Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
File: nyjbpUvBou6fd-Br-AglbdyTh-g.mft (raw, json)
Hash identifier: W76ghO3FBnX9mpzVKlYb89HTqmb0ue4TRmxNaIE7Iu4=
Subject key identifier: F6:5E:45:F3:0C:BC:AE:6C:FE:19:3D:F4:6A:75:92:82:02:7C:32:60
Authority key identifier: 9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
Certificate issuer: /CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Certificate serial: 019A71B833FBBA1A0908C6B69EF2BDCFAA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
Manifest number: 0736
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: nyjbpUvBou6fd-Br-AglbdyTh-g.crl (hash: uX8Hveg8+awencN1zT4YGmLXSu3vqt8m/RyIVny8YUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:33:fb:ba:1a:09:08:c6:b6:9e:f2:bd:cf:aa:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=f65e45f30cbcae6cfe193df46a759282027c3260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:f2:4e:ee:32:76:af:84:43:58:94:60:b2:
e2:a3:25:60:3f:66:a2:e3:20:52:3e:c0:83:29:25:
24:38:ee:f8:f6:49:ef:8e:3a:8d:3a:79:50:db:17:
c1:47:a4:cd:f0:fd:df:3e:5d:d2:2e:b5:2c:46:54:
d1:df:bd:7d:d5:a8:94:94:38:cf:52:be:8d:da:33:
10:f4:b4:db:35:b3:12:5b:78:52:31:20:d3:6e:67:
ea:a3:31:39:84:cd:d5:a3:66:b9:d2:8b:83:67:d9:
a8:f2:3e:8b:2b:ff:fb:e2:9f:f2:5f:b9:2d:35:23:
3f:8a:3d:c8:71:25:84:9c:e2:bd:b7:6c:aa:46:63:
04:2b:3c:6b:33:04:ae:77:cd:23:72:d6:b4:20:12:
f2:c7:a2:e2:f1:72:dd:d1:f1:de:25:2d:a0:e4:28:
56:3c:16:c9:5e:fd:ed:bb:5f:ad:a3:5a:24:b3:c6:
5a:0d:bf:b9:33:10:58:19:8e:c9:74:87:0a:a5:ab:
21:34:e3:86:23:29:b9:c0:bf:45:eb:90:4f:9f:49:
c9:df:d8:96:ce:73:ff:0a:48:ee:55:ae:b3:eb:97:
d5:74:ef:1c:94:ea:1f:ae:2e:77:68:e5:3c:b6:72:
79:60:14:ab:3d:8c:64:15:1f:24:87:33:b4:42:53:
c0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5E:45:F3:0C:BC:AE:6C:FE:19:3D:F4:6A:75:92:82:02:7C:32:60
X509v3 Authority Key Identifier:
keyid:9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c9:5f:29:7d:f5:8d:94:88:da:ac:da:36:51:65:7a:56:05:
44:b0:d9:91:27:fd:60:65:1a:0d:d8:73:8f:12:77:b0:05:6c:
bb:28:6c:ed:bd:e7:31:f9:16:b8:af:e4:f6:ef:5f:e1:10:90:
3b:91:dd:40:44:be:76:e8:76:24:da:8b:ad:ca:92:4c:8d:2e:
da:29:da:d1:89:34:0b:5a:bf:dd:e2:1d:51:28:45:a0:ab:de:
4b:a3:7e:2a:16:f9:5b:20:be:52:18:19:82:4e:b2:0a:f5:bb:
ea:6b:20:9f:47:8b:5d:f1:e4:cf:02:1a:69:32:c3:04:be:55:
b1:1e:01:54:43:d1:80:7c:74:04:fd:f6:94:a1:58:2a:cf:0c:
31:54:20:ed:5c:65:aa:45:7e:d9:5c:8b:3e:cc:66:e9:18:49:
f6:b1:0a:77:76:90:9a:6a:28:d9:5b:9e:0d:54:cd:af:0c:9b:
b2:c7:d6:cd:50:bf:bf:ee:e6:71:fc:e9:e5:b5:65:40:86:5d:
b2:38:52:94:49:a3:a6:61:f1:d7:11:8c:25:83:9b:06:04:ff:
ab:c7:f9:9e:26:a8:0b:51:73:9a:a9:07:b3:dd:35:98:15:d4:
0d:7b:bc:a6:35:6f:be:1d:30:ad:6a:1b:ff:09:41:87:1e:1a:
f1:de:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:56 2025 by rpki-client