Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: OPOZ7kNap6DLCsCIoT/xjNIYx4jcRVMZRCx5razDgcs=
Subject key identifier: 95:0C:23:8F:B0:35:AA:45:BE:F0:14:3D:D1:30:50:26:66:1C:10:FE
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 0197488D7ED08E0DBD1D1BA9B61E7AC052C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0BBD
Signing time: Sat 07 Jun 2025 04:02:01 +0000
Manifest this update: Sat 07 Jun 2025 04:02:01 +0000
Manifest next update: Sun 08 Jun 2025 04:02:01 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: fYpeYMVzCWjJlt3OWtfMrPeYRrF4oIUAEiqLsnR/TvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:7e:d0:8e:0d:bd:1d:1b:a9:b6:1e:7a:c0:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Jun 7 04:02:01 2025 GMT
Not After : Jun 8 04:02:01 2025 GMT
Subject: CN=950c238fb035aa45bef0143dd1305026661c10fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:45:c4:0c:9d:dc:bf:7d:28:e1:0b:f5:ef:
c4:9d:ae:f3:0d:7e:f5:0e:a2:b2:a8:ce:ce:bd:8b:
06:90:16:2a:6f:02:67:e2:40:b0:11:41:35:f2:45:
e8:70:92:54:63:45:0b:ae:fa:57:ae:da:1d:18:4d:
f2:73:38:5f:a8:b5:8b:a7:fa:95:29:4f:44:07:26:
47:9d:c6:ee:75:26:a4:b5:c4:34:22:02:8b:14:2a:
03:95:ce:99:97:ba:90:ca:d9:a4:b4:45:fe:d1:df:
54:73:cb:55:41:5e:ad:c6:20:49:f0:46:79:58:c0:
2d:f2:d4:8a:7b:2e:c6:7d:df:6c:be:2e:1a:00:89:
6e:37:9d:fd:bf:1d:b4:e6:70:5f:fb:3c:21:fb:a2:
50:78:0f:3a:7e:10:26:e9:9d:2b:96:01:ba:01:eb:
bf:e8:1c:b3:2c:e7:4f:7d:32:70:f1:23:7f:ae:63:
a8:75:34:bf:44:a8:9a:c5:02:15:d7:d0:dc:b8:cd:
38:cd:5e:74:a6:e5:1f:e3:76:88:a3:e7:d9:55:31:
32:4d:b9:a0:f0:2b:a0:5b:8a:c7:fb:f8:ec:da:03:
b6:69:a9:9f:4c:43:af:70:07:8b:2c:6a:a2:60:71:
0b:ad:88:f8:b9:dc:6f:9b:b2:39:de:34:14:d5:9a:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0C:23:8F:B0:35:AA:45:BE:F0:14:3D:D1:30:50:26:66:1C:10:FE
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c6:5e:b5:1f:38:ad:1f:72:a4:5a:77:56:ec:98:90:f3:4e:
73:1a:49:5f:b1:e0:5d:1e:a4:b0:1d:a0:9f:42:39:c9:03:57:
44:90:1b:8a:8c:13:c4:77:2a:80:e2:ed:c4:1a:77:ed:09:b1:
38:8f:13:f3:be:1c:4e:07:bb:8d:12:64:49:0f:85:54:21:6c:
26:4b:49:30:90:6b:33:69:6c:27:9e:d7:0c:1e:9b:8f:f4:77:
a9:04:c5:2a:fb:3a:81:bf:27:48:13:d4:b7:15:16:f1:5c:eb:
c0:74:06:63:e0:3b:ab:d0:b6:f8:ff:c2:5f:bc:a0:14:f2:54:
b0:67:6b:08:6b:e0:64:0f:04:f5:13:c5:0e:af:5b:3e:50:d2:
07:46:03:81:ce:72:bc:1f:c2:8f:ed:1b:d2:19:15:7a:7c:ad:
b3:79:0c:8f:d4:f5:c5:cc:7e:b9:e3:a0:30:21:3c:32:03:1a:
0c:b6:50:9d:e6:53:7b:2a:94:07:ba:f6:10:15:e3:93:6e:a8:
6c:47:10:1a:b6:2b:4e:60:6a:8e:5b:85:4f:97:88:41:65:18:
71:c3:a9:4e:f4:fc:bd:af:ab:cb:4f:7c:e8:93:06:48:c5:b1:
ba:d1:83:e7:1a:2e:7b:5e:82:69:21:70:10:34:4b:d1:9f:f7:
5d:1f:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:12 2025 by rpki-client