Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
File: nyjbpUvBou6fd-Br-AglbdyTh-g.mft (raw, json)
Hash identifier: 1Zjwxqz4poC6gQosBPSvD+YPmAEWA6KUpTm8xfZRCRE=
Subject key identifier: 2B:B5:2E:40:A4:8A:A8:7F:D2:3C:C0:F2:0D:0E:6A:03:AD:46:5A:8A
Authority key identifier: 9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
Certificate issuer: /CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Certificate serial: 0196895C1B047D9939E69D3CA87767F7FF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
Manifest number: 0530
Signing time: Thu 01 May 2025 01:00:36 +0000
Manifest this update: Thu 01 May 2025 01:00:36 +0000
Manifest next update: Fri 02 May 2025 01:00:36 +0000
Files and hashes: 1: nyjbpUvBou6fd-Br-AglbdyTh-g.crl (hash: x5ikK+huWY/SiQDLdXO/tcqI+Mgv0b5ZA6AY4iLsDJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:1b:04:7d:99:39:e6:9d:3c:a8:77:67:f7:ff:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Validity
Not Before: May 1 01:00:36 2025 GMT
Not After : May 2 01:00:36 2025 GMT
Subject: CN=2bb52e40a48aa87fd23cc0f20d0e6a03ad465a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:b3:b5:7d:85:53:9b:14:1a:04:78:71:77:
b6:4e:c0:28:ce:47:9a:d5:83:81:19:93:1d:64:33:
cb:b0:45:4c:36:2c:87:0c:7f:92:5e:32:81:d3:8b:
7d:e5:c9:06:ca:9b:8e:d3:11:fe:14:e0:06:b2:30:
66:c2:97:25:99:de:44:43:9f:c6:fb:bf:0f:2a:53:
8b:03:7d:2a:b8:3c:d1:17:bd:7d:45:08:f7:55:8d:
8d:b2:73:64:5e:0b:34:72:eb:a1:d5:3d:df:ca:43:
f6:d9:2d:a7:73:2d:06:b4:d7:b9:1b:bb:ad:1a:43:
81:f1:e8:d0:48:ef:1b:4f:8b:40:46:9d:91:3b:f1:
d4:26:cf:0d:75:0b:58:f9:3a:79:66:d8:fe:de:c0:
dd:8f:71:1d:ec:99:24:cb:0c:90:15:b4:04:2e:92:
13:c9:c2:77:18:9e:c5:0d:6c:ca:9e:f5:5e:af:87:
5c:ca:75:ee:c0:29:ff:75:9f:42:ad:56:97:8c:0b:
cd:e4:50:94:3b:c8:e1:fe:81:e4:92:23:a2:66:94:
5e:30:ae:12:88:3a:a1:8f:8d:79:09:5a:8a:67:3d:
cd:6f:92:47:1b:47:ac:ca:0c:14:69:6b:eb:41:b2:
69:4f:2e:f2:1e:06:79:7b:29:a1:4e:a6:31:69:c4:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B5:2E:40:A4:8A:A8:7F:D2:3C:C0:F2:0D:0E:6A:03:AD:46:5A:8A
X509v3 Authority Key Identifier:
keyid:9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9a:09:35:c9:1b:cf:b3:66:15:f3:67:00:bf:49:39:94:a5:
45:04:89:72:f6:5a:34:c1:f7:94:0d:db:73:a1:97:90:87:c1:
e4:02:01:3a:46:b7:eb:80:b1:09:64:84:89:2a:62:8e:5b:c6:
