Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File: nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier: 8LVVPs95meryMShq4G/Rk20fU2g10IuFTWILLIUHMmM=
Subject key identifier: 2B:41:59:AD:F0:28:C5:F2:2B:75:3C:DC:EC:99:B6:EB:D5:81:BF:A2
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 019938029D695C6B123484FEAC206B057025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number: 1690
Signing time: Thu 11 Sep 2025 09:01:59 +0000
Manifest this update: Thu 11 Sep 2025 09:01:59 +0000
Manifest next update: Fri 12 Sep 2025 09:01:59 +0000
Files and hashes: 1: 1HPdDAhp2D5icqchW6FaN1f6wQk.roa (hash: aBqK8vPirMFUVR5mg8q9qqfP+HEENImw1WU9wmDpmLo=)
2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: kDuPpo1oBzb27xayjkIQj0ngJ8ZM/3s8LwNo7l0p3qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:9d:69:5c:6b:12:34:84:fe:ac:20:6b:05:70:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Sep 11 09:01:59 2025 GMT
Not After : Sep 12 09:01:59 2025 GMT
Subject: CN=2b4159adf028c5f22b753cdcec99b6ebd581bfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:bd:77:14:b4:54:46:5a:1b:59:0b:8d:23:
b5:8e:df:a0:3e:25:02:3e:bd:a7:d2:31:8c:26:2c:
ae:93:d0:95:65:74:85:d6:be:89:1d:de:fa:60:d4:
a2:60:66:95:b6:51:c4:12:4f:5d:3c:fa:f7:ad:21:
bf:aa:6f:c3:b2:37:3f:eb:fc:7e:c8:92:1a:a5:88:
1c:96:b3:82:92:4c:2b:0a:6a:dd:46:fa:69:b1:e8:
32:60:da:cf:a9:4d:ea:56:d0:5a:47:40:6b:b1:be:
83:d3:16:46:93:5b:5e:92:d2:23:f5:c2:49:17:76:
08:89:2a:a7:22:71:6a:91:da:fd:88:22:3d:81:92:
16:b8:82:f3:d0:0d:4d:17:90:a3:5d:e3:ef:6e:73:
e9:8c:c1:61:2b:7a:24:26:4f:c0:d0:80:19:b4:d5:
0c:fd:8e:33:98:67:d5:04:a3:0f:2a:99:21:bd:33:
8f:01:0f:53:2e:c5:9f:26:67:63:45:d2:1c:14:8b:
cc:ec:6d:88:6b:06:d7:32:f7:e5:76:5c:d8:cf:9c:
6b:6d:48:5a:dc:2c:9c:4d:79:7b:e5:61:39:90:70:
86:1b:4d:cd:90:24:f8:a2:4c:96:f7:0e:2a:0f:89:
3a:f4:98:f8:40:37:51:46:a3:c7:c3:45:96:f6:4b:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:41:59:AD:F0:28:C5:F2:2B:75:3C:DC:EC:99:B6:EB:D5:81:BF:A2
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:4a:ed:8d:05:de:78:76:53:be:d1:be:3e:a2:76:25:d5:e8:
6b:6d:61:06:6c:cd:0c:d1:93:49:8d:e3:2f:a2:54:41:1a:78:
0a:2d:3f:d9:4b:1a:02:cd:24:72:c8:38:1f:bf:32:4e:32:a2:
0f:90:83:3b:60:0d:95:a0:b4:0b:7f:82:c1:c5:88:3c:62:d3:
26:b3:fa:ab:8a:9d:cc:2c:e4:6e:da:83:99:e7:15:2f:1e:2d:
2f:da:54:4c:4c:86:e1:d5:3a:81:2c:65:4e:72:c1:17:d3:90:
53:da:66:4d:42:6c:f6:96:f6:92:c9:a1:99:2a:6d:a5:e0:65:
9f:b9:10:cf:9c:7c:23:53:77:47:d1:9c:b9:4e:c5:e4:1f:78:
81:b0:00:b3:98:d7:0f:f1:db:58:d0:87:97:0c:a6:20:09:dd:
b8:34:30:a9:50:f0:c4:2a:ff:00:cc:92:7d:4d:45:bd:35:cc:
a0:a6:3b:1d:3a:5d:f4:fc:de:0d:69:c6:64:ad:d5:20:8e:80:
4c:17:2c:17:43:4a:e2:30:cc:d7:80:64:33:7d:66:3f:c1:3b:
b2:09:23:79:50:ac:cb:de:72:c4:e9:16:7c:ca:7e:38:8d:76:
83:07:18:9c:b0:64:0c:d7:3c:98:d2:98:90:23:5b:86:4c:bc:
50:b3:6c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:29:02 2025 by rpki-client