Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: /ChsIFtdhZzFZewh6aKCAyrGSVv3KOeZOTE75pNcPWQ=
Subject key identifier: 3E:DD:46:3D:A6:26:F0:DD:C7:34:02:93:56:95:21:26:59:E7:98:6B
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 0197B7B36EDEE28FD2BBB935D725A619149F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 15C9
Signing time: Sat 28 Jun 2025 18:01:19 +0000
Manifest this update: Sat 28 Jun 2025 18:01:19 +0000
Manifest next update: Sun 29 Jun 2025 18:01:19 +0000
Files and hashes: 1: 1HPdDAhp2D5icqchW6FaN1f6wQk.roa (hash: aBqK8vPirMFUVR5mg8q9qqfP+HEENImw1WU9wmDpmLo=)
2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: IpZFeQZPA52d8kCUbIOLvF35sec0t5l1zivaoizseGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6e:de:e2:8f:d2:bb:b9:35:d7:25:a6:19:14:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Jun 28 18:01:19 2025 GMT
Not After : Jun 29 18:01:19 2025 GMT
Subject: CN=3edd463da626f0ddc73402935695212659e7986b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:c1:b5:98:5d:00:3c:f1:3a:fb:90:4b:4c:
fb:a9:ef:e0:eb:df:a2:77:b5:b0:2f:9d:b9:9b:37:
a8:f1:eb:13:21:68:d5:ea:79:cf:d2:3c:b1:fb:fb:
42:e8:5c:f2:8b:93:1b:3a:d3:b0:a4:2b:cc:d0:41:
aa:9c:36:09:6f:c4:04:06:27:0c:ff:e2:8d:d5:e0:
05:72:c7:42:5e:b4:4b:27:46:69:bd:48:03:47:e9:
0f:d8:36:2a:91:00:00:de:83:05:ed:bf:23:ce:d8:
f8:97:8f:6f:67:58:fe:45:7d:8f:64:43:cf:d2:ff:
bd:3f:3e:bb:f3:70:0a:09:14:d5:42:f6:e0:5f:c5:
7c:1d:fd:7a:3c:16:85:64:07:3a:3b:db:75:7b:5e:
ca:ad:14:11:c9:d6:e6:9d:2a:0e:b0:2a:fe:14:22:
05:7e:2f:27:ab:c3:c1:37:08:bf:7c:a2:32:d6:f1:
54:02:cd:de:27:d2:fc:14:1f:d9:51:5e:ab:68:06:
f5:b8:31:0e:13:01:aa:ab:5a:65:93:80:b8:b6:e2:
44:75:2d:ad:d0:5c:6b:3d:c8:b9:02:a8:71:00:55:
6e:f5:ea:65:28:52:31:b6:30:1c:94:e5:63:39:97:
aa:2d:58:0c:5f:e3:b1:7f:29:2a:d2:fb:83:83:4d:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DD:46:3D:A6:26:F0:DD:C7:34:02:93:56:95:21:26:59:E7:98:6B
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:81:6a:91:f3:ef:e8:f6:e7:e8:77:42:ee:2a:e2:69:0f:85:
83:06:4f:64:25:d5:d5:62:11:c9:af:bc:0c:b0:12:dc:19:57:
a7:1a:38:de:bb:1f:35:01:6d:eb:96:7b:d4:fc:3c:4d:2c:e9:
ae:71:fb:c8:6a:39:c0:84:12:07:8e:da:2b:69:a6:d8:6d:54:
0d:c2:2a:cf:ea:28:99:b1:be:f2:ca:34:cb:88:b0:a4:86:cb:
b5:d5:3e:40:69:b8:85:52:40:46:72:ae:42:24:a6:31:90:a6:
4f:ed:18:1b:af:a0:b5:7b:86:a2:4c:4a:8b:ec:da:2b:dc:7d:
64:00:e2:1c:a5:a9:b0:2f:00:fa:56:e2:06:69:fe:a0:5a:22:
16:ca:e7:20:f8:9e:49:47:4e:2f:35:cc:d9:1c:17:8e:88:9d:
24:4a:4a:c2:c0:89:d7:ce:ff:b8:7a:4f:21:77:ee:e5:f1:4e:
0f:3c:86:25:b5:50:59:a5:8d:33:9d:a1:30:0a:ec:95:a8:6b:
3f:aa:8a:97:7e:6b:d9:2c:79:a6:fe:92:f0:99:ec:5d:73:f6:
11:a0:a6:0c:fe:53:a4:e1:cb:ab:3f:54:99:f7:4f:ad:0c:7c:
cf:85:9b:90:c1:b3:2f:f9:b0:99:63:da:19:3d:8d:da:78:ad:
83:9f:4d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:49 2025 by rpki-client