Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json)
Hash identifier: 2A3rlkEMHE8B7DLIzNYYPBL0CGeOqpTw63lmo0PlPjM=
Subject key identifier: EB:C5:F6:D6:76:30:B7:39:ED:55:F6:42:5E:6D:D0:D6:32:C8:7D:B9
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 0197696128D53FC44288AA8DC5B933A44F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 13:01:04 +0000
Manifest this update: Fri 13 Jun 2025 13:01:04 +0000
Manifest next update: Sat 14 Jun 2025 13:01:04 +0000
Files and hashes: 1: IAQeRjmmu9Z-veumwyPKfDrKvbI.roa (hash: Ww+1iOsdAQGbUwn6gW9paX3J1FGXxxEHtorVkrDGTZc=)
2: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: IvPwBGdl8c3/Y4gfVQe56Qx5RCS78kdWrudmKyFjRfQ=)
3: zE2nCBuCP3GWKcrh09m8L6FV9yA.roa (hash: iLVOHuiEHM03YeDql7RR17g8jhss2HwinXwx77EwMP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:28:d5:3f:c4:42:88:aa:8d:c5:b9:33:a4:4f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Jun 13 13:01:04 2025 GMT
Not After : Jun 14 13:01:04 2025 GMT
Subject: CN=ebc5f6d67630b739ed55f6425e6dd0d632c87db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:b5:7e:85:78:e6:ce:09:6e:f3:07:ce:3f:
e4:a3:e5:6f:95:e4:80:7e:87:34:c5:13:92:45:a9:
3b:94:b5:c1:b7:57:28:6f:a8:ab:af:7f:06:9d:fc:
b1:2f:62:22:7b:ca:e2:29:5b:f8:bd:7a:fb:a5:5a:
a8:7c:36:f0:12:11:d6:a4:14:80:7c:46:bf:20:33:
d8:98:a1:62:3d:70:46:57:ea:60:92:14:78:ac:93:
91:38:05:74:b0:56:74:86:27:76:1d:3e:4d:97:ce:
ca:0b:b5:c8:79:91:98:1c:34:7b:e1:04:82:88:74:
4b:80:4d:cf:c0:c8:d7:53:90:e2:b1:cf:44:02:bd:
a9:2d:3c:e7:29:a3:cd:39:a1:ae:a3:af:33:14:1f:
3e:6b:8b:02:99:55:13:7c:27:53:20:fb:47:63:1a:
a1:8f:bc:b8:41:8a:dd:2f:c0:4b:59:37:f4:67:f6:
23:b0:51:4a:92:57:f9:28:df:51:24:2c:dc:92:e9:
46:e2:a1:ee:b6:c5:47:b6:70:06:e1:ce:bd:da:27:
63:a7:fc:bb:65:29:c9:0f:39:2e:65:20:8e:e0:38:
8f:1a:c7:c3:bd:43:7d:b6:d1:87:fe:78:a5:3d:4d:
62:33:17:8a:56:39:fe:94:fc:65:4b:09:39:0c:65:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:F6:D6:76:30:B7:39:ED:55:F6:42:5E:6D:D0:D6:32:C8:7D:B9
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:35:a9:d7:36:59:af:ae:72:f6:84:47:3c:fe:bd:23:d7:4f:
26:fe:6c:b6:8d:0e:8b:91:3c:3c:de:c1:13:09:c3:1c:df:cf:
7c:b8:3d:97:f2:d2:94:0e:b6:bf:37:77:a5:36:08:d0:58:02:
f6:b2:56:e6:92:1e:8a:c3:33:ee:9b:de:48:6a:e7:f7:82:03:
62:22:df:ab:de:b8:60:ae:a8:7a:37:50:4f:e1:30:0d:c2:f3:
22:33:70:db:f6:81:12:80:56:db:bb:e3:12:eb:09:68:36:91:
02:43:18:20:b9:08:7f:95:0d:00:f6:2b:20:1a:8c:df:41:15:
e6:34:05:cd:ee:a7:df:ea:a0:64:8c:66:60:3b:94:75:4e:f6:
e4:c3:78:0b:66:13:3a:da:8f:50:06:30:5a:0b:1f:69:42:09:
ed:75:16:e7:17:41:a1:bf:05:c6:9c:c8:b5:09:b5:cb:16:fa:
f1:a4:9d:e5:01:7d:43:5d:33:87:63:aa:99:cf:a5:14:a6:33:
4e:c5:f2:ff:0b:b2:d8:b4:78:00:b0:12:5b:22:aa:30:8d:ad:
8e:52:85:4d:b0:62:6f:1e:35:3b:51:f0:f2:bf:0b:c4:8b:18:
e8:c2:ea:b7:e9:c8:11:b9:bd:05:05:62:cd:67:20:b8:b6:87:
46:0e:12:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:20:13 2025 by rpki-client