Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json)
Hash identifier: AetKanmCPhLViXBgOqsX3vvw/quSXJgh0HMl2OeVLcQ=
Subject key identifier: 00:05:29:33:90:DA:99:23:AE:EA:7F:F1:95:5B:B0:BB:4E:9E:D8:A7
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 0196E231CAA01BF488D4BCCEB75ADFBBDE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
Manifest number: 1548
Signing time: Sun 18 May 2025 07:00:36 +0000
Manifest this update: Sun 18 May 2025 07:00:36 +0000
Manifest next update: Mon 19 May 2025 07:00:36 +0000
Files and hashes: 1: IAQeRjmmu9Z-veumwyPKfDrKvbI.roa (hash: Ww+1iOsdAQGbUwn6gW9paX3J1FGXxxEHtorVkrDGTZc=)
2: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: dZCj/0e8zS5+K1Ra5Otty/jGfvuOBdvffXzDUtA45qU=)
3: zE2nCBuCP3GWKcrh09m8L6FV9yA.roa (hash: iLVOHuiEHM03YeDql7RR17g8jhss2HwinXwx77EwMP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 May 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e2:31:ca:a0:1b:f4:88:d4:bc:ce:b7:5a:df:bb:de:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: May 18 07:00:36 2025 GMT
Not After : May 19 07:00:36 2025 GMT
Subject: CN=0005293390da9923aeea7ff1955bb0bb4e9ed8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:5a:b5:1b:69:aa:7f:75:1d:14:27:b3:8c:
ef:a2:09:ff:cd:27:cd:63:43:f5:c8:a0:ca:ab:4e:
fd:d9:54:c6:a8:e5:cb:12:6b:03:e5:7b:0f:44:95:
6f:47:80:ca:68:1d:aa:2c:ec:51:f5:a7:11:6e:f3:
34:af:49:23:e8:48:ed:07:cc:b2:cd:4d:6a:b6:9b:
7b:37:29:37:e6:72:a7:3f:4e:47:1c:b4:eb:84:25:
b9:26:e3:a8:6f:a7:32:f1:6b:72:0f:8f:4d:1a:98:
ec:7e:de:7b:40:ce:ea:9b:e8:7e:96:7e:0b:5e:5c:
ef:47:4c:c9:60:57:fa:24:76:e5:99:15:89:de:ef:
06:7a:41:b9:b7:3e:c5:ba:09:7b:dc:e7:42:d9:03:
35:c5:b8:89:10:fa:91:72:85:c7:b9:af:3a:d8:be:
26:30:c6:52:71:bb:16:6a:a9:7a:36:01:d0:cf:23:
34:6c:6d:4c:c3:77:cd:a2:f3:cb:50:8d:80:a4:00:
d7:7c:21:5a:9e:de:7a:2d:34:1b:47:1d:30:1e:60:
18:bc:ea:1d:6a:b6:73:1c:e5:4d:2b:19:d6:34:af:
1d:ce:78:16:1a:54:9a:25:f8:b7:8e:dc:11:fc:42:
1b:33:46:f4:38:eb:c3:fb:39:ad:2a:f2:6b:ef:92:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:05:29:33:90:DA:99:23:AE:EA:7F:F1:95:5B:B0:BB:4E:9E:D8:A7
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:83:28:e5:17:c9:70:34:df:ee:37:92:26:f9:4c:e3:59:9b:
b8:c2:8e:f3:1f:5b:62:2f:65:2b:7d:0b:46:19:aa:86:37:2c:
2d:2c:fc:b0:4c:b6:7f:d8:1a:ff:5d:65:2d:df:5a:28:7f:e9:
83:7e:6f:b9:bb:1a:2a:71:41:ee:ee:c2:3f:8d:10:64:70:04:
68:dd:34:93:b0:0d:51:5d:1b:ff:9d:75:89:bb:20:bc:c1:8b:
4c:46:fa:73:b2:c6:c4:78:72:12:ef:70:9d:5c:1b:24:23:c7:
98:a8:42:e0:dd:2a:5d:53:70:38:3a:42:80:ad:2b:08:1c:b8:
76:d9:cb:4e:4e:96:09:75:fd:cf:f6:b8:c3:cd:1b:0d:07:cc:
88:6a:32:03:8c:cd:62:48:bd:61:47:4a:e8:fe:9c:f1:b4:73:
fc:77:d8:81:7e:52:7c:02:94:b5:8d:9b:30:ef:b0:91:eb:c0:
f4:8d:82:96:9c:fb:b5:8f:de:17:6e:1e:ac:17:bb:ef:11:0f:
b4:70:70:93:8f:b3:54:be:b3:1c:5b:24:e4:fe:19:ef:c1:c0:
7d:4a:d7:12:3d:ba:13:bb:b4:71:a3:81:61:f8:eb:e0:1c:83:
f0:80:39:07:99:1f:e0:7f:21:ed:ac:37:fc:53:44:90:bc:9a:
91:8a:08:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 11:00:51 2025 by rpki-client