Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: zw5PLS6Pk87FnBOUGgZC80lFwlIZ5e1N8LLIRRJn6s0=
Subject key identifier: F6:D3:FD:4F:9D:B4:35:B6:71:E5:A6:BD:06:8F:7D:C9:EA:A2:95:4D
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 0196827E9CFB811C38B3A52F46340476BD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 0CB2
Signing time: Tue 29 Apr 2025 17:00:57 +0000
Manifest this update: Tue 29 Apr 2025 17:00:57 +0000
Manifest next update: Wed 30 Apr 2025 17:00:57 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: 0jmeJDhnxVfn3gJ8HFeuiiM4zs9eR/afN92ZkBPjJJM=)
2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:9c:fb:81:1c:38:b3:a5:2f:46:34:04:76:bd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Apr 29 17:00:57 2025 GMT
Not After : Apr 30 17:00:57 2025 GMT
Subject: CN=f6d3fd4f9db435b671e5a6bd068f7dc9eaa2954d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:3f:48:9c:ab:c9:c6:42:5b:75:2a:9c:52:
41:ed:15:3c:8a:1b:a7:6e:33:ce:b5:58:fe:50:6c:
18:90:1e:b7:9a:f9:53:dd:92:fe:4c:90:a0:c8:de:
18:34:06:8b:7a:69:cc:17:06:aa:31:71:ab:d5:cc:
18:61:47:f2:18:20:45:4d:fa:04:41:6b:37:e5:36:
1c:c8:d6:a5:af:fe:d2:1a:e9:e6:1d:ec:06:66:60:
ff:e5:94:bd:f4:5a:86:b9:09:3f:01:7d:e2:59:81:
6e:5f:bd:18:6b:1d:ff:87:a4:ac:06:e4:09:2d:ba:
72:88:50:97:e2:7e:6d:03:4f:1a:db:51:73:74:ec:
c8:0b:0a:01:ee:35:f6:38:35:6d:e2:4c:95:6e:15:
d3:85:73:ae:96:99:c0:76:24:04:68:7c:06:91:9a:
d0:17:69:b6:a2:34:87:28:07:d3:74:1d:fe:04:54:
50:3c:84:a8:8f:7d:37:16:1a:d3:a6:06:85:da:2b:
b0:df:ea:0f:e1:c2:fb:67:cc:fb:4e:54:aa:34:fb:
d4:f1:4e:8d:04:e7:11:d8:92:7b:a6:3e:76:a1:62:
a8:26:67:c5:53:ed:49:56:b7:7e:a3:9a:87:56:ef:
f6:49:8c:53:a1:75:1f:e3:82:2f:af:54:34:2f:dd:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D3:FD:4F:9D:B4:35:B6:71:E5:A6:BD:06:8F:7D:C9:EA:A2:95:4D
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:20:91:2a:94:77:b2:89:fb:b4:4f:11:95:db:fc:24:17:07:
3b:e2:66:72:80:2a:2e:76:af:59:c7:ea:37:c9:f2:21:71:d6:
b4:e2:e6:aa:cf:b7:24:11:85:45:d7:c1:fa:93:de:d7:ec:de:
a2:82:14:39:74:eb:ac:c9:3a:d0:05:97:15:30:73:33:5c:00:
46:0c:8e:ad:c3:33:f4:51:71:9f:bb:b0:8e:6b:0a:ae:58:94:
a4:67:fe:11:cc:2f:e2:ea:ca:c2:f9:ee:7a:ad:06:26:ae:12:
2b:71:b9:e0:29:a2:4e:0c:bf:08:f8:07:bb:d6:ed:7b:1f:34:
49:5e:db:2f:7d:e0:23:c4:bf:e7:78:cc:4e:e9:6c:1a:cb:ba:
c2:87:98:d9:bd:5d:bc:a8:4b:ee:8a:a5:ca:ce:0c:d3:6a:7e:
b1:a1:b6:2e:11:4e:37:51:71:b0:22:cc:93:1f:55:8f:30:55:
de:3a:9f:24:f8:0e:90:61:df:ae:68:01:40:f3:a9:37:f3:e6:
3c:ec:4e:7a:df:55:97:a5:40:ce:aa:ab:ab:33:00:1c:8a:92:
d7:04:a0:da:c9:da:20:b6:2d:ce:24:65:82:a4:6d:87:34:00:
fa:9f:72:b6:b8:08:1e:be:79:4b:06:4b:a5:fb:f0:d1:ad:5c:
36:16:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:34:01 2025 by rpki-client