Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File: nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier: 2HvNAQJNZDbHew0DDQeqa+ZmnE87ILonyTcdBo5cBkg=
Subject key identifier: F3:21:B7:3C:EB:DE:84:8C:7A:6E:51:70:A7:11:62:39:04:3B:33:18
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial: 01984A09D6C84944A94C3A2383BEE98CDB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number: 12E0
Signing time: Sun 27 Jul 2025 04:00:15 +0000
Manifest this update: Sun 27 Jul 2025 04:00:15 +0000
Manifest next update: Mon 28 Jul 2025 04:00:15 +0000
Files and hashes: 1: T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa (hash: RdeAevZDp8XmGqqAvK8gJZd85NjETWsjIIExe3sxUXY=)
2: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: qsRASLYRA1m/RlLlJ5iwwO2r8/nvucQNbI6frSEs/6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d6:c8:49:44:a9:4c:3a:23:83:be:e9:8c:db:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
Validity
Not Before: Jul 27 04:00:15 2025 GMT
Not After : Jul 28 04:00:15 2025 GMT
Subject: CN=f321b73cebde848c7a6e5170a7116239043b3318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:53:01:5d:7b:a6:72:8a:ff:26:ee:64:ce:
7b:2a:e7:01:51:42:e0:e3:ca:40:6c:7c:72:e5:e2:
7a:7f:3e:fc:51:05:1f:a9:80:27:a6:24:1c:d7:43:
08:1d:e4:eb:95:8c:b3:bf:a2:a9:d8:51:98:8c:34:
21:ba:7e:cc:be:9b:95:3d:db:c0:86:ad:4d:ae:11:
8e:40:3f:ee:4a:68:2e:60:1b:9e:4b:03:29:ce:9e:
98:96:fb:86:b9:7c:0f:a2:f0:52:4e:55:10:61:f6:
1f:f7:ea:f4:d9:c5:12:5c:c4:0c:03:0b:8b:3c:34:
4c:9c:11:de:34:68:54:95:3e:6f:b0:19:df:2d:7d:
e6:f5:e5:34:24:f1:62:d6:96:1f:5b:d9:e0:6f:61:
82:0c:9e:7d:9a:e0:ba:15:11:9f:63:99:96:68:6e:
a9:21:6b:6c:f4:38:91:c8:cc:b0:bd:9a:c6:9b:96:
84:cc:88:db:62:f4:7a:d3:e7:34:01:ff:71:1d:f9:
a0:bb:80:ef:90:88:24:f1:c4:67:71:0d:7f:68:47:
02:18:30:eb:7a:81:f0:ce:89:dc:8f:d9:4d:9a:f6:
b7:d8:06:b9:39:01:7e:f0:0a:8b:8d:09:84:5f:f0:
a3:57:b4:f5:9d:0a:08:eb:c0:d8:ae:cd:c6:69:49:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:21:B7:3C:EB:DE:84:8C:7A:6E:51:70:A7:11:62:39:04:3B:33:18
X509v3 Authority Key Identifier:
keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:41:9d:a1:43:8e:c4:66:30:96:5f:0e:c6:f3:8e:63:ca:9d:
ee:8c:a5:71:aa:cb:3a:84:ae:36:0f:b0:26:3c:a1:0a:b6:b6:
9d:af:37:28:47:db:96:04:ab:a9:72:4a:eb:15:e2:7d:30:c7:
07:a4:d5:84:b9:da:90:b0:04:d3:0d:f6:fa:32:cd:66:70:e2:
54:96:69:5d:40:d2:0a:26:1c:55:06:3d:2c:10:c9:4d:36:55:
c8:91:21:ac:c9:2b:f5:a8:5d:46:f1:af:b7:05:1d:79:ea:6b:
4f:1e:2d:d4:16:da:24:de:f4:ae:3d:88:6e:e6:e9:0f:9f:6b:
dc:ed:2f:eb:e9:ff:4c:b8:3d:03:25:44:9d:b6:a0:35:35:6f:
ba:bf:1b:67:60:3f:f6:5d:30:78:74:85:e8:38:33:5f:07:34:
b6:ef:e9:ba:a0:22:43:f2:e4:60:3c:4b:47:0c:2f:b0:cd:a6:
e3:a2:a6:bb:b8:c2:5d:9c:db:f9:04:6f:bb:51:49:bf:2b:cf:
cc:9f:e8:cf:44:15:e3:93:dc:76:af:a2:74:ea:aa:43:70:99:
85:b1:81:e3:42:7d:a3:b4:22:02:d5:4a:86:ed:7b:c7:05:84:
b3:d5:14:dd:f0:5e:ad:89:cc:1e:6b:84:88:d5:37:07:79:ac:
42:23:2d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:27 2025 by rpki-client