Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: gKzlej5t03Nv82GOPrRN2EwqIdiPFVyWOgkVNay2Os8=
Subject key identifier: 0E:D4:C1:04:59:4A:B6:87:35:77:68:FB:7F:2D:7A:18:3D:24:67:12
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 0196C50303E87D56110DA959EDF30D0990DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 15:00:31 +0000
Manifest this update: Mon 12 May 2025 15:00:31 +0000
Manifest next update: Tue 13 May 2025 15:00:31 +0000
Files and hashes: 1: ObbHotU_QnvsulgBzQaW4wh0HAk.roa (hash: mbgTfoasS2/JRLVjEdWRajTXVRhnW7d5YvctUH9mztI=)
2: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: A2sE5dL0LVbX8QPDrXKIxlCTiJibETV4zRoQmCPXmLw=)
3: sLdQOZGVUyb44hu-OktavwbL-fA.roa (hash: 61zdCvV2SZ1HoaLvCC14jhWwxqjS5pgyZuPOqRzMG/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:03:e8:7d:56:11:0d:a9:59:ed:f3:0d:09:90:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: May 12 15:00:31 2025 GMT
Not After : May 13 15:00:31 2025 GMT
Subject: CN=0ed4c104594ab687357768fb7f2d7a183d246712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:3d:4d:42:6a:8f:42:d6:57:98:19:ad:53:
6b:08:eb:ac:36:23:08:cf:b8:5e:35:3b:e1:d4:85:
46:81:86:e9:97:01:25:23:d2:6f:f4:42:e9:60:62:
8d:b1:8e:5c:64:03:c7:be:32:9e:e0:9f:df:c5:87:
27:5f:d4:fc:b4:15:87:3c:68:01:7c:db:69:f7:ed:
9b:0a:03:81:7b:8a:7e:15:25:b1:9e:57:86:24:8f:
09:c0:48:ef:59:4e:13:7b:61:08:55:f3:2b:14:e2:
85:21:6c:0d:eb:28:9c:21:af:42:93:b9:7f:c3:98:
7a:91:15:d1:f8:31:50:d6:a0:b7:44:69:25:78:ec:
6e:1d:fc:62:66:3f:81:53:f7:5b:7d:7b:10:ee:00:
66:e1:51:1d:fe:63:e6:59:21:d2:93:aa:ee:cb:46:
e7:f2:f7:6c:34:be:bc:af:d3:82:1e:bc:ca:a4:f9:
cd:d9:ae:d4:50:97:4b:47:94:e3:1d:4a:87:bd:eb:
c6:be:2f:20:83:d4:cc:73:66:02:e8:8e:9c:9b:7c:
68:34:5c:c1:60:08:f4:2a:1c:3a:ba:64:e3:06:64:
76:75:38:24:a4:55:d5:80:18:d9:7d:09:03:11:8d:
63:ae:7a:3a:43:1e:15:d4:c3:5a:c3:b9:64:75:09:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D4:C1:04:59:4A:B6:87:35:77:68:FB:7F:2D:7A:18:3D:24:67:12
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:fe:e2:66:0a:0c:9b:06:cc:73:c9:7e:07:fb:c2:c5:3c:fa:
6e:dd:fa:2e:29:f9:7f:6d:07:5e:e8:83:68:f5:30:11:8d:c2:
ac:76:5e:48:2c:0b:b6:cf:d2:c7:81:bb:f4:ac:1d:76:df:ec:
ee:eb:29:42:86:ee:4a:57:ca:03:82:3c:02:35:87:6f:53:89:
62:be:1d:eb:6c:c8:47:f3:8c:9d:49:16:88:dc:5e:9e:b1:af:
b1:55:99:7f:ca:ce:af:10:15:84:87:77:f4:bb:3b:92:d7:06:
53:08:8f:00:15:68:04:0e:48:4e:5d:b5:91:7b:8b:52:74:50:
71:94:b5:65:19:46:d1:8b:82:d7:0a:92:6f:df:b4:78:97:63:
8e:6f:3a:59:cd:24:e4:8b:45:5f:06:62:1f:11:5d:43:ba:de:
2e:57:93:c4:82:71:03:7a:5b:54:d2:e8:39:9b:37:5b:fe:c4:
7a:fe:84:c4:68:b4:b3:be:b8:3f:7d:67:f8:b9:d7:3f:d6:09:
5c:75:e3:2f:63:c3:56:92:ad:ed:d8:c8:14:35:50:8b:88:e6:
32:05:d4:4d:50:75:b0:7f:6f:b8:05:ef:74:bd:87:ed:9b:06:
1f:16:cf:58:0f:c0:93:a4:f4:0a:d4:c6:d7:ce:21:56:81:a6:
a4:09:68:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:10:08 2025 by rpki-client