Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json)
Hash identifier: G6pGXaMUeTJErwwKbDr1vtvaaxFfXyZaV9Q8X1keIJc=
Subject key identifier: E5:DA:54:2B:10:74:B1:20:6A:FA:59:D0:25:55:9E:8F:DB:F2:47:B3
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 019A71B8CD490E7301C0551F0A11F72E2ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: IAQeRjmmu9Z-veumwyPKfDrKvbI.roa (hash: Ww+1iOsdAQGbUwn6gW9paX3J1FGXxxEHtorVkrDGTZc=)
2: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: N+oX+sadggK1/0NjoWrfRicGCT/e1a4fNvQfJIBbFkw=)
3: zE2nCBuCP3GWKcrh09m8L6FV9yA.roa (hash: iLVOHuiEHM03YeDql7RR17g8jhss2HwinXwx77EwMP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cd:49:0e:73:01:c0:55:1f:0a:11:f7:2e:2a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=e5da542b1074b1206afa59d025559e8fdbf247b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:11:13:51:f3:04:f0:be:58:32:fd:b4:21:
84:97:74:f4:3c:56:9b:e6:6d:6c:f5:39:97:b9:08:
fd:ea:0d:ea:7e:39:86:f5:0f:5a:3a:f0:ab:77:bb:
dd:1c:fa:01:7a:1d:a3:0e:e1:1d:92:99:11:27:4e:
89:41:5f:db:e1:cc:08:b4:1f:ec:a5:26:da:dd:af:
a2:42:a0:5c:6a:40:dd:31:af:99:ff:eb:b7:94:21:
b7:be:07:be:cf:48:7e:88:17:fb:31:90:b2:20:64:
e9:8e:70:08:0c:23:9b:97:20:f5:b6:94:ef:0e:1b:
1d:8b:78:04:f1:61:37:4a:2e:5f:43:55:47:f6:90:
eb:a9:4a:de:70:83:11:c5:3d:a1:82:a5:ef:13:7a:
d4:f3:42:b5:1f:47:a3:22:28:eb:ff:d2:e1:24:f2:
be:60:1d:6f:45:1d:34:f2:07:b4:87:8e:96:18:d5:
57:ad:a9:9f:d4:ae:47:49:4b:8a:2f:24:d9:50:6a:
3e:2b:d2:93:a7:7e:df:c6:69:82:af:cd:a5:18:9c:
80:bf:39:6d:22:b4:26:15:6d:6c:82:98:02:8b:db:
da:12:e0:96:c1:fc:9b:fb:b5:4e:6f:a9:f6:66:8c:
e0:30:e3:6f:9e:de:14:10:da:28:ea:59:cd:ed:b9:
b2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DA:54:2B:10:74:B1:20:6A:FA:59:D0:25:55:9E:8F:DB:F2:47:B3
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:74:73:79:0b:6a:7f:a5:da:f3:b6:ca:ec:54:f8:26:d4:6d:
10:37:06:03:eb:6b:31:08:6a:21:77:aa:4f:3c:40:4b:67:a2:
be:93:54:1b:80:6e:47:89:b4:74:7e:11:07:3e:6a:27:49:4e:
bc:a5:d7:82:2a:85:36:01:ff:54:4d:a6:ef:ef:91:d9:19:78:
94:a6:01:5c:5c:15:29:61:4b:95:2a:a1:02:a2:f0:e0:0a:3d:
db:e9:7e:c0:8e:50:75:cf:c4:a7:85:c4:7e:53:4d:a1:eb:7f:
f8:db:fd:5f:9d:02:ec:43:e1:dd:f3:cc:a7:0b:2c:ad:71:8b:
68:d7:cd:1b:f4:e8:e0:97:c8:8f:34:d9:e9:94:dd:64:c2:28:
34:66:87:76:b9:7b:76:fa:81:8a:97:28:53:8c:a7:58:9b:9e:
d9:33:7f:df:ef:cd:ee:56:04:46:28:92:b1:d3:d8:04:47:38:
10:22:b1:e7:e6:73:85:51:0e:7c:7e:ac:69:09:f2:a2:e3:ba:
7d:72:a4:22:31:4b:57:9b:7c:dd:2f:1b:d8:c5:d1:b5:97:07:
35:ec:f2:ed:04:34:61:b2:83:a5:ff:04:2f:0f:3b:30:7e:4a:
af:47:dc:8e:81:8c:bd:36:de:35:2e:87:93:9a:48:10:49:8f:
1c:0b:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:31 2025 by rpki-client