:D2:C8:5C:17:9D:4C:85:FE:B6:4D:DF:46:1D:F7:DB
Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
Certificate issuer: /CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Certificate serial: 019758A451F9494F28694FE1765640FD3DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
Manifest number: 0268
Signing time: Tue 10 Jun 2025 07:00:53 +0000
Manifest this update: Tue 10 Jun 2025 07:00:53 +0000
Manifest next update: Wed 11 Jun 2025 07:00:53 +0000
Files and hashes: 1: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl (hash: XXzNkZKv2wMBgUEt28qbiRyKrGoM9/6lMAz4WFU7rzQ=)
2: dbO_KM950SVoV4qdoDfieNWIw0s.roa (hash: DCE7AE8Wo5HEULV6TjwRejnJ6LMRCD866TcEBq5yg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a4:51:f9:49:4f:28:69:4f:e1:76:56:40:fd:3d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Validity
Not Before: Jun 10 07:00:53 2025 GMT
Not After : Jun 11 07:00:53 2025 GMT
Subject: CN=8563d666ead2c85c179d4c85feb64ddf461df7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f1:0f:26:95:09:e8:82:38:80:bc:62:bf:e4:
5e:8f:7c:47:68:95:1f:ca:04:27:22:c0:bd:24:b9:
1b:38:dc:b1:9f:57:5a:72:29:22:b5:c9:69:da:2f:
35:e8:61:3c:17:68:35:85:af:33:39:5d:25:52:06:
6f:b3:5c:38:13:0b:69:7f:37:83:0c:03:3c:2b:94:
d4:1f:ef:01:63:be:63:8a:80:60:95:b8:dc:37:fb:
e1:a6:ab:cf:c5:a9:ef:dc:16:b7:d5:d1:37:1a:37:
2b:f8:83:56:51:42:7e:24:0a:f9:00:69:81:fa:96:
5a:35:0b:02:17:fd:38:7b:2d:bf:34:4e:7d:24:5c:
b8:de:2e:20:53:92:d4:5e:b9:19:8e:f4:7d:e8:25:
db:73:e5:8a:92:38:b5:b6:64:76:84:bc:00:91:da:
f2:12:a6:92:92:9d:87:d8:a1:69:b9:05:d6:96:34:
1c:00:b0:c6:16:74:d1:aa:c4:53:be:98:f0:b2:85:
a2:0f:9f:90:da:c2:6d:df:c9:4d:52:93:64:ed:ec:
10:74:a0:57:a0:18:0b:d3:a8:c1:47:d6:a5:3a:fc:
3f:3a:a3:3a:7f:1e:7b:a0:aa:2d:79:86:0e:78:09:
76:8c:5a:af:d4:ad:04:6f:26:d2:70:85:74:3b:d1:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:63:D6:66:EA:D2:C8:5C:17:9D:4C:85:FE:B6:4D:DF:46:1D:F7:DB
X509v3 Authority Key Identifier:
keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2b:36:b0:55:e8:ef:36:eb:c9:3b:09:dd:06:8c:d2:51:6f:
03:d8:37:0a:9b:02:62:52:99:2f:1a:d0:ed:e5:80:a6:82:25:
e8:1d:54:f6:62:14:ce:22:b0:1c:0b:2c:ff:97:6c:49:53:df:
92:b7:50:93:4d:ca:5a:5f:40:47:40:a4:7d:7f:e8:7e:74:b1:
60:03:0c:69:b2:f3:86:0f:e3:13:8a:86:37:93:be:78:7f:66:
c9:9d:8e:94:68:05:ab:83:79:be:7f:5e:62:76:e6:ee:62:e1:
c1:38:da:ea:c8:94:6d:8b:af:15:c1:d9:fe:36:9f:cf:b7:ca:
50:97:3f:06:28:3a:a6:66:66:c7:e7:f9:01:06:2a:25:25:c1:
98:7c:a2:74:68:c4:26:a8:71:3b:23:db:26:42:e6:63:6b:fe:
e8:db:f0:97:16:bd:4d:57:95:e1:1d:f5:08:c8:76:88:cb:63:
04:00:aa:99:c6:32:31:24:bc:38:1c:d3:b7:55:b2:52:22:f1:
43:9c:c6:f3:d4:24:f4:86:61:55:e2:73:83:9e:46:ef:fb:b4:
da:b7:53:8f:a7:8a:6b:23:b0:fd:28:c4:6d:17:fc:22:fa:6a:
9a:97:fd:ba:28:de:09:39:64:e5:e0:5e:fa:4c:61:cb:e8:e6:
42:2f:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:23:23 2025 by rpki-client