Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
File: ny83TJpzj63o-FDKq11507kARYQ.mft (raw, json)
Hash identifier: bGet70xUW8NmhlONjM60XWB5D0PhfwBxWArDX8sRHOc=
Subject key identifier: BA:8F:B4:B0:28:24:36:25:AF:3F:6A:F6:50:62:96:F6:02:1D:15:4B
Authority key identifier: 9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
Certificate issuer: /CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Certificate serial: 01977AC35E86B1B5A1F48A71EDD6E55041B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
Manifest number: 1592
Signing time: Mon 16 Jun 2025 22:01:53 +0000
Manifest this update: Mon 16 Jun 2025 22:01:53 +0000
Manifest next update: Tue 17 Jun 2025 22:01:53 +0000
Files and hashes: 1: ny83TJpzj63o-FDKq11507kARYQ.crl (hash: EDh5HWs8REz9CrdAdTpSaax6pqjHiK74yw1PDgvS+qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c3:5e:86:b1:b5:a1:f4:8a:71:ed:d6:e5:50:41:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Validity
Not Before: Jun 16 22:01:53 2025 GMT
Not After : Jun 17 22:01:53 2025 GMT
Subject: CN=ba8fb4b028243625af3f6af6506296f6021d154b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:1c:74:2d:5b:40:27:82:04:50:c5:53:30:
05:57:8f:bf:b3:27:c3:cf:b5:0f:1b:6b:13:80:c4:
19:2e:d9:f3:73:4f:c9:21:d4:70:85:79:8c:5e:03:
41:90:54:66:c0:3c:83:88:fe:25:a9:5d:3e:73:c7:
d6:ea:2f:15:04:c3:0d:51:9a:f5:9d:a7:57:d3:b5:
0d:83:7f:2a:46:a2:74:33:81:72:d0:d4:ff:9d:17:
33:f5:78:71:c8:93:d9:4d:5c:0c:1e:ca:89:61:b2:
a2:30:d6:a5:4a:73:42:fe:69:16:44:d6:f8:31:fa:
7e:42:64:f0:c0:3c:c3:a5:0c:b3:d8:fb:ae:51:6e:
95:9d:82:be:11:7d:d6:84:90:b3:93:63:09:b8:e4:
4b:dc:b3:76:e5:a1:05:56:49:6a:89:10:b2:67:d5:
88:83:90:13:00:22:35:5e:74:80:d3:42:ab:c1:b2:
72:6f:02:be:b3:5b:61:08:f0:50:c1:ff:5f:33:f2:
3c:42:42:a9:74:12:65:c5:1f:82:a8:57:35:85:47:
09:6d:8e:8b:50:9f:21:5c:1a:9d:d7:dd:a3:9a:66:
e1:d4:f6:a9:ee:69:03:1c:10:8d:94:41:c5:30:48:
35:85:d9:be:3b:20:c3:3a:d6:43:93:b9:89:78:61:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8F:B4:B0:28:24:36:25:AF:3F:6A:F6:50:62:96:F6:02:1D:15:4B
X509v3 Authority Key Identifier:
keyid:9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2a:96:6e:52:a5:0e:b7:67:0b:3f:d2:b0:16:6a:13:83:2b:
cd:0a:bb:13:4e:9f:81:05:e4:33:c6:8c:f1:b3:37:03:5b:55:
6e:e0:b7:a8:5f:db:3d:4f:0e:59:8c:13:a2:08:60:1c:d4:ff:
1d:d6:55:0e:c7:98:19:cf:23:e1:2e:b3:4b:e8:b5:bb:95:f2:
67:4f:11:80:e4:63:c2:0f:20:c1:1e:33:35:4c:79:54:90:8b:
4b:66:d6:c2:8e:2b:79:e2:dd:72:1f:8e:fc:7d:fc:96:4b:fa:
eb:66:6b:05:07:06:bf:70:ff:2d:ce:83:03:29:bd:f1:ed:66:
8e:5f:27:93:ca:c5:10:e4:42:39:4b:30:8f:d6:1f:65:82:44:
27:9b:32:d1:78:49:d7:72:80:f9:ef:08:82:ea:8d:59:71:01:
60:bf:58:b5:21:06:44:ea:f5:77:07:fe:79:41:7f:6d:3c:d4:
1f:fa:41:0b:93:9f:ee:e9:eb:0e:06:1a:f4:8b:e1:cc:8c:46:
19:eb:b8:64:ef:8b:58:86:a9:be:61:2d:9f:6c:73:59:38:a7:
85:27:9c:60:2a:92:a3:6e:10:9e:79:75:53:10:02:90:6c:5e:
80:cd:d4:02:bf:f6:aa:33:12:51:b8:6b:61:ca:b4:f4:6e:1d:
44:70:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:17:09 2025 by rpki-client