Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
File: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft (raw, json)
Hash identifier: A89dBIaXhRClQoK46C4LHdpDPiuu9+wIOBVrjZrdyNo=
Subject key identifier: E9:04:DA:B2:9A:43:FE:18:6E:4F:A9:BA:12:9A:61:E1:3B:1B:B5:01
Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
Certificate issuer: /CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Certificate serial: 0196C0138AC087758ED88DF709E87FCDD8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
Manifest number: 0219
Signing time: Sun 11 May 2025 16:00:28 +0000
Manifest this update: Sun 11 May 2025 16:00:28 +0000
Manifest next update: Mon 12 May 2025 16:00:28 +0000
Files and hashes: 1: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl (hash: PtGNjDX4bnJz2S86SUzC8Rqp4zXya35VD4lG7kohRM4=)
2: dbO_KM950SVoV4qdoDfieNWIw0s.roa (hash: DCE7AE8Wo5HEULV6TjwRejnJ6LMRCD866TcEBq5yg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:8a:c0:87:75:8e:d8:8d:f7:09:e8:7f:cd:d8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Validity
Not Before: May 11 16:00:28 2025 GMT
Not After : May 12 16:00:28 2025 GMT
Subject: CN=e904dab29a43fe186e4fa9ba129a61e13b1bb501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c3:6e:00:2b:ff:ff:14:a7:e5:fb:19:8b:df:
ec:60:f0:7e:ab:20:05:8d:03:85:d4:1c:eb:a9:f4:
cd:6d:ec:07:7d:93:a8:5f:c4:0c:e3:70:4a:78:7a:
6a:d6:6f:a5:bc:6a:29:c0:43:c5:a2:bc:db:cf:64:
38:d1:1f:9e:3b:8e:3f:96:97:4c:2d:d7:e1:14:6b:
bc:5e:36:55:98:93:9a:82:34:2d:a8:f0:89:f9:9a:
2f:f4:f1:4e:a0:56:d2:89:36:b9:76:3f:b0:ce:dd:
45:1a:b3:36:05:01:96:c7:b2:1e:db:d4:83:29:89:
e0:27:f2:fa:d5:c7:35:8c:c7:bb:67:0e:2d:45:b9:
4b:f8:be:9c:3e:26:03:2d:f1:87:42:a6:05:10:49:
71:a1:96:c5:0d:e1:fa:bb:0d:9d:d1:ee:8c:0b:44:
11:81:f2:e9:d4:25:25:18:bd:4b:3a:c2:b6:b1:38:
fb:0c:6e:0a:ad:01:74:1b:fb:52:c6:c2:5b:76:65:
9b:1a:2c:3b:a5:61:7c:dc:99:30:bd:af:2d:2c:66:
46:73:fe:aa:1f:17:8a:6a:2c:dc:e9:9f:06:70:7d:
47:4a:39:f6:1e:c2:dc:31:e9:44:44:74:82:e7:c2:
e6:e2:31:a5:57:73:fe:3e:3e:b7:81:9f:da:aa:4f:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:04:DA:B2:9A:43:FE:18:6E:4F:A9:BA:12:9A:61:E1:3B:1B:B5:01
X509v3 Authority Key Identifier:
keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6d:b5:4f:5f:0a:1b:16:9e:3f:f9:77:7a:1a:e9:f2:54:7c:
a7:d3:3d:da:fe:61:9d:74:09:b9:50:91:b1:42:75:c5:02:86:
