Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
File: ny4CE8HB23M97spK4mFsqv-lFXA.mft (raw, json)
Hash identifier: UyyiAywpoET4X8rESlfChX+lGbZHAUbFp8WRqSnu3So=
Subject key identifier: 82:F8:06:49:FE:90:B2:D8:7B:E8:00:D3:2D:DC:60:A2:82:6C:F9:D6
Authority key identifier: 9F:2E:02:13:C1:C1:DB:73:3D:EE:CA:4A:E2:61:6C:AA:FF:A5:15:70
Certificate issuer: /CN=9f2e0213c1c1db733deeca4ae2616caaffa51570
Certificate serial: 0197B77C0352A4D7ED94D7E3CBBE1A681A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
Manifest number: 1263
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: ny4CE8HB23M97spK4mFsqv-lFXA.crl (hash: tXWmaYjIcfSMzhwPbU5MMJvvDhULAwUxb28N3MCRTnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:03:52:a4:d7:ed:94:d7:e3:cb:be:1a:68:1a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2e0213c1c1db733deeca4ae2616caaffa51570
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=82f80649fe90b2d87be800d32ddc60a2826cf9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:1a:9b:12:33:a4:a3:2e:9c:fc:2e:fb:64:
13:45:3e:b6:9b:a7:a7:86:d1:3c:68:07:05:84:5a:
1b:25:88:ff:c3:1e:d7:9a:99:a9:c4:8d:24:36:64:
54:26:0e:49:c8:f3:7d:d0:e9:ec:dc:09:8a:94:0d:
45:42:aa:15:fe:4c:10:e0:5a:af:44:a6:7f:48:fb:
29:ec:41:ab:1c:1d:ca:ce:6a:41:f2:f2:7c:89:7b:
24:2d:2a:74:de:bc:80:b3:2f:33:96:64:9b:aa:42:
fa:6e:7c:12:53:72:86:1e:67:f2:6c:a6:e8:3a:ef:
8c:61:2c:ee:74:f7:db:3d:5a:0c:d3:a4:d2:70:bf:
78:1f:d9:35:cf:4e:51:14:3f:e5:6b:ec:b6:1a:41:
1d:9a:b2:62:f7:80:10:96:44:d1:71:0f:f8:44:d6:
90:04:0f:03:f1:c8:76:26:be:79:1d:b8:f6:70:42:
50:04:02:0c:ac:e2:12:da:48:82:bf:89:b3:11:c3:
e5:dc:43:a8:82:3f:c6:f0:fd:8e:eb:62:69:3f:2f:
4e:2a:c5:52:28:f2:be:7b:84:75:ca:1d:21:8a:a2:
88:05:3b:87:15:f4:9d:c0:e1:f1:fe:fb:23:9d:c3:
37:4c:5e:20:b8:23:b5:f2:d2:62:09:fe:31:bb:11:
c6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F8:06:49:FE:90:B2:D8:7B:E8:00:D3:2D:DC:60:A2:82:6C:F9:D6
X509v3 Authority Key Identifier:
keyid:9F:2E:02:13:C1:C1:DB:73:3D:EE:CA:4A:E2:61:6C:AA:FF:A5:15:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:24:90:f7:8f:05:55:23:17:60:9c:2e:b1:5c:db:c3:c6:02:
4e:da:d3:49:cb:f3:e9:76:8d:dd:ad:8f:ea:d2:c3:2e:f8:b6:
cd:5d:79:c3:87:6d:9b:73:8e:6f:29:e2:46:10:3b:f2:a1:61:
c4:29:9b:4c:ac:39:dd:ab:96:52:84:fc:9c:cb:8a:0f:40:8a:
df:6a:b9:26:b7:08:df:cf:60:d1:1e:9b:fb:31:18:4b:c2:f6:
02:4d:9e:3e:12:0e:a0:ac:bc:23:6b:d0:b7:86:03:48:19:4b:
ec:c8:b7:48:39:3e:4a:1a:5c:ee:27:c7:8f:30:61:47:4c:74:
2e:ef:6c:e2:30:04:4b:77:88:47:c1:b5:94:91:44:a2:0e:11:
d8:d2:86:a7:2b:f3:cf:68:f0:af:84:63:d0:25:7d:ca:cd:dd:
4d:78:00:7a:04:db:69:99:71:c2:7b:73:f8:fc:ae:59:e6:6e:
5e:be:ed:6a:0d:e2:4e:43:20:71:1a:f5:b9:b4:ab:88:4e:b7:
56:b9:d7:ab:ec:7a:08:a3:8a:17:0c:23:79:a0:d2:49:53:dd:
93:61:f6:6d:ce:be:e4:8f:88:0d:e4:d6:c7:38:a6:48:62:c4:
a8:88:88:0b:c1:1a:6e:8b:29:3d:db:40:ad:e2:0b:16:d0:78:
d8:b6:fc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:12:41 2025 by rpki-client