Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: U5lTBSN2DFe+dSmA1L6uqYebaaoToiUIAyGh6i99Fg8=
Subject key identifier: BF:BE:51:D2:5A:3A:C2:64:E7:44:BE:75:78:2E:3C:71:C3:B5:D1:3B
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 01976D0672AE5504436FDDA7CEE929180F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 06:00:28 +0000
Manifest this update: Sat 14 Jun 2025 06:00:28 +0000
Manifest next update: Sun 15 Jun 2025 06:00:28 +0000
Files and hashes: 1: ObbHotU_QnvsulgBzQaW4wh0HAk.roa (hash: mbgTfoasS2/JRLVjEdWRajTXVRhnW7d5YvctUH9mztI=)
2: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: 5HX5DzwUsRNyHvi5ejbCebBcjMiCqjnkLiAcdj4wvLQ=)
3: sLdQOZGVUyb44hu-OktavwbL-fA.roa (hash: 61zdCvV2SZ1HoaLvCC14jhWwxqjS5pgyZuPOqRzMG/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:72:ae:55:04:43:6f:dd:a7:ce:e9:29:18:0f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Jun 14 06:00:28 2025 GMT
Not After : Jun 15 06:00:28 2025 GMT
Subject: CN=bfbe51d25a3ac264e744be75782e3c71c3b5d13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:4c:f3:84:3a:96:01:58:b7:99:09:b9:75:
87:21:63:c6:bb:d5:95:c3:6e:2c:a6:5e:8b:87:fe:
2f:ce:cf:0d:10:49:f4:d8:35:61:be:c4:b8:84:cf:
cc:12:42:c9:a1:45:7b:55:09:80:82:33:53:b2:30:
b1:2a:df:50:bc:22:86:18:d0:07:f7:38:26:e3:09:
45:40:4e:a5:eb:45:53:9b:38:81:d7:5b:f5:22:b7:
97:14:60:b1:67:91:73:4f:62:26:17:87:f1:de:ef:
21:f2:0a:82:65:f1:30:a3:eb:a1:5e:35:e9:a1:1f:
69:c3:be:7f:4e:42:8a:86:26:02:02:80:72:2a:89:
c9:16:02:11:27:2d:93:44:2e:d7:98:cb:cd:60:73:
fb:39:f3:61:a3:fa:c6:4a:95:bc:8f:fe:1c:25:b1:
cf:d1:5c:d2:c2:b2:59:9b:cb:ab:9b:63:8a:3a:c5:
08:ad:7a:16:ef:3d:b2:70:a0:cf:1e:51:7f:5a:7d:
92:7a:1b:49:2f:9f:bb:99:ef:ec:14:47:bb:dd:d4:
c5:a5:0c:bb:45:b1:bc:52:8a:20:12:8b:33:41:e5:
03:ee:2a:98:2e:c4:71:08:97:28:04:57:aa:da:a6:
43:2f:da:ea:b7:ab:3d:53:fc:0d:47:73:3a:9b:a9:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BE:51:D2:5A:3A:C2:64:E7:44:BE:75:78:2E:3C:71:C3:B5:D1:3B
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d3:98:b2:17:ba:d1:34:79:22:3f:f6:31:cf:4e:5d:3b:b9:
c8:f5:a0:8a:62:b0:fb:7c:87:ad:30:21:81:18:9b:e1:78:b7:
f7:83:e4:1b:ee:d6:7d:f6:31:75:08:0b:63:23:cc:d9:a1:f5:
e2:0a:d2:0c:b9:a8:79:72:e1:72:a0:97:42:7a:19:b9:a5:7a:
76:02:07:ac:b8:d1:7e:27:e1:db:70:82:a9:ce:d8:aa:dc:e2:
6e:6d:e3:6e:a0:f7:c8:7b:83:6a:26:74:5a:78:50:64:98:a9:
b5:be:f6:4a:d0:a3:83:ae:25:fb:21:26:43:77:dc:3b:21:ac:
9c:6f:d2:ca:59:3a:a2:af:e6:ac:85:c9:c8:ff:b3:da:18:71:
c9:7e:43:f4:95:9d:b5:41:29:a1:bc:56:30:94:e7:40:ab:3d:
7d:e8:4f:bf:52:14:8f:c3:c1:18:ac:bd:e6:f5:16:9f:26:15:
7d:de:6a:76:af:08:3d:9b:ee:a5:6b:06:67:fe:2a:7b:a4:53:
cf:9f:0e:98:42:34:62:00:61:9e:d1:48:56:07:7a:d4:d1:1f:
ab:13:70:ce:32:03:a5:81:8a:5b:83:16:e2:cc:71:17:90:0b:
45:73:18:4c:3b:ae:60:3a:d1:d5:12:12:88:86:5d:0e:12:f3:
c1:f3:7b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:47:33 2025 by rpki-client