Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: pJ49XGZkaMA6i75Ymbu7kJFNF/6xyzZbhCVmEEDc/QY=
Subject key identifier: A0:0A:04:52:FF:C3:53:89:1D:73:D4:D9:66:75:4D:D4:B9:71:BC:A4
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 0196C15D60C6871A8E34355316A5B19C3F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0B77
Signing time: Sun 11 May 2025 22:00:44 +0000
Manifest this update: Sun 11 May 2025 22:00:44 +0000
Manifest next update: Mon 12 May 2025 22:00:44 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: 3xq3NbgfjjLsffPySV/r6EtwxfuoZ5dKOmjqNqPtGtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:60:c6:87:1a:8e:34:35:53:16:a5:b1:9c:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: May 11 22:00:44 2025 GMT
Not After : May 12 22:00:44 2025 GMT
Subject: CN=a00a0452ffc353891d73d4d966754dd4b971bca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:41:b2:d2:1c:58:59:96:1a:5a:07:c1:84:
6f:30:aa:d0:5b:25:28:21:ae:d5:e8:d6:0a:0d:6f:
8b:c7:32:7c:6b:e2:37:c4:3e:67:b1:24:5e:a7:6c:
67:d9:bb:e4:4c:1b:4b:8a:69:98:17:34:aa:bc:ed:
f2:a0:59:3a:c2:01:c3:c1:eb:b8:0f:33:0f:6e:51:
d2:a7:fb:2f:00:d0:bf:20:83:8c:4f:64:0b:0f:75:
88:bb:3d:28:b2:86:f4:77:6e:67:ad:80:3d:6d:30:
71:31:17:3c:e8:5a:9b:24:d1:10:0f:97:d4:b1:9e:
88:f8:34:e4:0b:ed:2d:57:58:f7:b0:d9:f9:1d:d2:
30:0d:de:ff:37:cd:9e:8c:00:0e:05:07:d2:46:ae:
17:6d:f8:6d:ef:55:61:5c:57:9a:a4:8b:90:07:54:
02:a3:8d:82:d8:10:3e:b5:0b:a6:18:95:37:d8:13:
65:e8:12:e1:e8:97:ae:fa:e0:83:eb:77:35:78:6d:
bf:62:00:f8:5a:ec:e3:63:c2:64:a9:4a:a9:13:79:
0b:3d:da:16:c0:9a:13:8f:53:13:d7:f4:7b:c0:59:
d5:95:61:bf:1a:13:fb:26:3e:93:b4:1d:cc:8d:f6:
af:6d:f3:d7:6e:ff:71:14:15:84:49:56:f6:e6:05:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:04:52:FF:C3:53:89:1D:73:D4:D9:66:75:4D:D4:B9:71:BC:A4
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:df:51:c9:69:d6:4d:58:31:2d:9b:ad:ab:c8:85:b5:d6:c8:
b0:49:40:d1:19:d0:8a:97:45:3f:d6:cf:31:f6:7b:83:50:f9:
d3:e3:90:ec:b7:91:92:f8:b2:39:80:e9:39:71:81:a8:e7:af:
61:22:e1:18:1a:99:9e:c4:55:e1:58:06:74:0e:03:72:30:ee:
a0:e0:7a:ee:21:6c:56:f2:ec:1f:b6:42:47:e7:e8:dd:44:60:
d8:f1:ae:4c:31:56:56:b9:db:c2:de:3e:b6:f5:d9:a1:ff:ce:
7c:46:df:0d:95:31:55:84:ad:81:44:60:68:24:e8:d1:87:8d:
4d:99:0d:a4:06:7d:45:d5:a5:e2:15:6b:98:09:c8:6b:84:44:
ec:8d:72:4b:a3:4a:74:11:76:23:53:ab:0d:9b:2e:82:c2:5d:
40:34:1b:49:c1:86:9f:ab:70:9c:a1:e7:60:33:84:b3:00:fa:
52:30:3f:68:62:d6:09:53:23:a7:2f:bd:69:a6:a9:5f:99:10:
0e:9d:35:d7:60:41:7d:8e:70:9c:a2:3d:86:b7:d1:87:83:c8:
3f:d0:8f:e3:08:52:03:f7:18:cc:10:64:1a:2c:d3:d4:bc:dd:
8c:57:43:a4:a0:65:74:74:57:dc:59:16:56:a5:68:42:41:a6:
7d:46:c7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:26:49 2025 by rpki-client