Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: MgwJlc3eodpe3xrbOJ7vDLFXa78ipF/qG8r5rEhs29E=
Subject key identifier: 2D:23:EC:42:7F:AD:7C:D5:E9:4F:AF:81:6B:2B:ED:83:54:CD:F8:5E
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 0197B890319D5E55F508C4917CFEDE02DCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0BF7
Signing time: Sat 28 Jun 2025 22:02:26 +0000
Manifest this update: Sat 28 Jun 2025 22:02:26 +0000
Manifest next update: Sun 29 Jun 2025 22:02:26 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: q0Q565eJDdbIL833XpkyQ0P2j0MFdlgtPmXyYIAV50o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:31:9d:5e:55:f5:08:c4:91:7c:fe:de:02:dc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Jun 28 22:02:26 2025 GMT
Not After : Jun 29 22:02:26 2025 GMT
Subject: CN=2d23ec427fad7cd5e94faf816b2bed8354cdf85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:dc:44:1d:e6:1e:de:42:fe:71:7b:82:6e:
7c:10:7e:0c:1d:f1:3b:c6:6a:11:ba:be:72:35:01:
f5:b6:57:2d:22:d7:49:8a:d9:3f:0e:fc:7d:6c:05:
b6:fe:bf:f7:cc:99:c5:b6:78:21:1a:40:3b:7e:e8:
bf:90:e8:94:db:e2:c5:eb:cf:b4:ac:0c:f0:ea:ab:
52:04:eb:51:f6:bc:04:77:2c:93:0a:28:76:fd:6c:
6e:e4:88:86:28:6b:97:9c:3e:18:c2:df:57:24:6b:
c1:4f:27:97:83:7b:0a:fe:44:84:32:24:6f:43:7d:
8f:22:a9:ba:42:bf:16:66:4a:de:27:bf:54:a2:5c:
6d:99:17:8f:8b:f1:c6:5e:08:64:80:7e:2f:e3:e6:
0a:1b:d7:48:4e:da:bd:3c:8a:c8:10:1e:42:02:e7:
be:cf:74:52:72:bb:f6:5c:12:fe:2b:4b:94:ab:68:
d2:c1:c6:6b:92:ff:31:0d:91:7f:b1:e0:91:b4:85:
8d:fb:1b:33:57:c8:df:10:54:5d:13:83:18:80:0a:
7e:a8:a9:47:8d:e8:5e:2f:97:59:6b:52:2b:08:cc:
06:5c:f7:82:a4:90:e0:02:b1:f1:e1:98:a0:9a:a8:
89:73:05:29:d5:bf:6e:db:e4:26:23:cc:9a:7f:fd:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:EC:42:7F:AD:7C:D5:E9:4F:AF:81:6B:2B:ED:83:54:CD:F8:5E
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:51:4b:28:76:0d:6d:63:ca:3f:0c:64:9e:7a:15:2c:36:22:
04:e7:4f:ac:98:26:b2:8f:39:94:5e:21:84:96:ca:61:df:be:
8c:e9:0a:6f:81:d0:fb:54:ea:22:dd:6a:fb:9d:d5:92:0c:3c:
4e:f9:2b:e8:01:8f:9f:1a:ee:37:ff:b6:5e:7f:65:44:fc:64:
cf:aa:40:27:17:77:6f:ca:cb:41:d7:cb:65:c9:09:45:fb:8b:
01:0d:2b:3a:c6:e0:d5:41:9a:a4:ee:a6:64:8b:8b:95:78:9f:
ac:92:82:90:cc:01:33:81:fa:d3:43:ca:ee:a4:55:03:84:4e:
83:87:28:75:82:20:c0:41:0f:1d:59:9f:8e:48:c4:f9:5c:0a:
72:3f:0f:b0:ee:6c:c7:4b:64:96:76:32:b8:ea:89:fd:4c:3d:
c9:cc:51:3e:17:22:14:52:f7:fb:d8:a4:ca:09:e5:e9:d0:23:
76:f7:a1:a1:5b:6d:8d:bf:aa:b4:a2:37:47:46:2d:1e:ec:7b:
d4:34:49:9c:11:06:1c:1e:b1:8c:6a:68:3e:45:fd:42:3c:a2:
20:7e:bf:44:ca:53:84:ef:c4:8f:05:21:56:ee:b1:f4:bc:83:
ee:58:c7:57:bb:e6:a4:35:8a:70:f1:1e:ff:d2:24:a7:1a:4b:
31:87:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:01:11 2025 by rpki-client