Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
File: nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json)
Hash identifier: uiVggQHR2WEjPznznQ+5BMDCa3zkGpsYxndPoceP2js=
Subject key identifier: 47:42:2D:3F:F4:5A:43:AA:B7:EA:07:E0:80:38:83:AC:EE:81:73:65
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial: 01984A09DB244DEA47D06AA93EBE60A79A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
Manifest number: 095E
Signing time: Sun 27 Jul 2025 04:00:16 +0000
Manifest this update: Sun 27 Jul 2025 04:00:16 +0000
Manifest next update: Mon 28 Jul 2025 04:00:16 +0000
Files and hashes: 1: nJBx_aFvLLmg9WQ03TK76fpJWGM.roa (hash: 02dNoeVE9Sy74k3q/XOECz/G2VHIiUVMONX/87WPyrU=)
2: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: cE+rjF3hSfIPAj/3V2IukxE5vh4zrnTF5SIbCAhwoUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:db:24:4d:ea:47:d0:6a:a9:3e:be:60:a7:9a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Validity
Not Before: Jul 27 04:00:16 2025 GMT
Not After : Jul 28 04:00:16 2025 GMT
Subject: CN=47422d3ff45a43aab7ea07e0803883acee817365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:32:f7:f0:6a:f4:ef:af:d7:dd:96:1e:de:
8e:f2:32:96:c3:2b:a4:43:e0:14:c9:24:2b:8f:df:
d3:a1:22:87:88:17:af:de:a6:ab:35:a2:dc:d9:d8:
3a:77:f7:b2:f2:b5:9a:37:99:b6:bd:a3:2a:68:af:
94:a0:bc:34:a4:6e:f9:e9:30:35:bc:af:bf:66:1e:
2f:30:d0:5e:8f:ee:d0:62:87:29:a8:db:71:b4:99:
ea:04:ee:8d:69:4e:e0:fc:54:d9:47:c9:01:f0:3e:
46:61:d1:f2:89:d3:f0:e6:29:61:3d:51:ab:ce:86:
af:4b:8e:51:10:0d:9e:87:8c:14:f7:a7:78:bd:79:
fb:74:01:21:22:d0:ce:39:6f:6c:30:18:fe:16:66:
32:1b:7a:83:55:c8:09:3a:1b:39:58:5c:fa:2d:6a:
f0:7f:57:12:ca:8c:b9:72:83:05:99:14:f0:a4:9c:
e6:84:9c:d4:ed:08:59:39:59:1d:73:38:4e:2e:69:
ce:0f:60:82:ad:f6:04:8e:34:40:a8:61:20:52:68:
14:bc:f8:09:39:bd:93:08:6e:05:92:c3:f1:93:56:
61:c1:7c:5c:96:01:42:08:8d:3b:e5:80:38:85:3d:
6a:7d:2b:2f:bf:cd:2d:55:ec:78:7b:b8:de:4b:45:
75:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:42:2D:3F:F4:5A:43:AA:B7:EA:07:E0:80:38:83:AC:EE:81:73:65
X509v3 Authority Key Identifier:
keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0e:98:ed:eb:f7:cd:90:7d:25:17:4b:00:9f:d9:2a:54:27:
a5:3e:42:a5:b0:be:08:13:e4:d1:08:a4:47:b3:a4:77:35:95:
00:ad:e1:f8:4e:2c:22:03:4b:8c:43:6c:2c:c5:3c:24:ac:b1:
4c:59:80:40:2d:19:8e:39:8c:77:0c:8c:c1:9b:8a:1f:b9:8a:
62:ee:4b:d6:c5:51:23:8b:cf:b5:a3:18:de:78:15:95:26:2d:
8b:ea:f4:27:e2:fc:ff:f3:f4:ef:6a:e3:b8:da:a4:0e:a3:8a:
d7:bd:10:72:45:20:3e:c2:00:24:9f:c0:f7:6c:77:26:0c:26:
11:cc:29:52:65:64:08:75:89:18:54:3e:13:01:23:53:c7:ee:
c3:52:df:9a:91:b9:86:da:57:0e:12:6a:8b:fb:60:2f:30:b5:
87:0a:c9:a4:8c:2e:ed:67:8c:e9:b4:a2:63:81:66:cb:ec:45:
35:5b:08:79:11:62:84:5a:a2:9f:cb:47:ab:8e:32:2d:93:13:
06:a3:d1:25:09:4d:58:f2:57:b2:16:0a:0e:c7:75:ae:2c:6c:
22:b9:1f:22:25:1f:b0:73:44:9d:d1:4c:57:d2:94:0b:a7:b2:
cd:89:b9:e4:ac:41:7b:69:fc:f5:a9:19:37:96:88:83:39:67:
fe:bc:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:49 2025 by rpki-client