Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
File: ny83TJpzj63o-FDKq11507kARYQ.mft (raw, json)
Hash identifier: CX+wjCctk7Gjuobt940kPSPzm8U0D9UA2w5mp6j1Sqw=
Subject key identifier: B9:5A:7E:D4:33:E1:65:1A:24:36:E5:CF:FB:03:DF:62:07:98:9F:5F
Authority key identifier: 9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
Certificate issuer: /CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Certificate serial: 0196857F0A2235181DD338F9D3E92603A5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
Manifest number: 1513
Signing time: Wed 30 Apr 2025 07:00:17 +0000
Manifest this update: Wed 30 Apr 2025 07:00:17 +0000
Manifest next update: Thu 01 May 2025 07:00:17 +0000
Files and hashes: 1: ny83TJpzj63o-FDKq11507kARYQ.crl (hash: KSAzv2BNg2SUwYusNtgXMPjpSEfDEKC5Uli3kgqvmCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:0a:22:35:18:1d:d3:38:f9:d3:e9:26:03:a5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Validity
Not Before: Apr 30 07:00:17 2025 GMT
Not After : May 1 07:00:17 2025 GMT
Subject: CN=b95a7ed433e1651a2436e5cffb03df6207989f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:5d:d1:72:df:46:db:ca:a5:85:0f:09:1b:
4c:d6:a3:63:14:62:1f:d4:e4:db:65:8c:f8:57:b7:
29:e9:33:3f:78:13:b2:19:0b:2c:ab:96:8d:87:34:
1b:8e:f6:4f:f6:b5:0b:ed:9a:1a:11:ca:4b:b8:da:
ed:ee:a3:7e:6e:3a:0b:0e:58:2b:97:bc:ce:9b:8f:
00:32:41:7c:1e:03:3e:7b:0b:f9:95:74:e2:da:da:
ef:8d:cf:6d:fa:5e:eb:ab:8c:db:83:dd:14:48:96:
3a:96:8a:e9:f8:5b:10:68:2a:eb:40:ff:d2:29:d3:
cf:5b:77:cd:c5:c8:24:d1:0e:89:8b:10:68:a4:1b:
3d:71:92:97:90:98:9a:f4:72:50:f9:ba:be:27:6f:
60:6a:24:ad:0f:bd:36:2d:c4:a2:ba:07:c9:d6:32:
fb:c6:fc:f9:50:67:42:6f:20:23:a8:63:05:6b:f6:
e5:64:15:66:a8:3f:f3:02:a3:13:46:7d:73:ac:a5:
fe:1b:2d:2c:b6:87:03:9b:80:29:31:2b:0b:0c:2b:
15:26:f2:d4:cc:e4:f1:f0:7c:a1:8e:ac:28:56:70:
c6:7b:3b:04:3d:12:a9:b2:2e:88:14:da:23:25:16:
99:1f:0b:a9:a5:05:77:07:95:ac:91:e2:3f:ef:a4:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5A:7E:D4:33:E1:65:1A:24:36:E5:CF:FB:03:DF:62:07:98:9F:5F
X509v3 Authority Key Identifier:
keyid:9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b9:d6:8a:85:20:85:cc:ed:9a:e0:31:d6:08:ed:98:bb:be:
48:94:c8:3d:2a:b2:a1:3e:33:55:78:95:2d:d6:f5:73:89:5f:
39:56:1b:ba:74:d9:31:90:3d:93:6d:fa:f4:a1:2e:20:fc:7c:
f8:53:73:b0:b3:17:86:e9:84:db:75:22:4f:b5:c4:0f:f2:de:
3b:35:ea:18:5b:53:48:b4:d8:d2:53:e5:c1:dd:4f:a1:94:39:
aa:6e:f2:f2:63:bf:7f:e5:b5:63:a5:19:35:60:47:75:f9:c2:
69:c2:b8:d5:ed:87:3a:6d:26:b6:fc:ad:29:c8:51:0f:d5:37:
8e:71:b8:16:59:39:05:53:a3:5e:68:d9:af:c8:0e:4f:25:7b:
a2:5a:e5:13:05:72:a8:31:f3:ec:c9:ae:11:cd:8f:cb:75:f2:
7e:bf:2c:42:93:86:dd:e8:98:d3:3e:de:f4:a8:5c:e6:ad:8e:
97:00:c8:1c:1a:de:2f:3a:5b:30:2c:af:0d:35:24:47:4a:c7:
ba:fb:e1:4c:b9:5f:b9:94:48:dc:b7:c8:16:1a:2a:9f:2e:a8:
4f:a7:b4:b6:37:7d:ee:51:c5:ab:6d:0b:9b:f8:52:63:35:d0:
8f:01:fa:6d:e5:ab:b8:cb:f7:28:47:73:b0:fb:eb:fc:60:42:
ab:4a:6c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:36:23 2025 by rpki-client