Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: Sd5sfp0xvQZRPFDVOoXSzR2/mbmY8QKDYitA41mKAl8=
Subject key identifier: 22:3E:C3:09:4A:20:A6:69:BE:8C:56:D7:22:3C:32:13:AF:B9:EC:E5
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019A13F20ABDC9872B467B10AE186567EB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 0E8B
Signing time: Fri 24 Oct 2025 02:00:20 +0000
Manifest this update: Fri 24 Oct 2025 02:00:20 +0000
Manifest next update: Sat 25 Oct 2025 02:00:20 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: IzlkrYZAmw3J+zPjPcwmJpkKNV0b8AXEshbBP9wtZlA=)
2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:f2:0a:bd:c9:87:2b:46:7b:10:ae:18:65:67:eb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Oct 24 02:00:20 2025 GMT
Not After : Oct 25 02:00:20 2025 GMT
Subject: CN=223ec3094a20a669be8c56d7223c3213afb9ece5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:ac:70:73:fd:2c:5c:f0:1e:f3:ff:c2:b6:
05:05:c1:e4:28:61:c1:64:8f:17:28:a9:00:26:6f:
19:ba:bd:56:f3:f0:4f:73:27:9f:56:ec:2b:0b:2c:
35:58:13:b0:ae:c1:24:6a:07:2c:ce:73:b3:6c:e3:
09:d8:6f:07:48:f1:94:20:ca:39:cb:85:65:26:68:
12:01:8d:fd:58:e0:62:9f:7b:d2:25:67:9e:39:b7:
1a:93:dc:32:4b:0e:e0:ad:f1:e5:d8:59:b4:c2:08:
78:b8:b0:b5:72:c6:08:8c:64:54:8a:9f:ed:83:60:
a0:2d:40:05:36:22:a1:60:91:40:fb:8a:98:b1:86:
62:75:38:d9:d4:0c:66:2d:61:ea:58:82:7d:9a:f1:
a4:66:65:fb:6f:6a:a2:be:1e:f1:f3:45:72:88:6b:
c0:ae:b2:96:b5:23:bb:1b:34:49:7a:bd:88:ca:13:
6f:7f:ab:8e:18:3f:a7:2d:fe:4b:6f:c1:a7:fd:9d:
5e:23:2d:18:93:9d:5e:3f:1f:cc:6a:17:f0:e4:8b:
75:9c:47:aa:55:04:ba:e2:7f:43:f9:21:f6:af:b5:
f3:bb:0c:3b:87:da:9a:4e:27:b0:76:3b:9f:05:15:
18:a1:09:3f:91:69:78:07:cd:dc:be:0c:ad:a4:97:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3E:C3:09:4A:20:A6:69:BE:8C:56:D7:22:3C:32:13:AF:B9:EC:E5
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c3:fe:0f:ed:b5:7b:ae:4d:b3:17:98:83:2f:5e:5c:25:12:
52:e2:de:a9:91:ee:67:71:be:0c:75:da:b3:0e:45:ad:38:86:
6c:36:2b:3a:d1:f2:23:b4:af:12:80:89:b7:65:25:3b:92:a9:
a3:f6:a3:36:5f:7d:f2:6c:43:bc:47:b6:d8:e7:55:8f:9c:10:
6f:a3:54:a5:76:ee:9a:cf:26:e7:10:c1:92:80:26:77:a7:db:
9f:7e:f1:6a:df:34:90:db:66:89:ae:09:12:6f:08:b6:0d:40:
8a:48:05:74:b5:c5:61:6f:eb:c1:a1:c2:d8:61:d4:a4:60:93:
de:53:5f:41:2f:cd:2e:cf:f8:ee:56:e8:5c:48:ea:29:bd:4d:
8a:b0:49:1a:3e:0f:3d:ef:a1:6a:da:9a:6e:07:68:54:47:5f:
76:cb:ea:64:90:58:ab:b2:84:89:88:99:29:9c:1d:61:f2:2d:
d4:29:cf:9d:12:70:30:76:88:e5:4e:74:28:45:6e:42:0a:1c:
99:c4:db:b5:97:b5:31:e7:02:70:91:36:a2:3a:b1:04:23:6f:
20:59:82:61:46:6e:7a:cb:9f:f9:1d:1e:4d:39:19:6d:58:5a:
77:7b:90:2e:e3:33:38:6a:26:36:8e:c1:b7:a8:2e:7e:9e:9e:
72:62:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:56:21 2025 by rpki-client