Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: WUSCBa97CqygSYsfPZJBDqkfjNk+1MTx5qLSRhRIbyM=
Subject key identifier: 53:48:F0:BB:3C:68:49:C6:39:9D:DA:6A:71:A3:83:85:C0:47:51:CC
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 019A7225E99FC8892993C62FBC195E7B042B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 0A25
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: z6LT4kIwHIMwrWKr0DUx9Nwj3IEM+G8QqhHQ01FQusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e9:9f:c8:89:29:93:c6:2f:bc:19:5e:7b:04:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=5348f0bb3c6849c6399dda6a71a38385c04751cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:e8:52:fc:d5:8b:5e:b5:37:b2:bc:7c:f3:
1e:96:e4:0a:3a:56:56:b0:7f:ff:b9:9e:28:81:3e:
e8:d0:7f:13:e9:ab:e7:20:b7:38:37:ee:21:ac:af:
1c:21:3e:6e:4f:29:71:01:eb:95:ac:a0:e4:9d:4c:
8d:ec:b5:09:e6:32:97:f3:ae:38:9e:8a:99:f9:b0:
31:5f:0e:c4:66:b4:05:0e:a6:e3:6f:11:91:81:92:
c9:76:65:26:c6:03:a7:f6:9b:22:0a:10:04:72:41:
82:05:44:91:92:6b:50:16:06:31:ad:c9:4a:d7:26:
0f:8c:a7:d0:0e:ac:bc:f1:4a:1a:05:d8:89:1e:19:
44:75:1b:85:70:c9:01:3d:c2:91:a5:1d:9d:ac:1d:
5e:05:b4:56:dd:56:66:ff:56:40:f0:50:d2:0b:32:
f3:24:3a:dd:6d:48:3e:f7:b8:ae:7c:b8:f4:a3:3a:
e6:a8:ee:eb:25:1c:72:cc:f1:08:5c:ee:4b:dc:19:
f9:82:19:c3:1b:c4:6e:26:36:d0:0d:0c:b1:ff:7f:
fe:21:d8:7e:21:27:57:4b:36:d8:bd:a0:b1:3f:e8:
d7:c4:6e:ef:da:0a:b7:71:f5:01:ff:12:d7:76:67:
1b:1b:12:86:f6:d5:70:3e:4d:62:2f:67:ad:61:72:
d3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:48:F0:BB:3C:68:49:C6:39:9D:DA:6A:71:A3:83:85:C0:47:51:CC
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fe:b6:24:56:5f:c8:b9:6c:c8:3b:2e:85:01:2b:0a:1e:f0:
a7:8e:19:a5:fa:c4:77:92:cc:e5:da:e7:58:8a:b9:3b:2d:26:
8b:ef:54:82:fb:e5:04:15:31:f4:3b:d2:6c:2c:02:bd:58:0e:
47:c7:9f:d8:75:7d:f5:dc:f1:e8:ef:bd:82:c7:40:82:81:2a:
cb:a7:30:c8:28:6b:84:b6:c4:4a:6d:62:c8:be:7d:7d:22:a7:
a1:7f:fa:6a:7a:c9:41:18:c9:d1:0c:a9:09:93:f8:16:4a:44:
b5:5b:e9:26:2d:31:4f:96:71:fd:1c:f4:41:b5:76:a7:d1:29:
aa:fb:f1:e4:06:ec:2e:01:c2:d7:a2:9c:f4:45:06:f2:43:cc:
6b:70:b5:ad:71:3d:54:de:b7:6c:dd:4a:5a:7a:69:c2:12:81:
b9:b6:53:d5:30:df:18:ff:ae:76:47:03:57:b6:e9:83:f2:6e:
ea:72:63:a5:55:8b:0f:31:e6:53:a2:9a:87:4d:fe:69:2d:64:
c9:1c:39:2f:4c:5d:8d:f3:a7:dc:dd:b3:2e:e0:76:12:33:be:
66:6b:73:89:5b:aa:6e:5f:cd:af:04:8b:7c:b6:fc:d1:2e:51:
aa:1b:2e:ef:c7:43:2f:8d:6a:55:ca:3d:b2:22:25:6c:95:d1:
61:eb:44:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJemfyIkpk8YvvBleewQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MmFmNjU3YzA5ZTE2MmJlNmU2NGFiZTA0ZDIxYzVlNzdh
ZGUyMGUwHhcNMjUxMTExMDkwMTE4WhcNMjUxMTEyMDkwMTE4WjAzMTEwLwYDVQQD
Eyg1MzQ4ZjBiYjNjNjg0OWM2Mzk5ZGRhNmE3MWEzODM4NWMwNDc1MWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0noUvzVi161N7K8fPMeluQKOlZW
sH//uZ4ogT7o0H8T6avnILc4N+4hrK8cIT5uTylxAeuVrKDknUyN7LUJ5jKX8644
noqZ+bAxXw7EZrQFDqbjbxGRgZLJdmUmxgOn9psiChAEckGCBUSRkmtQFgYxrclK
1yYPjKfQDqy88UoaBdiJHhlEdRuFcMkBPcKRpR2drB1eBbRW3VZm/1ZA8FDSCzLz
JDrdbUg+97iufLj0ozrmqO7rJRxyzPEIXO5L3Bn5ghnDG8RuJjbQDQyx/3/+Idh+
ISdXSzbYvaCxP+jXxG7v2gq3cfUB/xLXdmcbGxKG9tVwPk1iL2etYXLTHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNI8Ls8aEnGOZ3aanGjg4XAR1HMMB8GA1UdIwQY
MBaAFDcq9lfAnhYr5uZKvgTSHF53reIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlyMlY4Q2VGaXZtNWtxLUJOSWNYbmV0NGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yMDA0ODktMTUyZi00NDI0LWI4NjMt
MWM2Zjc3N2Q0MzQ5LzEvTnlyMlY4Q2VGaXZtNWtxLUJOSWNYbmV0NGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yMDA0ODktMTUyZi00NDI0LWI4NjMtMWM2Zjc3N2Q0MzQ5
LzEvTnlyMlY4Q2VGaXZtNWtxLUJOSWNYbmV0NGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/62JFZf
yLlsyDsuhQErCh7wp44ZpfrEd5LM5drnWIq5Oy0mi+9UgvvlBBUx9DvSbCwCvVgO
R8ef2HV99dzx6O+9gsdAgoEqy6cwyChrhLbESm1iyL59fSKnoX/6anrJQRjJ0Qyp
CZP4FkpEtVvpJi0xT5Zx/Rz0QbV2p9Epqvvx5AbsLgHC16Kc9EUG8kPMa3C1rXE9
VN63bN1KWnppwhKBubZT1TDfGP+udkcDV7bpg/Ju6nJjpVWLDzHmU6Kah03+aS1k
yRw5L0xdjfOn3N2zLuB2EjO+ZmtziVuqbl/NrwSLfLb80S5Rqhsu78dDL41qVco9
siIlbJXRYetEHA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:01 2025 by rpki-client