Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier: tBLBSTWXt8Rl6ZStXlQqYvCdkdUMrTeZyJKzPNoNv/c=
Subject key identifier: 64:AF:EE:FD:BA:FA:CB:15:ED:4E:A5:3E:5A:FE:46:1D:B1:E5:4A:11
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial: 019A71B8EDBC9007DA5860B4C5725141BDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number: 08EE
Signing time: Tue 11 Nov 2025 07:02:16 +0000
Manifest this update: Tue 11 Nov 2025 07:02:16 +0000
Manifest next update: Wed 12 Nov 2025 07:02:16 +0000
Files and hashes: 1: GfCkDNWZJC7tTqAONgQkcSI9t8c.roa (hash: ioLhHD20h58KhY7GJ61ivoHQWsANqXCHQxdSr8iWjVQ=)
2: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: /z1cAtY4rytc1oX8176mFueD+tN9oa31bbyqaHDNt6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ed:bc:90:07:da:58:60:b4:c5:72:51:41:bd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Validity
Not Before: Nov 11 07:02:16 2025 GMT
Not After : Nov 12 07:02:16 2025 GMT
Subject: CN=64afeefdbafacb15ed4ea53e5afe461db1e54a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:8a:5f:0b:82:d1:21:10:46:8d:56:18:7c:
7d:4e:fb:83:72:76:f6:52:93:ef:62:ee:cd:e2:b7:
af:90:7d:59:98:e0:9f:0b:5a:4f:df:b8:37:25:2b:
d4:6a:b6:cf:b5:ec:3e:cf:41:38:a4:92:27:b9:1f:
c9:0a:0b:d9:14:d8:80:dc:1b:6e:9f:46:73:ba:e5:
fb:b3:db:06:1b:89:30:32:af:06:e3:52:2a:d0:cf:
90:fe:17:4a:7c:40:3b:5b:49:10:1b:61:42:92:be:
dd:ca:4b:f3:56:00:8a:47:1b:81:66:f6:cd:c6:23:
f7:9c:93:5d:8d:77:57:f0:90:24:c7:9a:9a:e1:da:
5e:e1:d2:f6:20:e1:1d:d3:96:78:ec:b5:84:f0:f7:
d8:7d:55:d7:ea:62:c5:15:c8:4c:65:c7:a6:ae:f7:
5f:ba:9a:f7:51:32:35:ba:df:cb:23:14:e1:0c:8f:
56:d8:d3:97:1a:1d:6b:cb:f0:51:2e:16:54:31:58:
4d:01:bf:80:04:6b:d6:ca:2a:03:1f:ae:88:67:c1:
71:c9:04:9c:11:2b:58:c5:27:af:f4:38:17:31:81:
cc:95:ac:e2:fc:2a:72:c5:56:55:b9:ce:ac:8e:65:
53:78:5d:8d:d0:e6:ed:f6:8a:01:f4:83:ed:cb:0b:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AF:EE:FD:BA:FA:CB:15:ED:4E:A5:3E:5A:FE:46:1D:B1:E5:4A:11
X509v3 Authority Key Identifier:
keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:82:e1:f3:2e:63:c4:34:51:a9:31:d5:a3:bb:f0:9f:4d:33:
ea:fa:e1:a8:58:5a:7c:6b:55:07:97:ec:44:7c:0e:f8:95:4b:
aa:4c:e6:36:fe:df:2d:7f:dc:6d:f6:c5:f9:b0:61:92:a3:a1:
d4:b7:ac:31:6c:c5:a5:73:0a:3d:c4:ff:96:08:fc:48:48:bd:
44:32:f6:c6:6a:03:91:31:66:45:d5:63:ae:18:6f:4a:10:b6:
2f:93:89:00:15:aa:fa:aa:c7:29:c4:6b:80:ee:3d:fc:23:65:
a4:9c:dc:b2:64:60:8e:df:4f:f5:4b:84:48:9f:de:cc:17:e5:
4d:fc:1f:f3:1b:bf:6a:b4:b1:a1:dc:61:be:23:94:83:5d:2b:
b0:47:4b:a2:74:f7:4f:ec:30:c9:67:f1:c5:93:f4:88:2a:fd:
6a:da:c7:8b:9c:22:01:4a:f9:1b:e0:0f:74:fb:5c:a6:a2:a8:
0b:6a:db:3f:ac:d8:1d:6f:9e:e0:c6:55:a5:f2:fb:0c:5c:52:
55:64:73:13:ff:76:69:10:30:e1:a5:eb:64:01:dc:de:b8:2e:
80:f6:d7:40:61:27:a0:6f:02:0f:50:cb:cd:e3:ae:9a:27:dd:
29:8e:1b:76:77:17:a1:aa:78:ba:08:ab:00:15:99:74:b3:67:
09:71:71:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:33 2025 by rpki-client