Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
File: NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft (raw, json)
Hash identifier: IXF04ZFnIXZwLqRtztw9BSZJxvVwEGFJBJVpYLdN0c8=
Subject key identifier: E6:B1:A8:29:A7:26:88:A0:47:ED:F7:E7:C6:4C:15:DF:B0:27:82:CD
Authority key identifier: 37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65
Certificate issuer: /CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
Certificate serial: 01967DC68D324988CEC0F4EC7E44A7B45570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
Manifest number: 1233
Signing time: Mon 28 Apr 2025 19:01:26 +0000
Manifest this update: Mon 28 Apr 2025 19:01:26 +0000
Manifest next update: Tue 29 Apr 2025 19:01:26 +0000
Files and hashes: 1: NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl (hash: Es8xJMQOw1mEhf/lvRPweYpEp709k9jgy36IsFiApKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:8d:32:49:88:ce:c0:f4:ec:7e:44:a7:b4:55:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
Validity
Not Before: Apr 28 19:01:26 2025 GMT
Not After : Apr 29 19:01:26 2025 GMT
Subject: CN=e6b1a829a72688a047edf7e7c64c15dfb02782cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:d7:e8:91:97:c1:4b:1b:ea:18:45:2a:8f:
18:6c:14:35:e3:8c:bc:7b:6d:e3:af:bb:24:62:b8:
6d:99:13:62:52:43:62:0e:10:11:ac:75:cd:c9:e5:
0e:a4:4c:e8:03:38:09:d8:6d:28:e2:b7:3c:93:b9:
42:c0:1c:ba:43:36:f2:f6:51:0b:b5:4a:97:56:1e:
0a:40:3d:f6:71:10:32:8f:a8:c5:37:b1:1a:1b:ac:
9f:f7:6c:4d:c3:d4:9d:cb:ac:1b:1b:28:09:7b:a0:
55:a6:9f:8f:2d:00:44:b4:88:2b:a1:b6:bf:28:da:
a0:bb:ec:3b:51:24:f8:e3:e9:a6:ae:da:6b:f8:5d:
94:01:79:6c:6c:a2:a0:53:f6:f7:a6:64:f7:08:ba:
97:d8:eb:1a:f3:38:02:65:ab:25:1e:78:10:84:36:
49:b3:28:38:7e:73:72:5b:4a:a7:15:15:84:ec:ed:
aa:5e:a7:9d:6e:83:99:0c:2c:32:21:bb:46:5b:be:
c3:2a:4a:9a:38:e1:59:ab:e0:63:61:e9:cb:bb:7e:
73:11:34:5c:f9:dd:e8:1a:7c:62:18:f7:47:80:2d:
d3:f4:c7:a2:de:ba:05:f6:88:31:48:93:50:5b:a7:
c1:7d:ed:9a:ec:84:f3:8d:72:a0:4a:c8:19:7a:5f:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:A8:29:A7:26:88:A0:47:ED:F7:E7:C6:4C:15:DF:B0:27:82:CD
X509v3 Authority Key Identifier:
keyid:37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:27:97:0f:74:90:dc:d7:84:db:23:9a:44:9b:e8:5d:41:4d:
22:b1:d2:03:76:8d:d0:dc:31:c2:f3:3f:b7:6b:62:1b:92:8a:
df:ec:ae:36:2c:17:fa:6e:d4:ae:37:92:a1:ef:92:b3:b4:93:
eb:79:f7:5c:24:2d:3d:61:68:4f:37:53:46:7b:3a:ba:75:9e:
42:e4:7c:5b:de:dd:d5:99:d7:0e:8c:02:14:ce:a0:b1:b0:61:
c3:22:55:ff:f8:97:e1:8d:31:b6:23:9b:eb:ec:0a:64:34:10:
85:e2:fc:32:e8:2c:d4:48:64:40:0a:2c:ef:0d:09:aa:c7:14:
3f:fd:e1:cd:1a:e6:49:03:c8:8a:ed:07:fe:55:6b:9b:d8:65:
1d:d6:90:f8:a1:11:7d:d2:38:80:40:d2:41:37:4b:0b:af:92:
9a:33:bb:a9:65:1c:44:50:c9:ab:c8:66:04:0c:22:62:97:68:
50:cd:98:98:20:3c:a0:ae:2f:0c:ad:43:0f:38:70:d3:ea:4d:
a6:bb:1e:ba:e1:2a:8e:1f:7a:2a:bf:86:10:59:44:e8:e2:4c:
54:f0:d0:93:59:e5:34:b7:67:d8:81:37:e0:7b:4f:2b:bc:6b:
dc:1a:9b:63:26:f4:ca:24:11:d8:bf:82:6d:5a:9e:67:6d:2c:
47:92:fb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:41:52 2025 by rpki-client