Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: QA7544VD8lTUT1RcGi4c0vyFRrhsB06zoAVFdQicGvU=
Subject key identifier: 45:B0:B8:65:19:1E:27:8A:5C:8E:D4:CA:55:AD:82:20:5C:B5:8F:59
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019771F653AB7C89A36DE941CA6D3928FE67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 0D2E
Signing time: Sun 15 Jun 2025 05:00:58 +0000
Manifest this update: Sun 15 Jun 2025 05:00:58 +0000
Manifest next update: Mon 16 Jun 2025 05:00:58 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: JHue0wlf3P/QShUVpyalRcxwO2iCb5bggzFaqVAUwQQ=)
2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:53:ab:7c:89:a3:6d:e9:41:ca:6d:39:28:fe:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Jun 15 05:00:58 2025 GMT
Not After : Jun 16 05:00:58 2025 GMT
Subject: CN=45b0b865191e278a5c8ed4ca55ad82205cb58f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:40:5a:71:00:76:c6:1c:00:2d:1f:86:80:
07:67:8c:22:19:0f:a3:6e:29:73:78:d0:80:9a:04:
f4:b2:31:56:fb:44:ff:3b:46:3c:61:50:17:8e:94:
a5:99:cf:34:9b:8b:0a:dc:22:9b:7e:78:77:30:20:
2d:f2:f8:95:f1:a1:c6:78:5c:81:91:e2:32:ab:1b:
24:2b:e1:ed:7d:80:bc:99:63:7b:2e:91:e0:49:6c:
00:fa:96:89:f6:e7:4a:5a:7b:3b:87:ab:40:1d:52:
22:f5:0e:2b:f0:77:4d:3e:f3:36:79:72:8e:ad:6d:
ab:3b:d6:67:95:fc:aa:a7:b5:cc:f7:11:54:1c:dc:
20:3c:3f:a3:be:27:85:95:31:b5:1f:a0:37:f7:f1:
52:f8:7f:96:07:c2:e8:0f:8c:16:40:76:9b:d4:79:
19:96:25:fb:43:63:3a:00:9e:89:92:65:cb:69:8d:
f8:54:f3:19:85:39:7d:75:2a:18:7c:58:c6:6c:1f:
a4:42:a0:d6:c3:1b:58:05:1d:46:61:39:50:e1:4c:
65:44:b1:03:df:59:8c:2c:70:79:e2:f0:2c:eb:49:
4e:0e:12:31:76:c1:88:f2:ea:73:45:ce:da:1e:1a:
9b:f5:9e:e1:62:d0:48:b7:bf:72:22:af:00:ba:70:
b9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:B8:65:19:1E:27:8A:5C:8E:D4:CA:55:AD:82:20:5C:B5:8F:59
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d0:72:39:1d:08:b9:76:d7:f1:9b:76:74:35:87:a5:eb:11:
df:ee:f7:0d:07:3d:0f:2d:58:2d:cf:cf:dc:de:8d:2c:7d:73:
ed:6d:98:7d:51:54:27:5b:65:74:56:38:cd:78:92:9f:c7:81:
85:98:3b:db:66:b1:8e:71:4d:63:ba:de:75:40:9e:24:8f:67:
b0:cd:b1:34:e0:79:cd:7b:4e:40:fc:30:b1:a0:05:b6:74:64:
5c:76:1c:2d:c8:0d:20:d2:2c:ce:58:13:77:06:34:3f:5f:e1:
22:62:0d:0b:72:af:1b:e3:d3:b0:74:3b:e2:0f:8d:bf:15:46:
aa:64:76:f9:61:5e:e2:6e:49:dc:82:5a:9e:ae:fe:58:8d:c5:
35:86:ee:56:88:0c:11:d7:bf:08:11:26:7f:19:7a:94:f4:94:
4d:43:aa:1b:3a:ac:94:69:4e:0f:68:45:83:ba:8a:b1:74:52:
3c:17:33:90:8d:a3:57:b6:47:62:92:d0:8c:6b:f5:95:b4:cb:
fa:60:8d:4e:64:dd:44:da:5f:ff:71:e0:02:92:9e:ef:02:97:
fb:f2:6c:b3:7c:f3:de:05:d3:43:37:3a:03:48:5b:42:0e:c8:
b0:b7:b3:50:7c:16:63:1e:46:30:73:70:17:bf:a0:42:b9:19:
18:8d:94:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:38 2025 by rpki-client