Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
File: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft (raw, json)
Hash identifier: Xugy6umOY/zcOotv3wWsW9VLlBdmFkWZeSa1j7eJmR0=
Subject key identifier: C7:41:8C:A1:3B:7F:EA:A7:25:06:F7:A3:B1:D0:14:1F:8C:B9:C1:FA
Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
Certificate issuer: /CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Certificate serial: 01992255A54C2636B7BE7FD875D776CD44E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
Manifest number: 0355
Signing time: Sun 07 Sep 2025 04:01:02 +0000
Manifest this update: Sun 07 Sep 2025 04:01:02 +0000
Manifest next update: Mon 08 Sep 2025 04:01:02 +0000
Files and hashes: 1: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl (hash: U/PZ6IrlCqJxrxu4w2qeYZYTkQWwvl33E00Ono4OL3I=)
2: dbO_KM950SVoV4qdoDfieNWIw0s.roa (hash: DCE7AE8Wo5HEULV6TjwRejnJ6LMRCD866TcEBq5yg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:a5:4c:26:36:b7:be:7f:d8:75:d7:76:cd:44:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Validity
Not Before: Sep 7 04:01:02 2025 GMT
Not After : Sep 8 04:01:02 2025 GMT
Subject: CN=c7418ca13b7feaa72506f7a3b1d0141f8cb9c1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:25:99:15:7b:90:b6:73:30:36:cd:53:f6:e4:
30:3e:ce:85:89:eb:4a:b9:2c:ba:a4:6a:7f:d8:d1:
db:5a:84:db:d1:f0:07:51:fb:7c:79:ed:41:df:c2:
36:e2:32:33:1e:f0:95:7c:ea:1c:ba:24:8d:43:9e:
2f:c0:e7:c9:62:4c:06:84:aa:c5:2d:1a:bf:f6:ab:
0f:5e:b5:30:ab:03:f9:08:f7:a4:c8:23:48:8e:08:
48:2a:66:9c:0d:3f:c7:b7:f6:db:60:a3:45:b3:f1:
2c:01:56:05:4e:10:df:87:c5:cf:d0:0b:17:7d:62:
61:6e:4e:29:4c:22:df:9c:5b:99:78:d6:c0:33:62:
df:b0:e8:8d:92:b9:9e:5b:1e:e0:a9:b6:68:f4:48:
32:ca:e0:e6:b4:15:0a:f0:7a:39:3e:3b:58:50:76:
b9:6d:e8:a2:72:96:05:ba:d4:03:c1:62:b7:22:f7:
4e:06:1c:f5:48:c7:0e:ed:80:d9:88:37:a3:58:9f:
22:22:32:e1:bd:da:4a:ce:bd:f9:71:21:19:19:56:
cd:64:f2:d3:78:c1:86:70:1f:1b:a0:1f:c2:3d:af:
1e:65:85:af:40:4f:9c:02:c8:59:fa:52:ec:fa:26:
bd:b4:98:8a:5d:0c:38:4d:73:33:d7:a4:3f:ee:8a:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:41:8C:A1:3B:7F:EA:A7:25:06:F7:A3:B1:D0:14:1F:8C:B9:C1:FA
X509v3 Authority Key Identifier:
keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a7:a1:4d:4c:8e:19:fd:50:73:22:98:13:36:17:0c:33:e0:
ad:55:26:96:72:3a:74:35:8f:52:a0:5d:4f:6b:db:56:7c:20:
be:e1:97:31:80:40:b0:75:0c:db:a7:03:d4:d3:9e:bc:13:d1:
ce:4f:45:4c:6f:3d:79:65:33:46:2f:cf:fb:bf:7d:39:2c:10:
c9:df:cd:2a:2c:25:6e:d2:a5:ff:dc:2d:62:cf:3a:65:27:8d:
6e:cb:a7:02:40:0f:62:6d:f7:48:6c:76:f9:4e:4f:83:4f:31:
60:b8:54:24:1b:b3:8b:3d:b1:f4:d3:ff:4b:60:f8:23:de:0e:
87:e3:06:5f:64:a3:13:de:c1:6f:ac:f4:b5:39:35:19:22:cb:
9b:25:f7:7e:93:01:74:23:8f:46:56:88:ef:e4:76:c3:f7:eb:
3a:ae:7a:c5:4e:51:78:a6:89:41:17:10:87:c0:45:8a:23:f5:
c6:85:68:c6:2f:36:43:38:a5:45:89:bc:7f:ea:7b:23:b4:ea:
56:5c:fc:4b:cb:aa:cb:6a:34:a3:2f:7a:ab:a8:6c:0f:45:cd:
5e:c8:3f:c1:5c:a7:a8:82:d5:e3:ec:e3:ad:aa:5c:4c:c6:80:
49:87:60:48:d4:92:25:41:12:13:4b:9d:ce:24:bc:fd:a5:65:
05:4f:d1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:26 2025 by rpki-client