Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: 7ZomYTKS95Ry+ZjexCw/KEx0tocvdfF6KcWAe9/pOTU=
Subject key identifier: A2:94:4A:E7:5B:26:B5:58:80:88:C5:D6:92:DA:05:91:DB:F4:B2:12
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 0196C3B9ABEC76D3DC62BA789C8E2BF17765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 083D
Signing time: Mon 12 May 2025 09:00:47 +0000
Manifest this update: Mon 12 May 2025 09:00:47 +0000
Manifest next update: Tue 13 May 2025 09:00:47 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: q3xPgC5xWisfZZBXnd6JFT+FkY9byilIa73kihTRnz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:ab:ec:76:d3:dc:62:ba:78:9c:8e:2b:f1:77:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: May 12 09:00:47 2025 GMT
Not After : May 13 09:00:47 2025 GMT
Subject: CN=a2944ae75b26b5588088c5d692da0591dbf4b212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f1:02:3f:22:59:04:23:df:a9:28:7b:bf:87:
b2:65:a1:d6:60:4e:c1:31:34:a0:ba:2c:15:80:01:
19:70:48:e7:be:42:7e:58:be:3d:bf:22:e5:76:b0:
54:87:60:59:c7:89:f6:ad:63:3a:e0:7f:ac:8d:58:
17:a9:a1:1c:5b:c3:ed:51:ac:0e:e5:ca:7d:01:4d:
83:e2:9f:bf:ca:04:ef:d3:95:e2:fc:a7:0d:a3:60:
d5:5b:9b:10:8b:0b:fe:3c:ac:0e:95:b2:2d:c1:55:
8e:cc:08:c7:d0:c8:cd:fb:f5:72:8f:f1:ff:13:ec:
48:8d:3c:6c:8d:ba:b4:03:66:37:cc:25:06:1a:3d:
22:fa:00:7f:24:bd:bb:c6:6c:a4:fc:ac:e8:be:a1:
30:62:22:00:c4:c8:07:a3:34:4f:89:b7:e9:cb:1a:
31:14:84:92:58:7f:c3:d8:79:40:62:7d:4e:48:40:
9f:83:95:da:ab:5b:3f:8d:c0:eb:53:80:9c:48:1f:
a5:4b:ce:ca:c7:ff:19:64:b7:fd:5d:3c:35:f4:b6:
35:b8:a1:9f:71:e7:47:9e:7c:aa:da:04:26:16:e8:
e2:0f:6a:99:9e:c5:3c:eb:ed:20:af:0e:5d:c9:b4:
d1:26:89:a3:59:a3:16:96:5e:59:34:80:3b:25:22:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:94:4A:E7:5B:26:B5:58:80:88:C5:D6:92:DA:05:91:DB:F4:B2:12
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:89:67:22:40:6a:cb:08:2d:f1:e0:3e:b0:46:a7:30:ef:63:
4b:19:62:67:e7:08:ea:ef:68:fb:fe:48:0e:92:47:cb:a1:e7:
57:60:37:52:6a:ca:7c:c2:df:b0:aa:4b:71:2b:54:33:09:81:
5e:49:6b:1a:b8:7b:ce:33:6f:74:c8:20:88:5d:e6:0c:88:1c:
ff:3a:f3:af:a9:58:1e:70:92:6f:47:cf:c7:91:f8:a5:22:26:
43:95:be:09:66:1d:f5:cb:db:a6:d6:a0:12:0f:45:cc:25:a1:
d0:62:4f:88:94:57:ea:f8:b4:ae:18:05:4e:5b:c1:93:f2:6e:
48:d5:6e:e4:62:ce:0f:d8:6a:12:1f:08:6a:14:a3:57:a5:b5:
94:f6:ae:d7:88:e1:c8:75:4f:a8:79:7f:62:cc:62:74:f8:f2:
e9:4b:18:9d:b9:5e:af:b3:78:47:e2:69:49:64:8e:d8:38:75:
6d:6e:bb:68:0b:98:05:22:ea:0b:6d:a4:cc:ee:27:42:7b:bc:
ee:8a:dc:a7:28:e2:39:45:72:01:09:90:40:81:84:15:f1:ba:
9d:58:26:f3:48:9c:c6:4b:b3:d9:24:e1:44:b7:5c:41:81:c7:
6b:87:24:53:40:4b:12:3e:76:1d:97:e7:b2:6c:3e:cf:d2:b8:
3b:e2:e6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:44:36 2025 by rpki-client