Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
File: nyHqqnvQ7mfKYwLj16quZNcpQC0.mft (raw, json)
Hash identifier: mYIF2O7T81a5S3Nl7obEWSAsLAOmIBRTwXKv37RkAIw=
Subject key identifier: 39:3A:12:98:B0:A5:A9:59:72:A0:AD:11:9A:F8:55:BA:C6:F9:9D:94
Authority key identifier: 9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
Certificate issuer: /CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Certificate serial: 0196B4B45505C22B63D141FF2115F8594301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
Manifest number: 0614
Signing time: Fri 09 May 2025 11:00:39 +0000
Manifest this update: Fri 09 May 2025 11:00:39 +0000
Manifest next update: Sat 10 May 2025 11:00:39 +0000
Files and hashes: 1: nyHqqnvQ7mfKYwLj16quZNcpQC0.crl (hash: SLI16bP7X1EVX0BPFhRjc7JQ5QlnthqDrqCkCiLpa5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:55:05:c2:2b:63:d1:41:ff:21:15:f8:59:43:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Validity
Not Before: May 9 11:00:39 2025 GMT
Not After : May 10 11:00:39 2025 GMT
Subject: CN=393a1298b0a5a95972a0ad119af855bac6f99d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a2:0b:34:7a:7b:ef:34:a0:d3:7d:01:c5:9d:
f6:5b:3f:e9:ae:9b:0c:fa:39:92:f3:bb:28:ba:04:
47:8e:3e:41:53:30:0b:91:6e:be:8f:94:ce:3d:a8:
27:a5:f8:5e:c6:00:0e:45:ca:0c:ee:8e:7d:82:92:
53:3b:a1:fe:95:80:9b:c7:a0:38:79:02:98:3f:9d:
5b:16:bd:d7:6c:10:34:31:dd:5c:fa:da:76:95:69:
83:aa:56:1c:5b:6a:ce:29:bb:7a:7f:4f:6a:9c:ae:
9e:fd:62:5c:0b:97:9f:b2:94:bf:b9:ad:19:7d:df:
63:4a:6f:ec:f9:a0:73:96:0d:32:69:ab:90:c9:30:
8e:67:c5:5b:90:4a:2f:01:4c:9c:52:10:c7:72:7b:
78:f3:e2:ee:b2:7d:ad:31:55:11:8e:b4:2f:28:61:
53:e0:c3:5e:81:c4:27:aa:07:02:53:11:8d:dc:b9:
b3:e5:19:ce:b0:85:e3:4b:87:ab:4a:61:4a:03:a6:
49:89:a8:78:ea:20:44:c7:2f:ae:a0:f1:4f:46:fd:
54:2f:2c:da:34:60:de:ac:c0:c5:d6:09:ba:2d:c3:
80:86:f2:98:fe:c2:fa:9b:84:e9:73:61:e8:89:de:
ed:b3:64:2c:d2:4e:33:0b:5b:0b:23:7e:9f:a8:f3:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3A:12:98:B0:A5:A9:59:72:A0:AD:11:9A:F8:55:BA:C6:F9:9D:94
X509v3 Authority Key Identifier:
keyid:9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a0:e6:3e:96:b9:b7:2c:b6:43:58:4b:77:46:b2:4c:14:e9:
61:39:e1:5b:fd:2d:a2:ab:a3:9f:20:26:8d:19:6b:57:61:a4:
47:ad:00:39:0e:a8:90:d1:61:1d:e5:20:0e:84:d5:2d:cd:99:
90:05:f5:3f:05:8a:ca:14:29:a9:13:a7:3e:ef:2e:ce:6a:b2:
fd:4b:45:77:eb:31:55:7b:b2:c3:88:f1:2b:8e:05:c1:c8:7f:
21:31:6f:5f:b7:d9:9e:8a:e1:f3:e9:e2:cc:86:e5:66:74:84:
b9:11:25:18:61:41:24:21:a6:f7:49:31:0c:f4:26:f1:f4:23:
14:18:99:5e:62:dd:70:ef:9a:ae:d2:12:19:fd:c3:95:1e:64:
23:54:be:1d:3f:9f:9c:a8:de:59:3b:d7:a0:f3:71:8a:76:f0:
d4:bf:3f:99:21:91:2a:62:e2:8b:74:96:b9:02:dc:ec:d8:6f:
a9:0f:44:47:2b:ac:17:f7:3f:ce:c9:34:59:db:41:a7:b6:4c:
a4:ce:b1:78:9a:ea:84:12:38:e5:5a:6f:fc:38:86:d6:c9:30:
e7:d6:0e:20:af:fc:4c:15:23:c8:a0:d3:70:90:94:52:34:c8:
e8:68:6e:3a:2f:90:1d:fe:ab:57:28:d7:3c:7e:4b:7c:1e:df:
ed:d0:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:53:19 2025 by rpki-client