Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
File: NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft (raw, json)
Hash identifier: UWYHAWyZn3ccOZes40/G79XaP3iRG6tNlIfXFFBRnWA=
Subject key identifier: F9:59:CA:D9:EE:AF:63:ED:BF:D3:B8:01:04:4A:0D:1F:D6:AF:8F:6F
Authority key identifier: 37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
Certificate issuer: /CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Certificate serial: 0196BD494AE449424375145CE01FE6014859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 03:00:19 +0000
Manifest this update: Sun 11 May 2025 03:00:19 +0000
Manifest next update: Mon 12 May 2025 03:00:19 +0000
Files and hashes: 1: NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl (hash: 702lsF+LQr7iph030TYxbTvCIFedZ56EBV4ave0eCns=)
2: P1xjhgcrB_82E1dr812SN7zD2jw.roa (hash: 1Ps5EidA8vmNxrrB6k3QxJd8xmqPpWh99eg7n4cVK7o=)
3: q3oH4WqBy89nlHf_ohkPgGYaYoc.roa (hash: /Ya4Ak12mdvsioIt2KLsqtGYRCnDo04vhdOQ06CJDUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:4a:e4:49:42:43:75:14:5c:e0:1f:e6:01:48:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Validity
Not Before: May 11 03:00:19 2025 GMT
Not After : May 12 03:00:19 2025 GMT
Subject: CN=f959cad9eeaf63edbfd3b801044a0d1fd6af8f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:b9:03:ae:4d:99:89:d3:79:44:d2:0f:ce:
57:ac:15:9a:97:b8:a9:94:96:73:87:cd:9f:36:bb:
bf:54:ae:32:c3:08:13:6a:c8:7f:21:8e:98:7b:39:
f6:2d:e0:88:fb:9f:0e:08:51:95:7a:ad:95:e6:9c:
6e:b0:32:46:27:13:09:43:f4:47:2d:47:3a:aa:b1:
51:d3:24:be:2f:95:f2:e3:71:2f:ee:fc:c8:d1:84:
6c:05:e4:a1:6a:df:b6:e8:2d:69:e5:f1:20:ab:ec:
f2:d4:d5:ff:b7:71:b8:67:af:18:c8:25:5e:6f:48:
f6:84:88:c7:ad:74:99:8c:33:73:b2:2d:dd:12:e4:
81:1f:2f:bb:c7:00:ad:0f:8e:8f:5d:c3:0b:c3:01:
42:a2:93:98:77:a3:f0:15:a5:e3:a3:a8:8d:cf:9e:
2a:4f:a0:d8:48:88:fe:b7:d3:89:c4:6e:b4:af:7c:
cf:1f:3f:bf:d7:f9:9a:a2:09:4a:ef:09:dd:52:ff:
3d:97:8c:1a:1e:fd:d2:b9:fc:b7:e5:08:8b:dc:da:
49:96:23:2a:54:b1:be:68:a8:5f:85:27:4e:c4:55:
05:18:ba:69:5e:42:85:cb:9b:b2:6c:a7:b0:a5:0e:
1b:40:04:af:a3:57:bd:af:8d:b4:2d:1b:0e:d7:ab:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:59:CA:D9:EE:AF:63:ED:BF:D3:B8:01:04:4A:0D:1F:D6:AF:8F:6F
X509v3 Authority Key Identifier:
keyid:37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ab:30:e6:50:ca:6b:5d:72:8f:49:cf:87:c9:ec:e7:c0:ea:
a6:ff:ab:08:fd:26:78:ab:2c:51:dc:c6:60:b5:be:e5:cd:0d:
1d:e8:60:8e:65:bc:8e:8d:06:0f:03:f7:34:6d:92:f3:d5:0a:
82:5d:7d:bc:09:83:1f:12:aa:ec:8f:d3:8f:81:6a:1c:3f:ba:
64:a8:0a:30:c1:d9:da:bb:be:f1:2d:53:cd:ec:d9:c4:72:73:
45:64:cb:8a:68:28:52:64:3d:d5:2f:cd:73:64:85:74:0b:b4:
4b:b0:f0:4d:57:9d:4a:a5:6b:a4:98:47:48:bf:1d:e4:45:81:
ab:77:75:4b:62:18:b2:68:dd:13:a3:21:44:d0:56:35:fd:55:
8b:67:a8:55:df:ea:23:78:e0:30:a0:b9:4d:fc:24:c2:2f:13:
ca:d6:1e:a0:83:ab:83:b1:1f:48:c9:59:fe:0b:cc:86:57:70:
c7:99:86:b0:e5:18:4d:bd:5c:c4:db:cc:ac:5e:df:67:d4:23:
ff:49:41:66:94:cd:80:74:ba:98:67:cd:0a:29:e7:25:28:b1:
52:c1:bd:52:20:81:da:4e:58:51:4c:49:f6:20:69:db:40:35:
12:78:e8:fa:5a:af:c2:26:65:97:43:41:b6:26:f4:32:9f:0f:
6a:43:f4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:23:29 2025 by rpki-client