Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: yriZjMOv63opIVzgKT6MX6A+ROM/g0ThQMFBugUqTMA=
Subject key identifier: 95:15:8A:05:14:12:F9:2D:2E:F8:6B:46:BB:80:85:BC:B4:2E:0D:B0
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 0199221E9788F4CD5CDB099A2A0633180D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 0977
Signing time: Sun 07 Sep 2025 03:00:54 +0000
Manifest this update: Sun 07 Sep 2025 03:00:54 +0000
Manifest next update: Mon 08 Sep 2025 03:00:54 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: LUdWqOCFHiXTSnmws2sJpHRFk8lUf6+tOaOO6/p5BBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:97:88:f4:cd:5c:db:09:9a:2a:06:33:18:0d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: Sep 7 03:00:54 2025 GMT
Not After : Sep 8 03:00:54 2025 GMT
Subject: CN=95158a051412f92d2ef86b46bb8085bcb42e0db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:c3:16:c1:97:37:28:8c:1c:e4:a2:50:3f:
4c:5c:59:1d:58:74:6b:ab:dc:e9:75:86:84:e2:67:
83:bc:cc:28:ab:38:3c:ea:35:62:d2:f5:6f:f9:61:
38:6c:2c:da:c0:b7:fb:48:6f:4f:fb:43:8e:3a:40:
c3:08:34:8f:f5:e7:5b:fa:4f:2a:ea:26:43:23:c5:
b1:fd:47:be:18:ac:2b:55:fc:42:96:fd:6d:3d:5a:
d2:54:74:da:aa:24:88:35:aa:87:80:e1:8a:1f:18:
89:d2:5f:7e:83:ab:19:ed:2d:2f:74:a2:f8:af:2a:
a3:94:ae:3c:40:8b:29:78:4f:bd:e5:0e:c0:ac:bd:
ee:15:4f:a7:1d:bf:0d:49:d9:92:c2:18:e4:69:88:
59:25:36:af:66:8c:08:e2:e3:12:b1:e3:f1:f2:c4:
9b:7f:9c:a6:e3:58:68:eb:24:06:02:c8:34:ff:dc:
68:e8:50:ba:96:e2:0e:01:e0:46:1f:4c:87:e7:aa:
2c:31:c8:ea:0f:1d:4c:7b:0e:17:74:0e:54:00:38:
25:77:d4:4f:59:26:4e:c6:02:5c:20:28:cb:20:4d:
18:15:f6:b7:fc:02:39:3f:6c:48:1b:ab:47:0c:99:
26:f2:a5:3a:f9:79:04:99:59:a6:25:db:dc:45:a0:
d0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:15:8A:05:14:12:F9:2D:2E:F8:6B:46:BB:80:85:BC:B4:2E:0D:B0
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d6:8c:94:83:c2:99:e8:6e:fd:24:52:d6:9c:00:58:38:1e:
2f:b3:c9:39:6d:b4:3a:65:f3:1a:19:32:34:07:a5:5d:d1:e0:
2f:e2:43:d6:52:04:1d:be:db:3d:98:95:c9:0d:bc:8e:cb:e4:
08:75:50:0a:3f:46:03:ed:29:3c:89:0e:a2:67:c8:df:dd:f6:
e9:00:94:12:ff:cc:79:d8:4e:40:c4:f7:07:bc:4e:d7:8b:6a:
59:3c:71:a2:da:b6:80:b3:e5:5d:b1:c4:4e:73:ae:95:17:a6:
08:a1:74:a2:fd:e1:77:c8:d2:a8:6a:c0:d2:09:76:b3:22:12:
63:93:1f:fd:6b:ab:c3:07:40:37:ea:79:a1:22:f1:20:95:71:
12:5b:7e:33:f1:55:5c:5d:7f:bf:28:c1:ba:81:19:bf:22:fa:
96:ad:de:e7:64:5b:6d:6c:c1:e9:5f:cc:4c:b0:73:bf:72:1c:
0a:2f:a2:56:a9:1f:b5:b3:d3:86:9b:7a:4e:2e:7d:2c:dd:2b:
68:27:04:0a:28:76:e9:c2:51:39:93:40:7b:d1:c1:6c:97:6b:
0f:7c:8f:a4:c8:3e:26:37:a2:d3:3a:26:60:1f:ad:55:06:79:
3a:ae:cb:7c:1e:75:22:4e:f8:f8:d4:91:31:14:c8:53:db:11:
98:fc:76:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:44 2025 by rpki-client