Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: OiZAccBAd7fQmh9zEgMVU+DJvENsY49mtVqWFokWTnI=
Subject key identifier: 86:AB:4B:82:18:78:F5:86:A8:8E:88:5F:90:6C:90:EA:94:9D:17:DF
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 0197711A676D809F0EE9A33CBE407ECD4F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 30
Signing time: Sun 15 Jun 2025 01:00:45 +0000
Manifest this update: Sun 15 Jun 2025 01:00:45 +0000
Manifest next update: Mon 16 Jun 2025 01:00:45 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: wNOy7kdmzihRBRDMj1V6x+Y5YFohvq0x5CW2rhz+KFU=)
2: tT9egEPZfOW0iJxsepbGA_UgQjg.roa (hash: nJcChZ33Fi+iAdXvZOyTBjHIrvr+XcKOSiVdHqUG+CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:67:6d:80:9f:0e:e9:a3:3c:be:40:7e:cd:4f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Jun 15 01:00:45 2025 GMT
Not After : Jun 16 01:00:45 2025 GMT
Subject: CN=86ab4b821878f586a88e885f906c90ea949d17df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:c3:6e:00:78:ad:96:2f:cd:de:ac:19:f5:
6b:17:69:84:9f:5e:cc:af:09:30:d5:64:27:14:e2:
30:d1:37:55:cc:62:44:e2:d9:c9:5d:cc:b8:b2:1e:
52:82:a6:34:8a:dd:47:dc:d1:bf:73:e6:44:d0:44:
bd:82:30:22:a8:6e:e7:dd:8d:c3:17:77:be:52:84:
25:2b:7c:a4:2b:61:e3:a7:4b:41:b8:63:91:62:bb:
0f:63:13:ad:9c:41:1f:27:24:00:70:1b:67:9e:5b:
e8:87:c4:a6:d5:34:ea:df:8d:05:97:2e:97:96:c0:
6b:77:8a:4c:36:52:8a:20:b7:96:92:51:6f:d6:1b:
cd:a2:dd:e0:9a:0d:e6:82:ca:58:7f:13:4a:b6:23:
27:82:72:95:38:d3:33:51:16:7d:f8:58:7c:e7:2c:
eb:88:8a:fa:8d:a9:8d:c1:b7:d9:c5:57:ee:50:9e:
84:30:66:1a:fe:ca:16:04:51:60:eb:fe:49:d0:1a:
a2:a0:c7:24:8d:c1:ff:f3:bd:e5:32:f6:c9:83:eb:
a1:0e:45:1f:50:d9:3c:31:d9:43:bd:25:21:40:54:
4c:3a:50:11:3d:a1:ae:cc:61:c5:f5:c3:b4:37:c7:
4c:be:d6:3f:2c:eb:2b:87:5c:1c:2f:e0:2b:25:a0:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AB:4B:82:18:78:F5:86:A8:8E:88:5F:90:6C:90:EA:94:9D:17:DF
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ae:31:6d:7a:4b:11:bf:df:75:f7:d7:6c:19:62:76:bb:5b:
7c:d5:26:35:d8:df:ee:6d:2a:e8:15:3f:e6:65:a4:db:b1:ff:
9b:fc:1b:e5:89:b1:24:41:6e:6b:5c:58:6f:9d:fe:c4:96:52:
35:a8:cf:8e:79:54:5c:72:d7:66:90:2b:89:e3:5a:a9:16:20:
fd:61:73:1c:91:85:f2:84:ea:39:91:c8:16:b4:48:32:61:c2:
4f:b8:00:2c:66:67:69:4f:5a:8b:f7:5c:a9:3b:48:ae:91:07:
7e:80:00:bc:64:85:2e:86:98:88:14:08:fd:de:f8:da:1a:83:
35:e7:08:79:f9:05:29:83:fd:1c:21:d9:1a:a5:3f:2d:6f:9f:
cf:c8:82:86:4c:08:98:81:d5:97:67:b6:81:be:ec:46:3b:fd:
87:e2:70:ff:1d:b0:90:f8:64:5a:c7:48:27:b1:e7:0f:b1:07:
53:b4:5f:1a:af:65:e0:bf:a4:02:a8:f0:f0:cf:a3:74:bc:b4:
7f:1b:ed:cc:17:d7:37:e1:06:0e:b0:30:bb:f9:44:19:8b:59:
6b:60:6a:58:8f:e2:68:30:da:a6:07:55:84:7f:9e:d3:53:93:
12:de:0a:8d:25:96:f0:b1:67:20:f5:15:fd:fb:fa:ff:07:82:
a7:bf:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:43:39 2025 by rpki-client