Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
File: NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json)
Hash identifier: aR3K7IEKsBEYTuge2Tnooq4qtHGoShyK1/qj5hDj5bE=
Subject key identifier: 78:F8:4D:58:AA:BA:9D:7A:56:7C:A0:C4:3D:00:ED:F3:E4:89:9E:20
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Certificate issuer: /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial: 0196C26FCA736D3BFEC180E0DD84BD172BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
Manifest number: 0570
Signing time: Mon 12 May 2025 03:00:28 +0000
Manifest this update: Mon 12 May 2025 03:00:28 +0000
Manifest next update: Tue 13 May 2025 03:00:28 +0000
Files and hashes: 1: 8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa (hash: mtFporZGWALvI1bFzQb9Xpsj858BjBk/glbS/pmBQi4=)
2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: DweKewuZE3CJj50uZn8e7J4EanZbiFM67+KuiyiWzrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:ca:73:6d:3b:fe:c1:80:e0:dd:84:bd:17:2b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Validity
Not Before: May 12 03:00:28 2025 GMT
Not After : May 13 03:00:28 2025 GMT
Subject: CN=78f84d58aaba9d7a567ca0c43d00edf3e4899e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:14:4a:0d:e6:13:8a:13:07:4e:6b:cb:6c:
3c:3a:d4:b7:bf:85:57:f2:17:dc:ce:2c:d4:01:a9:
ca:99:79:39:40:3d:20:1f:a2:c1:5a:f1:07:0e:e1:
11:1b:41:7a:96:fb:0c:ab:af:d1:bb:25:36:e3:fc:
76:91:81:21:93:31:8e:9e:11:e1:7f:4e:ee:92:86:
e5:99:f6:c5:18:8a:08:f5:b3:90:9b:c7:55:51:ee:
8d:fb:54:41:39:73:3a:ea:eb:9a:7f:27:c0:7b:ed:
2c:d0:a2:ad:3c:c5:52:ca:c9:2b:05:10:79:b0:b5:
7a:f4:02:1f:de:fa:9f:44:d7:2f:29:45:bd:29:50:
45:e1:7c:75:38:30:fe:57:4e:ac:14:d2:f1:68:f1:
ce:21:b7:48:aa:d9:f8:98:4b:1d:9d:cb:84:52:7f:
e3:5c:f4:59:ae:9e:a1:0e:07:32:46:1b:95:5d:31:
5f:08:fd:d4:db:43:db:9c:81:07:f4:0a:2b:ba:d4:
36:60:6a:28:89:ec:88:5f:2a:bb:cb:c9:8a:fb:fe:
72:5c:db:e9:34:2b:89:59:62:c4:35:6d:c0:8f:50:
ee:f0:b7:4b:d5:6d:fa:7a:03:8a:32:fa:d1:31:55:
78:84:6e:1a:43:8b:67:98:73:66:d1:35:57:cc:66:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:4D:58:AA:BA:9D:7A:56:7C:A0:C4:3D:00:ED:F3:E4:89:9E:20
X509v3 Authority Key Identifier:
keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c5:ca:7a:c1:bf:9b:5e:c9:8f:3b:ce:92:bb:8e:3b:de:04:
9c:8c:b1:fc:98:f6:71:f8:c3:83:09:86:69:e4:13:7a:6a:d9:
cc:2c:61:90:92:c1:cb:71:04:38:94:6a:56:9d:8d:e7:20:2c:
7f:72:3f:1d:9c:75:ce:5e:69:b0:2f:52:0a:98:b0:3f:d1:e2:
97:8c:9c:9a:78:7a:c2:de:e3:ae:c4:95:bb:cd:76:e4:f6:57:
06:5b:26:27:39:75:1e:f7:a2:9a:d5:d4:75:02:ca:73:a1:14:
56:52:94:ce:c2:7c:61:d1:57:53:cf:51:28:a4:94:0b:58:8a:
84:29:80:48:86:0b:39:90:7f:ac:68:3f:b1:57:5c:6a:b8:f5:
b1:d1:49:a2:1e:b2:72:8b:fc:c9:69:b5:05:50:78:e7:e7:89:
68:c2:4b:19:95:98:fb:dd:1a:d6:f5:2e:a4:fa:10:27:8a:a8:
f0:92:d9:da:76:89:3d:ec:40:4b:a7:6b:0b:77:66:3d:d7:95:
9f:2a:e7:ee:5c:ce:4c:b0:b8:d6:7b:de:27:3c:f0:2b:7a:50:
16:e7:71:c7:15:ac:08:d1:78:16:ed:a2:69:aa:94:da:84:9e:
00:03:b4:c9:09:c6:83:e8:41:69:5e:6d:9a:fc:ff:c3:8e:34:
b7:6d:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:09:52 2025 by rpki-client