Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
File: NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft (raw, json)
Hash identifier: 5tW8/CZI2TCdK9tTXwjbWuzZoD9NUMdvhVdVmSBzO/U=
Subject key identifier: CC:0A:C5:F3:74:68:32:78:B4:BA:A4:C8:F3:C6:44:53:9A:B0:9B:5E
Authority key identifier: 37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65
Certificate issuer: /CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
Certificate serial: 019921B241CBFC449BAECDA1EABE9CAFE0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
Manifest number: 1391
Signing time: Sun 07 Sep 2025 01:02:34 +0000
Manifest this update: Sun 07 Sep 2025 01:02:34 +0000
Manifest next update: Mon 08 Sep 2025 01:02:34 +0000
Files and hashes: 1: NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl (hash: zY2kBIfzv7924kyK7Spms0f7i7lbk1sDOkP8hqtNjKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:41:cb:fc:44:9b:ae:cd:a1:ea:be:9c:af:e0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
Validity
Not Before: Sep 7 01:02:34 2025 GMT
Not After : Sep 8 01:02:34 2025 GMT
Subject: CN=cc0ac5f374683278b4baa4c8f3c644539ab09b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:27:22:40:86:18:0d:ad:0c:fe:a5:ce:7f:
52:43:88:37:64:1e:ec:36:df:2c:f2:ba:01:13:6f:
52:e5:ee:a2:cd:83:f9:c4:0d:45:96:71:15:71:7a:
66:e1:dd:33:23:16:7d:e5:40:07:c6:6e:32:1d:5a:
86:82:cf:4d:b5:f5:ef:57:35:06:83:23:8f:f5:5b:
bb:ae:b4:f9:7f:ef:e4:c7:45:66:51:87:eb:6d:98:
25:72:6e:20:b9:c7:49:0c:d4:42:ea:71:13:0a:75:
04:4a:36:a0:7c:81:9b:c6:75:cf:b7:a1:5e:e6:6a:
c2:6b:f2:39:3c:b7:64:37:97:39:52:84:d8:55:5c:
1c:7c:3e:1f:3d:f8:fb:9d:dd:88:4b:a8:8b:c8:16:
b1:50:cc:73:95:76:e1:fa:f0:a0:f4:73:18:68:9f:
29:60:9c:fb:ef:5f:a7:5b:ef:c6:7d:9b:88:3a:02:
33:dc:7a:96:56:c8:cf:ee:bf:b0:83:0e:42:63:85:
cd:e3:49:d2:a4:c1:0f:d9:32:04:82:46:89:70:1f:
18:ca:61:71:d5:a8:e8:b0:8f:3c:98:30:ea:8f:4d:
c7:75:b8:ba:ca:cc:42:97:e5:f5:4e:b7:ae:5e:5f:
bc:88:de:27:d8:09:e6:f8:7e:fa:39:89:17:52:99:
a7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0A:C5:F3:74:68:32:78:B4:BA:A4:C8:F3:C6:44:53:9A:B0:9B:5E
X509v3 Authority Key Identifier:
keyid:37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e7:e6:66:ff:c6:35:af:44:ef:46:53:a3:1b:b4:e5:92:88:
06:d0:a8:c8:0d:c1:6a:d3:3f:c6:9b:88:df:f4:03:97:1d:1c:
0c:5d:9a:7a:d7:8b:d3:85:26:51:11:78:50:4b:be:7f:28:6d:
e0:a9:c4:ad:d1:ac:d0:af:6b:af:b2:c0:81:72:82:22:b2:53:
dc:cd:9e:00:fa:af:91:22:3c:d2:d7:57:aa:05:58:b3:3a:41:
65:59:e6:da:31:87:63:01:61:77:62:ad:af:06:51:4d:10:c7:
e0:32:d2:61:4a:57:0f:94:c8:81:96:d4:bf:8a:31:41:fa:40:
c3:5b:a7:00:e1:c9:26:93:93:4c:d6:83:65:c1:d7:68:45:d6:
32:a9:63:4a:33:5d:a2:79:32:a2:e9:db:70:63:e4:2b:cd:41:
43:46:c8:24:c7:98:d9:5b:d1:77:74:94:85:60:78:d2:86:2b:
c5:76:15:eb:81:4d:60:a9:75:77:36:66:cb:b3:d2:e6:91:7e:
2e:32:92:cb:ce:58:92:eb:81:7e:7a:07:bf:fb:3f:76:12:1e:
e9:c8:52:ed:52:35:81:72:bf:77:36:08:92:b4:86:ce:ba:95:
06:45:c9:c4:20:3a:26:90:5c:07:20:bd:f1:c2:7b:50:d9:70:
0a:d3:6b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:24 2025 by rpki-client