Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
File: nYy-lCn5RJlbPJNL2vZglrURSNQ.mft (raw, json)
Hash identifier: SkU+Y95+QUfFEj+kr2Gs34Zu3afYHfbeQHBOH+7b54s=
Subject key identifier: 27:A5:FF:14:96:30:C1:A6:8F:F8:EA:ED:1D:4B:A8:6A:48:AD:F8:93
Authority key identifier: 9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
Certificate issuer: /CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
Certificate serial: 01984A0A3C5F84E4BEC79C898E0306D5CA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
Manifest number: 054E
Signing time: Sun 27 Jul 2025 04:00:41 +0000
Manifest this update: Sun 27 Jul 2025 04:00:41 +0000
Manifest next update: Mon 28 Jul 2025 04:00:41 +0000
Files and hashes: 1: nYy-lCn5RJlbPJNL2vZglrURSNQ.crl (hash: JlYEBtdZxLb2RWTV4diR7ynDU1JxB11rqEKBYcBICHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:3c:5f:84:e4:be:c7:9c:89:8e:03:06:d5:ca:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
Validity
Not Before: Jul 27 04:00:41 2025 GMT
Not After : Jul 28 04:00:41 2025 GMT
Subject: CN=27a5ff149630c1a68ff8eaed1d4ba86a48adf893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:53:37:66:fc:99:68:5d:db:80:c8:cb:b4:
65:cb:71:7f:f2:31:20:6c:72:46:be:b8:94:ab:f3:
31:1f:66:da:b0:b8:bc:54:0e:18:17:e0:13:58:14:
ce:12:ff:e1:cb:4c:03:ee:72:7e:5b:29:25:00:49:
65:83:fa:87:a5:d8:90:37:86:4c:17:43:10:ff:68:
2c:cb:a0:82:56:dd:51:14:3b:53:a0:24:25:c6:37:
e9:ac:af:ec:c1:41:50:bf:16:43:6d:4d:3f:cf:33:
40:76:2a:cc:d7:2d:10:b6:a2:96:d0:a7:9e:88:2d:
78:78:8a:78:12:af:32:14:89:5e:54:22:ef:e8:04:
67:59:4d:52:bf:82:6f:7d:26:b0:d2:79:43:3b:32:
7b:fd:5d:58:d9:5e:80:64:3a:b2:a5:bd:fa:11:14:
50:6a:4c:65:ef:ba:9b:49:81:5f:9a:dd:73:b5:79:
e3:c4:a3:26:3f:6d:2a:bc:c3:9b:ef:e9:07:c2:37:
be:2f:09:15:a0:fe:05:0f:22:10:8d:c6:93:c1:32:
8d:72:71:50:e7:16:90:5b:03:a4:24:6d:7e:3a:9f:
b4:09:cc:93:19:0b:0d:2a:cc:63:d1:12:05:fd:f1:
a8:05:9c:d9:e9:4a:95:5f:94:fd:be:1d:5d:25:f4:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A5:FF:14:96:30:C1:A6:8F:F8:EA:ED:1D:4B:A8:6A:48:AD:F8:93
X509v3 Authority Key Identifier:
keyid:9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:02:a4:d8:92:c8:87:b0:a4:21:d4:45:fc:99:ac:f9:c8:87:
21:97:ac:d4:57:eb:8c:46:05:2e:07:5a:21:e6:ab:2a:eb:84:
95:97:33:db:9c:56:36:40:c5:9e:49:f0:c0:1e:a5:67:ea:26:
52:2c:d9:c6:a5:ac:6a:b9:6c:27:0e:24:65:37:8a:d2:0d:da:
5d:71:3c:64:01:0a:b4:9b:38:c3:3e:8f:ad:d9:f9:a7:d6:e8:
f7:ec:c0:f5:e6:4e:6d:b0:f7:db:7d:a6:6f:c7:b4:a5:2e:cb:
68:90:d1:66:e4:9f:fb:a7:2e:62:b3:0f:7b:97:0f:6b:57:0a:
7d:33:0d:d4:13:29:21:8a:d5:7a:7c:5b:c7:59:df:ac:6e:0d:
6b:72:61:cf:bf:c8:b8:7d:1f:90:d0:94:4d:71:bb:98:2b:f1:
36:31:c7:e6:2c:85:e6:15:52:8b:65:f3:2c:03:79:88:9b:d7:
fb:61:b7:11:4e:c3:be:1a:06:9d:21:a9:11:73:c6:59:c1:b6:
d4:07:8c:16:c9:01:3d:f5:69:e4:3d:24:6d:66:fb:7a:4f:07:
aa:9c:c4:82:ba:cb:f0:f1:34:33:62:22:55:25:99:2b:b4:46:
c9:72:c3:de:47:32:e2:07:ed:ad:04:e6:9c:25:d1:be:5c:b7:
27:41:1c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:31 2025 by rpki-client