Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
File: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft (raw, json)
Hash identifier: KjA1mYmueRgJ/WGxjgfv6feHfJ1WBAs9EeDdDUgknV4=
Subject key identifier: 29:82:92:1C:89:97:F4:2F:00:F5:D0:93:82:5F:97:9B:6C:10:D8:F5
Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
Certificate issuer: /CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Certificate serial: 0197643A6F846F1B738DB8D66BB5DC020529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
Manifest number: 026E
Signing time: Thu 12 Jun 2025 13:00:40 +0000
Manifest this update: Thu 12 Jun 2025 13:00:40 +0000
Manifest next update: Fri 13 Jun 2025 13:00:40 +0000
Files and hashes: 1: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl (hash: pqsQyAazpMgxcBXkihK2ZwO3896yhqhUJ2/H6O+UZwM=)
2: dbO_KM950SVoV4qdoDfieNWIw0s.roa (hash: DCE7AE8Wo5HEULV6TjwRejnJ6LMRCD866TcEBq5yg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:3a:6f:84:6f:1b:73:8d:b8:d6:6b:b5:dc:02:05:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Validity
Not Before: Jun 12 13:00:40 2025 GMT
Not After : Jun 13 13:00:40 2025 GMT
Subject: CN=2982921c8997f42f00f5d093825f979b6c10d8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:a4:92:38:3a:95:0e:73:17:9d:c7:51:1a:
de:4e:a2:90:3a:f6:e7:82:b5:94:e7:2b:b1:5a:0b:
6e:e9:2a:d6:1a:b7:eb:48:bd:40:e2:3a:72:85:d4:
3c:02:a1:70:ed:fa:95:af:64:be:b3:f3:0e:03:b7:
31:98:e4:fd:6b:83:a9:03:27:7f:ee:29:88:a0:43:
04:d8:ac:40:dd:ba:65:81:99:3c:35:dc:23:1c:84:
b9:5d:48:fe:79:ab:a2:96:32:d5:cc:1d:60:c4:f1:
70:84:8b:01:3e:a4:ab:99:8e:23:5b:c2:e2:8e:d3:
bd:93:57:56:40:5a:a8:4f:b8:70:b5:55:89:e0:55:
c0:c2:86:4a:97:f2:4b:97:17:19:fc:03:69:7f:d5:
fa:e0:76:92:b7:38:a8:22:e2:6c:b3:bf:d5:e8:ce:
79:d7:9c:d1:03:09:1b:2f:e2:5f:c2:76:10:4e:43:
5b:a1:dd:56:b8:63:e4:a2:f5:6b:51:a1:55:58:61:
e0:97:e8:98:27:48:06:91:5a:98:98:cb:fd:97:f1:
a2:d9:5b:eb:a9:fd:3b:2b:a4:e4:e6:39:d6:74:44:
e4:a8:85:2a:85:29:25:ad:22:4c:bc:f5:bc:7d:eb:
61:19:18:a4:ab:63:34:f0:96:71:66:bd:91:0a:ff:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:82:92:1C:89:97:F4:2F:00:F5:D0:93:82:5F:97:9B:6C:10:D8:F5
X509v3 Authority Key Identifier:
keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6a:62:9a:8a:f3:aa:ac:f6:52:01:a5:72:ed:a4:a4:31:8b:
3a:04:ae:2d:6f:ad:96:a9:d0:6a:60:32:2e:9a:09:78:a0:79:
05:54:65:02:e0:ee:bc:f9:14:59:ee:ed:4d:cc:53:4e:79:91:
9e:87:19:f5:e1:1f:bc:8b:46:d7:6d:89:f4:17:c6:b2:7f:72:
07:88:7d:14:79:b7:fd:6f:eb:0f:82:0a:e8:94:e4:6f:11:86:
5c:16:4a:23:9b:ad:36:89:48:bf:1e:22:0c:0f:0a:9c:ca:48:
2d:bf:c8:be:15:68:35:01:56:7b:a2:29:3d:ef:19:04:66:6e:
9e:f3:cf:a3:74:a6:24:45:ed:25:3a:20:58:f5:cf:e1:c9:d3:
f4:5f:7a:01:18:7c:15:2e:cc:5a:0a:61:eb:33:6d:83:7e:dc:
d0:80:f5:8a:08:4f:e3:92:ac:78:93:64:2e:9b:14:b2:25:7d:
c5:b5:b8:08:52:ac:67:55:fb:d6:87:f1:b7:cb:86:9d:a3:42:
be:98:ae:74:85:dc:fb:1c:f0:7f:0f:2b:ef:f8:d3:2e:31:e9:
d8:0f:59:a2:72:f7:33:51:fe:c4:95:8c:1c:b5:13:e3:e1:5f:
e6:27:b4:0a:5b:93:c7:41:47:18:ea:c9:b6:5c:56:c4:f3:87:
c9:e4:c8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:50:56 2025 by rpki-client