Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
File: nyHqqnvQ7mfKYwLj16quZNcpQC0.mft (raw, json)
Hash identifier: KKi8nM/ITNz0NcoOXA7WSLRP+B0JwF7esqtJsEdwbGo=
Subject key identifier: AA:31:86:D0:0A:F2:38:D0:28:50:0A:A5:CE:43:07:C0:5B:16:1E:44
Authority key identifier: 9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
Certificate issuer: /CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Certificate serial: 0197B77C5A58307414F8853B3748B417E975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
Manifest number: 069A
Signing time: Sat 28 Jun 2025 17:01:09 +0000
Manifest this update: Sat 28 Jun 2025 17:01:09 +0000
Manifest next update: Sun 29 Jun 2025 17:01:09 +0000
Files and hashes: 1: nyHqqnvQ7mfKYwLj16quZNcpQC0.crl (hash: R8ma/b4v4M9DSrzlD6vbb13qA2q/37ZdHihJAHZZHqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5a:58:30:74:14:f8:85:3b:37:48:b4:17:e9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Validity
Not Before: Jun 28 17:01:09 2025 GMT
Not After : Jun 29 17:01:09 2025 GMT
Subject: CN=aa3186d00af238d028500aa5ce4307c05b161e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:29:7d:8b:0a:f6:96:1d:e2:ed:f2:ee:7a:
be:50:45:2b:55:e1:68:aa:82:ef:f3:4b:30:9f:01:
17:38:98:a0:c2:2b:a1:cf:60:9a:93:bb:d9:d4:e6:
d6:3d:90:90:c1:46:15:63:89:3a:5c:ec:84:e8:80:
a6:39:87:9d:ba:45:c6:8d:2d:a2:eb:a9:5c:5c:f7:
c0:ba:94:eb:20:42:52:9a:80:26:05:a5:9c:63:f1:
1c:6d:50:ca:6e:fb:9d:a8:a7:53:a3:7a:12:04:7e:
7d:0d:49:73:04:e8:b7:be:e2:df:8f:12:0a:2b:d1:
71:7d:11:de:a3:30:64:32:31:ad:62:7a:a3:c5:8b:
16:ae:37:19:b1:ca:cd:a0:b6:f8:0b:4b:1c:dd:03:
3f:aa:4d:4c:d4:9f:2d:25:6c:67:8e:6d:7b:07:83:
85:ff:49:4b:69:f0:3e:12:c2:ea:fa:4e:a6:43:47:
61:6d:08:b5:f3:de:ea:a0:57:4c:7b:24:23:49:dc:
21:87:64:a7:69:8e:47:c5:e6:47:a4:7b:2b:79:4d:
0e:16:84:e6:43:95:03:47:a9:bd:9a:86:c8:1b:b8:
e9:ce:96:df:d2:9d:74:92:77:26:86:86:00:09:05:
81:ad:65:1f:bc:78:16:ae:d8:b1:5e:8e:6e:5a:91:
c1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:86:D0:0A:F2:38:D0:28:50:0A:A5:CE:43:07:C0:5B:16:1E:44
X509v3 Authority Key Identifier:
keyid:9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:71:22:29:e1:92:c2:02:b0:eb:ff:60:b0:ae:ef:2c:36:37:
bf:21:0a:69:7e:d7:3d:79:46:75:14:8c:80:c0:5a:fe:d6:eb:
c9:aa:e6:01:ed:a6:61:6a:7d:6d:ea:be:78:ff:1c:24:3b:4a:
05:f3:9d:2f:b7:34:37:e0:8c:3e:c1:95:a4:8c:94:da:c6:06:
25:0e:21:f0:04:5e:ae:95:e8:1d:2e:6a:b7:78:27:e2:35:72:
28:d9:5c:55:00:43:77:b0:32:74:25:c0:76:0f:4b:a4:09:14:
a3:c1:33:b3:74:77:f7:14:d9:90:a0:da:ee:cb:03:01:19:79:
95:2b:2a:69:a1:2c:c5:2f:42:76:91:8f:67:1d:c5:db:90:ab:
3d:8b:00:49:02:23:ba:89:02:a1:03:4f:27:67:fe:80:24:88:
93:c8:3d:c2:8c:db:55:d5:2e:38:0a:ab:6b:de:1b:9c:45:a7:
8f:99:a8:75:c7:ce:a6:ca:66:bd:dd:26:18:9c:64:61:73:10:
7b:91:20:d0:43:1a:ab:a7:7c:e1:dd:0b:ea:0e:2d:d2:c6:d5:
08:1e:89:6c:90:1f:1f:37:46:4f:d8:3e:e0:ff:10:69:0b:80:
c8:45:e5:0d:a5:89:35:a0:5d:c8:0b:69:7d:44:b6:00:b5:79:
c9:4d:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:11 2025 by rpki-client