Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
File: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft (raw, json)
Hash identifier: ykmPGI8O5rYs1N23NwFQ/VfLhoJsFBixjk+tbWkkQoY=
Subject key identifier: EE:66:90:16:22:F7:C9:D3:FC:A1:51:08:70:7F:8D:BC:8E:23:70:FB
Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
Certificate issuer: /CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Certificate serial: 01976BF47BAFA4DDBB4DC976B915F9456BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
Manifest number: 0272
Signing time: Sat 14 Jun 2025 01:01:13 +0000
Manifest this update: Sat 14 Jun 2025 01:01:13 +0000
Manifest next update: Sun 15 Jun 2025 01:01:13 +0000
Files and hashes: 1: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl (hash: 8v1v11NLL6X5N6jxSJIqtbwDFpOyL5hsIyHoLo/kf8c=)
2: dbO_KM950SVoV4qdoDfieNWIw0s.roa (hash: DCE7AE8Wo5HEULV6TjwRejnJ6LMRCD866TcEBq5yg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:7b:af:a4:dd:bb:4d:c9:76:b9:15:f9:45:6b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Validity
Not Before: Jun 14 01:01:13 2025 GMT
Not After : Jun 15 01:01:13 2025 GMT
Subject: CN=ee66901622f7c9d3fca15108707f8dbc8e2370fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:8d:43:69:6e:92:3d:b6:e7:35:a7:2c:cd:
90:ec:ef:de:2f:ff:7b:3c:75:ec:7b:f6:61:13:a9:
0b:ee:cd:61:92:28:6d:87:06:31:02:eb:e1:0b:30:
dc:5d:e8:92:24:bf:6e:f0:b4:5c:41:ee:d3:ef:79:
90:f3:75:a2:a3:63:db:b6:76:45:66:c5:67:9e:c0:
bb:f1:01:bc:9a:62:e9:72:7b:77:97:ee:25:9c:48:
6c:5d:1f:1f:d5:e1:7c:90:a5:a0:80:52:11:38:53:
44:0c:52:05:60:6b:2f:7c:94:12:28:7d:27:d2:09:
61:d7:80:46:11:e9:fb:37:25:61:22:77:ba:a7:b1:
2e:50:a9:3f:ea:3c:93:dc:b9:7c:f0:5f:99:f9:e9:
6c:10:93:47:fc:49:51:78:95:43:0d:7c:45:79:87:
f9:c6:01:45:e9:27:28:5d:92:9d:0e:73:92:1b:57:
97:2b:c7:10:d8:00:fc:22:d9:32:82:1c:c5:09:11:
d4:b0:85:2e:65:5f:0b:4b:68:22:8c:08:24:9d:d6:
39:13:79:1c:03:a1:ea:d5:e9:7b:cc:a7:09:4b:e0:
6c:52:8e:56:cb:49:23:02:e0:ca:79:ca:fe:c0:88:
d8:f7:c2:96:b1:c4:fe:c9:1a:21:8a:f1:be:5e:1b:
c2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:66:90:16:22:F7:C9:D3:FC:A1:51:08:70:7F:8D:BC:8E:23:70:FB
X509v3 Authority Key Identifier:
keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:96:8b:5c:3e:b4:32:b8:a5:ca:1e:5c:67:c9:c2:bb:41:09:
46:7c:e2:69:0e:26:1f:56:94:ed:93:35:b1:0e:08:b4:54:13:
4a:0c:8d:8e:60:94:03:ff:85:5c:60:f5:74:67:28:98:8b:49:
0d:a3:b1:f6:1f:9d:62:ff:65:9e:e8:17:9e:98:50:5b:d9:cf:
b1:10:50:41:f3:9a:3a:26:39:50:2a:ac:3e:c8:35:bc:0c:54:
47:24:7b:7c:3d:df:a9:86:88:70:47:f0:cf:2a:e2:19:7d:42:
89:51:f7:57:87:7f:30:a3:c0:a7:b7:92:84:c9:91:06:05:5b:
ac:d1:b2:ea:c0:73:6d:94:e6:b7:91:04:7c:cf:3f:e1:9b:07:
06:85:55:22:78:f2:6d:6c:f9:d2:b1:69:f7:96:80:6b:9d:86:
93:53:7f:9b:0d:79:83:6f:75:05:22:5c:97:99:bf:5e:62:a7:
24:05:01:fe:d5:4d:41:56:0b:64:f0:db:c7:c9:2c:28:34:e4:
83:5c:9d:9e:46:a8:c1:9e:3c:95:c7:34:87:53:a4:19:3a:9e:
5a:b9:86:53:fa:92:2c:a3:d6:7b:b8:d7:a5:7c:55:1c:44:3e:
fb:79:eb:73:ba:59:97:72:a4:90:67:62:c9:53:a7:f4:81:be:
39:b8:7f:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr9HuvpN27Tcl2uRX5RWu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjJiMmYwOTBhOTY3ZTBiY2FjZDE5ZjM5YWQyYTg4NzI2
M2I1MjQwHhcNMjUwNjE0MDEwMTEzWhcNMjUwNjE1MDEwMTEzWjAzMTEwLwYDVQQD
EyhlZTY2OTAxNjIyZjdjOWQzZmNhMTUxMDg3MDdmOGRiYzhlMjM3MGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWmNQ2lukj225zWnLM2Q7O/eL/97
PHXse/ZhE6kL7s1hkihthwYxAuvhCzDcXeiSJL9u8LRcQe7T73mQ83Wio2PbtnZF
ZsVnnsC78QG8mmLpcnt3l+4lnEhsXR8f1eF8kKWggFIROFNEDFIFYGsvfJQSKH0n
0glh14BGEen7NyVhIne6p7EuUKk/6jyT3Ll88F+Z+elsEJNH/ElReJVDDXxFeYf5
xgFF6ScoXZKdDnOSG1eXK8cQ2AD8ItkyghzFCRHUsIUuZV8LS2gijAgkndY5E3kc
A6Hq1el7zKcJS+BsUo5Wy0kjAuDKecr+wIjY98KWscT+yRohivG+XhvCwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5mkBYi98nT/KFRCHB/jbyOI3D7MB8GA1UdIwQY
MBaAFDcisvCQqWfgvKzRnzmtKohyY7UkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlLeThKQ3BaLUM4ck5HZk9hMHFpSEpqdFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82MGRlNDYtNTk3NC00YzQ1LWJlMzYt
OGRjZGI5OThmZDVhLzEvTnlLeThKQ3BaLUM4ck5HZk9hMHFpSEpqdFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82MGRlNDYtNTk3NC00YzQ1LWJlMzYtOGRjZGI5OThmZDVh
LzEvTnlLeThKQ3BaLUM4ck5HZk9hMHFpSEpqdFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpaLXD60
Mrilyh5cZ8nCu0EJRnziaQ4mH1aU7ZM1sQ4ItFQTSgyNjmCUA/+FXGD1dGcomItJ
DaOx9h+dYv9lnugXnphQW9nPsRBQQfOaOiY5UCqsPsg1vAxURyR7fD3fqYaIcEfw
zyriGX1CiVH3V4d/MKPAp7eShMmRBgVbrNGy6sBzbZTmt5EEfM8/4ZsHBoVVInjy
bWz50rFp95aAa52Gk1N/mw15g291BSJcl5m/XmKnJAUB/tVNQVYLZPDbx8ksKDTk
g1ydnkaowZ48lcc0h1OkGTqeWrmGU/qSLKPWe7jXpXxVHEQ++3nrc7pZl3KkkGdi
yVOn9IG+Obh/zg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:40:56 2025 by rpki-client