52:82:e3:4a:5a:47:0d:2c:5f:0e:a3:75:4d:87:ea:b3:07:c1:
3f:5c:e1:11:df:7f:a0:83:0a:d1:0a:ec:46:a2:d2:c2:4e:44:
04:28:1a:ad:40:71:cd:17:69:dd:d7:b6:90:9e:f4:f2:68:94:
4c:8d:c1:5f:d1:18:c3:ae:58:c4:36:74:c5:db:77:da:2c:15:
42:14:45:3f:ac:53:51:50:75:75:bf:51:cc:d4:14:d2:a9:0f:
00:ba:ab:d3:bd:7d:f0:3f:2d:22:4e:c9:90:8a:4c:cb:3f:6b:
c4:b9:25:39:4a:c8:8b:45:1e:8c:cf:20:b3:69:24:3b:76:8b:
5c:63:2d:eb:d4:72:82:60:ac:01:47:25:0a:38:98:30:f5:f3:
3f:69:d0:1f:eb:83:78:fe:41:86:f6:f3:4a:f4:98:6a:41:65:
5a:44:55:35:99:b4:6d:19:1b:25:61:f8:c6:d1:1d:83:de:3f:
b7:fb:fb:89:6f:62:9e:26:81:b2:f4:a7:b7:ec:15:dd:b0:48:
c9:70:b8:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJXBsEfZk55p08qHdn9/+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjhkYmE1NGJjMWEyZWU5Zjc3ZTA2YmY4MDgyNTZkZGM5
Mzg3ZTgwHhcNMjUwNTAxMDEwMDM2WhcNMjUwNTAyMDEwMDM2WjAzMTEwLwYDVQQD
EygyYmI1MmU0MGE0OGFhODdmZDIzY2MwZjIwZDBlNmEwM2FkNDY1YThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodiztX2FU5sUGgR4cXe2TsAozkea
1YOBGZMdZDPLsEVMNiyHDH+SXjKB04t95ckGypuO0xH+FOAGsjBmwpclmd5EQ5/G
+78PKlOLA30quDzRF719RQj3VY2NsnNkXgs0cuuh1T3fykP22S2ncy0GtNe5G7ut
GkOB8ejQSO8bT4tARp2RO/HUJs8NdQtY+Tp5Ztj+3sDdj3Ed7JkkywyQFbQELpIT
ycJ3GJ7FDWzKnvVer4dcynXuwCn/dZ9CrVaXjAvN5FCUO8jh/oHkkiOiZpReMK4S
iDqhj415CVqKZz3Nb5JHG0esygwUaWvrQbJpTy7yHgZ5eymhTqYxacTPpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu1LkCkiqh/0jzA8g0OagOtRlqKMB8GA1UdIwQY
MBaAFJ8o26VLwaLun3fga/gIJW3ck4foMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlqYnBVdkJvdTZmZC1Cci1BZ2xiZHlUaC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83YThmYjYtZTZhOS00YmM4LWFiMDIt
ZGYzZTU4MzU0YjgxLzEvbnlqYnBVdkJvdTZmZC1Cci1BZ2xiZHlUaC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi83YThmYjYtZTZhOS00YmM4LWFiMDItZGYzZTU4MzU0Yjgx
LzEvbnlqYnBVdkJvdTZmZC1Cci1BZ2xiZHlUaC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpoJNckb
z7NmFfNnAL9JOZSlRQSJcvZaNMH3lA3bc6GXkIfB5AIBOka364CxCWSEiSpijlvG
UoLjSlpHDSxfDqN1TYfqswfBP1zhEd9/oIMK0QrsRqLSwk5EBCgarUBxzRdp3de2
kJ708miUTI3BX9EYw65YxDZ0xdt32iwVQhRFP6xTUVB1db9RzNQU0qkPALqr0719
8D8tIk7JkIpMyz9rxLklOUrIi0UejM8gs2kkO3aLXGMt69RygmCsAUclCjiYMPXz
P2nQH+uDeP5BhvbzSvSYakFlWkRVNZm0bRkbJWH4xtEdg94/t/v7iW9iniaBsvSn
t+wV3bBIyXC4mw==
-----END CERTIFICATE-----
Generated at Thu May 1 05:25:23 2025 by rpki-client