Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: Kncpvw/PxMRlhfpgQXaTVLwImtZQYrWDfnCi1w1+aoU=
Subject key identifier: 4B:BB:9A:F0:EF:C2:92:B4:09:8C:88:17:B8:48:BC:15:15:06:D8:F0
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 019675D557898967AB1C09947BF021F6A87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 06:00:37 +0000
Manifest this update: Sun 27 Apr 2025 06:00:37 +0000
Manifest next update: Mon 28 Apr 2025 06:00:37 +0000
Files and hashes: 1: ObbHotU_QnvsulgBzQaW4wh0HAk.roa (hash: mbgTfoasS2/JRLVjEdWRajTXVRhnW7d5YvctUH9mztI=)
2: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: 3UkyZchuoborud2XMgMf45cOkqj5Z4fZUpJKg/NkNIA=)
3: sLdQOZGVUyb44hu-OktavwbL-fA.roa (hash: 61zdCvV2SZ1HoaLvCC14jhWwxqjS5pgyZuPOqRzMG/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:57:89:89:67:ab:1c:09:94:7b:f0:21:f6:a8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Apr 27 06:00:37 2025 GMT
Not After : Apr 28 06:00:37 2025 GMT
Subject: CN=4bbb9af0efc292b4098c8817b848bc151506d8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:bc:d7:64:99:64:ae:b2:cc:cd:69:27:b3:
f3:13:60:58:ea:f6:da:f4:d0:15:b1:52:12:da:64:
02:ae:03:11:e4:32:22:4a:f5:c2:74:30:8d:7e:9a:
9c:1e:6f:be:74:5b:f0:6a:4b:bc:5f:cd:3e:c0:16:
f7:4d:de:f1:12:38:cd:4c:7e:3a:b1:54:78:60:e6:
ed:25:ce:d7:e2:fc:5a:81:25:8a:ea:57:5d:61:dc:
bc:fe:f3:69:49:c8:43:43:18:1f:44:f3:33:d5:a2:
ae:cd:5f:9c:8f:3e:84:85:bd:9e:ef:75:3f:d1:c5:
a5:dc:25:3e:9c:9c:5a:79:8c:55:c0:e1:01:18:27:
c5:0c:7f:18:0a:0e:0c:8a:92:71:1d:e1:d9:75:88:
8c:ff:8d:98:55:eb:87:ff:86:44:84:42:c4:e8:2b:
0a:20:1e:ee:20:98:8b:19:c9:e6:f0:f5:5a:f9:ad:
68:44:7d:ff:fd:0c:f3:e1:12:1f:e9:e5:70:ec:e2:
97:93:e7:0b:bd:a6:9d:18:89:bf:bd:58:d7:e2:71:
6f:d0:9a:f9:53:fa:c1:46:09:81:1b:b0:3c:54:96:
b7:59:50:28:0b:62:2e:ac:b4:9c:e9:23:24:3d:2a:
7e:d9:0a:26:17:c3:b3:1e:38:bd:81:f1:cc:61:5d:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BB:9A:F0:EF:C2:92:B4:09:8C:88:17:B8:48:BC:15:15:06:D8:F0
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:33:f3:de:f1:09:fa:3d:0d:f0:7c:74:01:aa:4e:ec:b2:2f:
c1:e9:2b:af:e3:f4:e3:e1:18:46:af:9a:fb:12:29:1b:4d:97:
d3:ac:5a:ff:d4:2a:14:40:81:e6:69:4e:1c:85:4e:c9:59:be:
e2:53:c5:97:3e:42:8d:c9:c5:a5:5c:2e:55:64:96:92:45:3b:
0d:05:a6:68:73:4b:30:9f:ee:47:2e:d4:96:a5:9c:46:64:23:
52:43:7e:83:02:dc:14:83:81:32:16:c2:b5:70:9e:60:9e:5e:
13:60:45:bb:ea:52:5d:52:15:fd:1e:c3:21:47:2e:af:5d:ae:
97:6f:26:83:74:cd:ea:fd:d1:e2:12:6d:cb:70:92:62:b9:f8:
b4:ff:36:08:bb:90:b5:35:5c:9f:53:7f:8a:d3:8c:2b:be:73:
c3:40:42:59:d6:87:9d:fa:75:b0:21:23:ed:d1:16:f5:24:83:
f8:84:b4:66:36:a4:08:6e:f8:d7:b7:86:39:bf:31:f5:f1:5f:
f9:b6:d6:b2:4a:5e:c7:be:72:8e:7c:4f:b7:1f:09:11:4b:92:
31:2a:c7:08:3d:a5:11:75:54:0e:f0:34:0d:54:b8:3e:86:e0:
1f:47:09:b4:f9:04:39:49:6e:3b:2d:3c:ae:21:05:83:84:8b:
7e:ac:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:21:39 2025 by rpki-client