Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
File: nyjbpUvBou6fd-Br-AglbdyTh-g.mft (raw, json)
Hash identifier: e2W10QBhKwWIHk3QMCK7BVFdC+1mPLIGzwpduKH1yJ8=
Subject key identifier: B5:8F:91:14:83:4A:34:90:DD:AF:B4:A4:CE:A7:B7:8D:E4:78:94:75
Authority key identifier: 9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
Certificate issuer: /CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Certificate serial: 0196D0D0271F0F284B44FF3B93A5281CC236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
Manifest number: 0555
Signing time: Wed 14 May 2025 22:00:24 +0000
Manifest this update: Wed 14 May 2025 22:00:24 +0000
Manifest next update: Thu 15 May 2025 22:00:24 +0000
Files and hashes: 1: nyjbpUvBou6fd-Br-AglbdyTh-g.crl (hash: +bmBY4O8xSdMc9KPwoH52FvP3FL3eEIJ8gzrHf0zeis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:d0:27:1f:0f:28:4b:44:ff:3b:93:a5:28:1c:c2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Validity
Not Before: May 14 22:00:24 2025 GMT
Not After : May 15 22:00:24 2025 GMT
Subject: CN=b58f9114834a3490ddafb4a4cea7b78de4789475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:8d:4f:be:86:c6:88:72:64:c0:49:5b:32:
b0:2b:51:2c:b0:d3:94:96:f3:1f:e5:95:35:80:c0:
38:2e:f4:27:3a:e7:78:d4:a7:99:6a:bf:e0:a8:03:
dc:86:c5:8e:63:6f:d5:2c:c3:b1:e5:ea:63:55:67:
22:70:27:f6:c1:51:6c:d3:fd:0a:4d:cb:72:2b:12:
16:c7:8d:ef:61:1c:c5:15:22:f5:e0:7e:54:d2:3a:
3b:44:f2:74:c8:0a:19:9e:eb:1a:bb:86:16:fe:c4:
fe:36:5e:81:91:2c:d1:a3:41:0b:f1:ff:f1:bf:fb:
ad:3b:96:c5:53:04:3c:ca:ab:b8:1a:da:c8:e7:28:
31:8a:0a:8a:59:f0:ff:ff:44:da:ff:2c:7d:8a:8e:
cd:8c:f8:a5:80:3f:c0:ed:d6:03:7e:fe:b3:20:ab:
2f:d6:26:6c:dd:f8:46:09:54:87:a3:d0:3a:78:35:
31:8d:15:b4:a9:32:ed:dd:71:08:2c:8d:bb:10:11:
ac:68:4c:97:ad:f5:c3:57:a3:53:06:1a:a8:a6:cc:
a6:31:eb:7a:b0:09:24:b4:d7:d1:7c:c0:58:b8:44:
3a:f3:17:5f:c3:e4:94:94:f2:9b:bb:c9:b2:24:c9:
e9:23:3b:94:0e:df:21:7a:96:58:92:df:6d:6f:3a:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8F:91:14:83:4A:34:90:DD:AF:B4:A4:CE:A7:B7:8D:E4:78:94:75
X509v3 Authority Key Identifier:
keyid:9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0e:c0:16:96:7d:9b:a0:35:fb:5a:f1:7a:8e:2c:d9:de:f4:
bb:f9:81:04:93:19:7b:e5:d1:b9:e8:ae:44:1c:60:48:27:82:
92:af:dc:dc:ee:95:17:2a:cf:f2:27:f3:c5:34:44:a7:d9:f8:
4b:86:2b:ba:d4:e1:94:48:f7:ce:b4:71:24:b3:40:7f:61:e9:
ed:a0:04:8c:3d:16:ff:64:52:ba:44:c6:79:42:d5:aa:1f:a3:
c2:94:5c:4e:25:f3:0b:44:75:2e:86:d5:eb:ce:55:65:c7:15:
72:83:48:39:43:cf:f0:f6:ed:af:53:45:7c:c9:6c:0b:d5:6f:
f1:4d:e2:a6:3f:2d:94:de:ca:24:b8:bb:7b:5d:c5:88:dd:4d:
a3:ea:e9:8c:b9:c7:e2:db:8c:b5:f0:45:07:3d:0b:83:fc:8f:
05:c8:79:f5:0c:69:16:89:f3:ae:d6:d6:f7:98:d6:c9:4d:91:
20:d7:81:83:ae:37:eb:8a:25:41:05:62:4c:d8:56:e3:0f:51:
26:de:0b:d7:92:1f:45:ad:98:ce:75:13:06:72:5a:29:82:7d:
c2:c0:5f:11:44:fd:a2:5f:13:c4:d8:07:7f:d2:41:e9:3f:f5:
81:6d:6d:b3:f7:f1:c6:64:65:bd:d6:4e:2d:fb:95:98:d5:49:
4d:a9:74:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 04:14:48 2025 by rpki-client