0b:19:ea:30:27:3f:08:46:86:e0:9b:9f:07:5b:c9:9a:11:c5:
2a:ff:ce:58:06:d2:4b:55:5d:4d:c3:47:f1:28:21:c8:56:67:
e1:8f:f6:a9:8c:1b:78:42:82:33:1f:cc:73:b9:3e:f6:c6:c3:
ee:e7:d6:00:06:b6:0b:25:4a:b8:f8:6b:8e:0a:d7:b4:e9:12:
85:5e:f3:e0:4b:1f:5d:c1:03:d7:6d:58:39:75:ef:ce:ef:a6:
11:57:47:57:c7:d2:a4:c6:73:06:ec:ef:4d:17:99:b8:f2:81:
85:e6:d4:f3:95:ac:16:ef:70:07:17:09:d1:34:9d:2d:33:db:
bf:ed:19:0a:c1:04:8e:01:6e:15:f6:6c:f7:4c:2f:d6:84:4b:
e2:96:58:de:8d:ab:e2:6c:ed:9b:1a:da:82:49:75:43:9b:af:
87:ac:59:f9:8c:5a:c1:4b:1a:9b:1c:cb:bd:48:fb:85:f0:42:
54:e9:e8:59:97:56:69:9d:96:66:b9:a9:39:20:c5:14:e8:fc:
c3:63:a6:26:06:d9:d6:6a:41:cb:e5:24:d3:c3:29:f0:5c:61:
25:45:fb:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAE4rAh3WO2I33Ceh/zdj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjJiMmYwOTBhOTY3ZTBiY2FjZDE5ZjM5YWQyYTg4NzI2
M2I1MjQwHhcNMjUwNTExMTYwMDI4WhcNMjUwNTEyMTYwMDI4WjAzMTEwLwYDVQQD
EyhlOTA0ZGFiMjlhNDNmZTE4NmU0ZmE5YmExMjlhNjFlMTNiMWJiNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58NuACv//xSn5fsZi9/sYPB+qyAF
jQOF1BzrqfTNbewHfZOoX8QM43BKeHpq1m+lvGopwEPForzbz2Q40R+eO44/lpdM
LdfhFGu8XjZVmJOagjQtqPCJ+Zov9PFOoFbSiTa5dj+wzt1FGrM2BQGWx7Ie29SD
KYngJ/L61cc1jMe7Zw4tRblL+L6cPiYDLfGHQqYFEElxoZbFDeH6uw2d0e6MC0QR
gfLp1CUlGL1LOsK2sTj7DG4KrQF0G/tSxsJbdmWbGiw7pWF83Jkwva8tLGZGc/6q
HxeKaizc6Z8GcH1HSjn2HsLcMelERHSC58Lm4jGlV3P+Pj63gZ/aqk/oFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkE2rKaQ/4Ybk+puhKaYeE7G7UBMB8GA1UdIwQY
MBaAFDcisvCQqWfgvKzRnzmtKohyY7UkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlLeThKQ3BaLUM4ck5HZk9hMHFpSEpqdFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82MGRlNDYtNTk3NC00YzQ1LWJlMzYt
OGRjZGI5OThmZDVhLzEvTnlLeThKQ3BaLUM4ck5HZk9hMHFpSEpqdFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82MGRlNDYtNTk3NC00YzQ1LWJlMzYtOGRjZGI5OThmZDVh
LzEvTnlLeThKQ3BaLUM4ck5HZk9hMHFpSEpqdFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT221T18K
GxaeP/l3ehrp8lR8p9M92v5hnXQJuVCRsUJ1xQKGCxnqMCc/CEaG4JufB1vJmhHF
Kv/OWAbSS1VdTcNH8SghyFZn4Y/2qYwbeEKCMx/Mc7k+9sbD7ufWAAa2CyVKuPhr
jgrXtOkShV7z4EsfXcED121YOXXvzu+mEVdHV8fSpMZzBuzvTReZuPKBhebU85Ws
Fu9wBxcJ0TSdLTPbv+0ZCsEEjgFuFfZs90wv1oRL4pZY3o2r4mztmxragkl1Q5uv
h6xZ+YxawUsamxzLvUj7hfBCVOnoWZdWaZ2WZrmpOSDFFOj8w2OmJgbZ1mpBy+Uk
08Mp8FxhJUX7Vg==
-----END CERTIFICATE-----
Generated at Sun May 11 22:50:18 2025 by rpki-client