Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
File: NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json)
Hash identifier: uIcyWKP7vD12IRGzAoQJnvQbhBV4k9CNXbWuKfhajBU=
Subject key identifier: CE:7E:7B:D1:FC:38:B8:55:83:50:52:DC:71:D9:56:7E:B6:FC:78:8E
Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
Certificate issuer: /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Certificate serial: 019A73A6828B35C0F0CE6E82780CBD2DA5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 16:01:23 +0000
Manifest this update: Tue 11 Nov 2025 16:01:23 +0000
Manifest next update: Wed 12 Nov 2025 16:01:23 +0000
Files and hashes: 1: Ex_2ickmNwSl468A43nBNWlR1U4.roa (hash: 2F6N+mLC+ZFSEAJYbcx9IRB+VD26lz+G1r697PEXjx4=)
2: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: dZyloGi5K7FO37fGICHTWyGJ/zIX5CZ9iBzEGXQt8pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:82:8b:35:c0:f0:ce:6e:82:78:0c:bd:2d:a5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Validity
Not Before: Nov 11 16:01:23 2025 GMT
Not After : Nov 12 16:01:23 2025 GMT
Subject: CN=ce7e7bd1fc38b855835052dc71d9567eb6fc788e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:cb:d5:57:05:5a:60:36:9d:78:81:a2:2c:
ff:33:5a:69:c5:15:6d:4a:56:00:eb:40:45:ff:23:
62:93:e2:35:24:64:01:10:32:f1:0d:35:43:4d:34:
2f:8e:c4:47:d2:68:7a:40:72:5a:48:16:bf:23:20:
97:84:62:87:c6:14:8b:a7:69:ea:d3:9b:fc:a9:cb:
88:5e:ce:db:d5:b9:14:b3:ca:3c:00:38:c6:16:7c:
4e:dc:df:e5:44:cf:8e:dd:51:c1:f2:c7:c9:e6:0c:
7e:6f:f9:6d:b9:19:52:fb:aa:7d:c6:db:af:1c:b5:
6f:a3:38:6c:34:de:3e:17:81:a3:15:85:aa:d1:ca:
82:95:c8:3a:ef:ea:aa:db:ef:c2:b7:b8:1c:7a:42:
5e:db:c1:f6:9d:39:e5:01:9b:74:15:09:53:34:9d:
33:91:4a:35:41:5c:4d:ce:0f:b0:68:29:b8:d2:f8:
bf:89:30:d3:7f:3b:50:10:50:5e:ee:39:5e:95:dd:
f2:fe:60:ef:41:6a:7c:ba:78:83:51:9b:7d:91:0f:
f4:9c:b3:3f:96:5d:d6:0f:fe:0a:5a:16:d5:06:00:
0e:01:bb:32:a0:a6:3a:6f:d4:3a:ac:62:03:bc:91:
9b:13:49:8d:59:95:19:26:34:d1:ed:55:3d:4d:e0:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7E:7B:D1:FC:38:B8:55:83:50:52:DC:71:D9:56:7E:B6:FC:78:8E
X509v3 Authority Key Identifier:
keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:aa:35:96:38:ee:d0:44:8e:7d:d5:77:e7:8b:2a:5e:e0:e4:
25:0f:94:47:1e:fd:70:d1:b9:90:7f:c4:b2:fb:25:00:30:69:
06:a1:c4:25:c0:98:40:27:54:59:66:3a:0d:6e:a0:e7:0a:47:
f1:70:a5:d8:b0:c6:40:8b:23:76:8f:dd:ce:e8:60:91:88:6b:
1f:ca:13:22:1b:52:15:c6:29:27:b5:e6:a2:38:5b:b7:8f:fc:
f9:d5:a5:b8:cd:ec:d4:0a:a9:b6:d3:77:5f:62:54:c8:76:85:
fb:8a:09:38:5f:f1:68:5f:22:d7:c4:75:ee:77:f8:ab:98:45:
29:c2:51:f3:b7:b9:a2:7d:be:c2:eb:e5:d1:00:98:b2:95:05:
23:1b:40:ff:da:19:0c:f2:ba:24:e9:5b:04:ba:a5:e1:03:92:
2b:bc:0f:c4:af:9c:26:6b:65:da:f0:58:0d:12:45:72:8b:d2:
06:f3:77:84:c2:8f:29:30:db:c5:c4:64:4b:4e:7b:58:ab:1b:
53:62:c3:44:0a:a9:ec:60:f1:9a:0b:2b:c6:e7:46:96:03:d9:
26:47:a9:41:7f:d5:ff:39:e0:72:04:5b:cd:11:0f:be:2f:62:
2b:51:17:44:f8:35:31:48:7b:8d:a7:16:c2:19:ba:87:07:8c:
1b:7c:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:02 2025 by rpki-client