Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: 0OsRFT1ZCFhkaFxg445vE68qmSv3dhEjjW/ZoXPBz80=
Subject key identifier: 8D:6A:0E:DC:E0:D5:84:B6:8E:23:06:86:37:58:D9:CC:98:94:46:86
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 0197B77C3D1801F9475EFEEA4E9D5F37B894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 0D52
Signing time: Sat 28 Jun 2025 17:01:01 +0000
Manifest this update: Sat 28 Jun 2025 17:01:01 +0000
Manifest next update: Sun 29 Jun 2025 17:01:01 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: 3tlCW/0e9K6n/Lb19NkO6SA4m9OEfnKmUptpgiXr/go=)
2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3d:18:01:f9:47:5e:fe:ea:4e:9d:5f:37:b8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Jun 28 17:01:01 2025 GMT
Not After : Jun 29 17:01:01 2025 GMT
Subject: CN=8d6a0edce0d584b68e2306863758d9cc98944686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:e6:2d:99:92:e4:42:ab:af:66:53:a0:04:
3c:ec:91:b3:de:31:78:7c:da:96:dc:6c:cb:0b:69:
0b:85:4d:fa:c1:1c:87:9e:96:f6:64:a7:5e:14:9f:
b5:d2:75:38:87:16:81:12:b3:9e:a7:3a:92:b8:32:
8b:9f:21:55:a6:dd:c2:bd:3e:7a:a5:bb:3e:c8:b2:
78:b4:9c:70:dc:a8:7c:5a:b7:1b:3c:a0:24:74:7d:
37:d2:a6:03:c4:03:20:7c:12:d1:92:ed:93:06:1e:
3b:ce:24:de:9c:e2:8f:f0:eb:c7:a4:51:84:29:02:
35:c5:ed:1f:8e:39:3c:29:3f:b1:dd:19:21:61:6f:
8a:00:f7:ed:5e:8e:1d:b3:ed:c1:f6:91:26:3d:85:
b5:26:63:77:4d:65:f7:f9:25:2c:ea:7c:49:d4:a8:
a6:44:92:e0:7b:6a:77:de:de:ed:76:49:e0:9b:d5:
1a:41:85:9d:9f:61:7b:bb:e7:66:df:6c:37:a2:89:
04:d3:af:cc:bd:97:0f:6e:98:26:f0:1a:45:3c:61:
32:33:49:d4:7b:b3:a4:87:8c:52:66:5e:ce:9e:18:
dc:49:2a:26:e6:10:58:9f:92:1a:ba:36:fd:d3:4d:
29:19:35:77:06:81:c7:a1:ab:7e:18:88:21:78:2d:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:0E:DC:E0:D5:84:B6:8E:23:06:86:37:58:D9:CC:98:94:46:86
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:39:e9:d4:ba:65:83:d8:cd:78:54:58:7f:a0:66:98:4b:12:
61:35:c2:95:ea:fb:d1:c7:a3:c7:80:c6:e7:1b:65:09:77:a1:
68:a0:bf:01:df:7f:60:97:7e:c6:ce:bb:67:c8:2e:a2:ee:5a:
ae:c7:a4:42:b1:1f:ff:18:58:f3:c5:27:aa:3f:35:76:76:66:
36:01:de:4a:83:69:a0:7f:51:8d:6a:7f:dc:1d:ab:98:4d:9b:
04:5b:21:c9:87:01:d3:16:da:00:74:22:73:68:bc:14:2e:c5:
19:9c:72:0d:79:f7:34:c4:22:5c:cd:37:90:1d:d7:79:cf:77:
37:89:d6:bd:72:1d:97:f6:b7:24:6b:53:67:3e:29:0d:92:9e:
7b:2c:11:27:4d:fd:c0:88:77:8b:6f:87:11:9a:92:ad:ff:54:
a5:b9:a3:c7:39:8f:de:47:fc:65:49:4b:92:0d:3e:a4:dc:a9:
9a:5d:f4:e2:4a:d4:61:99:ee:f6:fb:93:db:62:e2:a5:b0:72:
7d:ed:d6:73:dd:4c:e6:ee:7f:99:e0:9c:03:5a:44:58:ed:65:
94:0d:33:26:1c:86:74:ee:63:00:c2:af:a9:b6:d2:a4:f5:cc:
cd:df:6a:b0:26:ba:ec:51:52:f8:2e:cb:a3:bb:9e:bf:fb:95:
a7:ff:c3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:04 2025 by rpki-client