Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier: du6+8fQpfpOgITE4X1kwIMntj7HsloQb/9EUmiKn0hA=
Subject key identifier: 69:CF:76:AE:50:77:48:9A:BA:17:9A:6F:3B:2F:F5:3C:CB:ED:8E:15
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial: 019921B123853A5FD0CEAB45E092081D7BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number: 0840
Signing time: Sun 07 Sep 2025 01:01:20 +0000
Manifest this update: Sun 07 Sep 2025 01:01:20 +0000
Manifest next update: Mon 08 Sep 2025 01:01:20 +0000
Files and hashes: 1: GfCkDNWZJC7tTqAONgQkcSI9t8c.roa (hash: ioLhHD20h58KhY7GJ61ivoHQWsANqXCHQxdSr8iWjVQ=)
2: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: VjI8RT+doZs7+eThWd/RLmFj0OC6/Dkdsvathd+vpcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:23:85:3a:5f:d0:ce:ab:45:e0:92:08:1d:7b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Validity
Not Before: Sep 7 01:01:20 2025 GMT
Not After : Sep 8 01:01:20 2025 GMT
Subject: CN=69cf76ae5077489aba179a6f3b2ff53ccbed8e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:3a:6c:0d:3e:99:f9:cd:7c:57:08:63:d9:
32:87:8a:28:f5:3f:67:28:70:a0:6f:33:d9:6e:3e:
51:1e:2b:0a:32:76:7a:2b:ea:fd:36:47:96:5c:3b:
04:f7:ff:23:50:cd:24:02:6c:48:64:e4:af:cc:fa:
74:5b:ec:fd:12:40:84:20:19:1c:80:8f:e6:81:58:
a1:21:0d:55:ba:62:0d:3f:2c:71:f2:d3:14:ba:a6:
43:e4:ee:75:71:99:d9:e9:cc:d5:e8:c6:b8:b5:42:
4e:a6:c8:e1:79:0a:9b:19:0c:bd:71:a7:d0:e2:9d:
55:66:13:41:f2:34:0f:b6:1e:d0:7e:b9:b5:a7:bb:
fe:50:ea:e6:08:bd:ba:f5:2f:6d:ee:d7:2e:c9:ae:
67:f0:f7:cc:0a:34:d7:e8:9d:46:a9:cf:e9:9b:2a:
bc:d7:41:7b:98:7b:6f:3e:44:d9:88:09:45:dc:1a:
0b:84:02:ae:20:f0:f1:a7:ed:fc:61:ad:7b:64:51:
6c:6f:7e:a8:4b:69:ca:00:de:38:53:52:46:82:ae:
9a:f3:39:95:13:39:97:23:5c:e6:75:07:9c:50:90:
49:cd:19:1d:28:a0:56:ba:5d:e7:e0:95:00:b6:e3:
1b:0a:fc:aa:4d:ee:83:c1:17:62:2a:81:ce:25:21:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CF:76:AE:50:77:48:9A:BA:17:9A:6F:3B:2F:F5:3C:CB:ED:8E:15
X509v3 Authority Key Identifier:
keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d6:27:43:ed:04:19:fc:9d:f2:f2:73:37:84:c4:2a:07:03:
14:2f:81:f1:69:72:ad:f3:8f:39:55:e6:ca:3c:91:44:a8:9b:
2d:a4:c5:e7:9a:0c:43:b3:0c:cb:bf:3b:d0:d0:28:4c:5b:18:
fb:bb:e7:d2:65:b2:f5:3a:b9:72:7b:a5:a6:ab:78:eb:f3:6d:
b4:de:25:5a:b1:81:d5:19:a9:2e:b3:72:46:a5:3c:60:83:4a:
34:4d:bc:12:6c:75:95:7b:e5:f6:b9:0f:61:1c:aa:9b:1d:5d:
6b:58:1e:33:86:07:2b:1f:73:64:36:a9:ba:40:1f:74:94:de:
f6:3b:17:cf:9f:a1:40:00:95:96:c8:36:ce:f0:a6:e3:c0:aa:
3c:55:a9:5d:ff:fb:ac:33:7c:f8:d7:c7:94:e7:a1:5e:91:50:
84:3e:76:17:b7:cf:1a:a0:9a:b1:26:c4:e0:b4:3d:a6:8f:f9:
4d:07:ef:30:e3:67:30:b1:05:79:12:f0:b7:de:e7:55:7d:68:
1c:e9:bf:bb:b9:a7:9d:3a:0b:49:20:fe:6d:17:5c:e5:6d:bc:
8a:1f:c7:6e:41:ad:68:50:4d:be:01:8d:66:be:92:55:47:ef:
c8:ca:e7:95:0e:d9:3b:fc:82:d5:d9:96:cb:a0:17:8c:48:c6:
e6:51:7b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:43 2025 by rpki-client