Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: f6afuZJC2EILr5BJp32JqmVSVlgykLydXmqUweb6NxM=
Subject key identifier: CB:BF:D1:71:37:88:9D:09:77:6C:75:CC:B5:75:31:38:38:0C:FF:44
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 0199239F5BB879869A9723A378FD659A43C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0CB3
Signing time: Sun 07 Sep 2025 10:01:09 +0000
Manifest this update: Sun 07 Sep 2025 10:01:09 +0000
Manifest next update: Mon 08 Sep 2025 10:01:09 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: T7r2uDW/uK1IIsPQfNH+mdp0qzsDoRAeY+YlxMFV31Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:5b:b8:79:86:9a:97:23:a3:78:fd:65:9a:43:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Sep 7 10:01:09 2025 GMT
Not After : Sep 8 10:01:09 2025 GMT
Subject: CN=cbbfd17137889d09776c75ccb5753138380cff44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:70:4f:0a:89:d2:20:38:39:0b:6f:f6:c8:82:
bb:23:c1:28:f1:39:cd:bf:ec:3b:a8:84:19:b8:fa:
f5:af:0e:19:d4:94:84:85:68:4e:31:af:8d:a1:ee:
a8:85:8d:71:90:e2:27:62:45:6b:77:eb:3c:1a:48:
39:59:49:b4:6f:12:ca:d2:5c:44:41:11:bc:e9:ab:
9b:bd:c3:57:6f:92:1d:0e:22:d9:33:89:10:c3:55:
5d:5f:59:b4:46:b0:4e:f5:3d:58:36:63:de:28:99:
95:6a:8c:47:7c:12:47:b5:d1:90:fb:e0:2c:ba:09:
03:b1:e0:d0:93:6e:3e:22:12:f5:c3:3a:63:6c:e8:
b8:8f:4c:30:27:f7:e2:85:da:2f:e8:ec:62:4d:c3:
79:5b:8c:1a:c1:6b:69:35:6b:bc:09:3e:6a:77:8d:
80:55:29:67:c2:fa:c6:f9:d6:8f:5a:6d:9c:bf:db:
b6:f6:07:be:02:e3:0e:03:20:ad:7a:a4:b3:f0:32:
26:39:14:7f:da:e9:73:9a:46:90:8d:5a:3d:55:ea:
b2:02:96:20:22:65:c5:26:57:cb:ad:4a:6f:30:4a:
10:97:1c:24:be:f6:42:c0:c7:a7:ff:4f:5a:2a:4a:
cf:6a:e3:7f:a1:94:87:ad:f9:a2:46:8a:67:d4:f7:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BF:D1:71:37:88:9D:09:77:6C:75:CC:B5:75:31:38:38:0C:FF:44
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f5:c5:b7:b3:eb:fb:ea:c2:3b:27:0e:4d:cb:35:5b:44:6b:
cc:34:e9:dd:c2:ca:f4:e3:83:b4:d1:15:dc:c5:8c:a2:d2:46:
99:e4:4f:c7:28:9a:62:c7:34:9c:77:5f:17:96:f7:d9:26:b2:
78:8d:15:d8:01:ba:74:e9:c6:ea:97:cc:1e:db:cb:45:f1:88:
8b:a7:f2:c6:cc:73:10:d7:d8:a1:5f:12:a9:ed:16:4f:4c:0f:
6e:bd:19:b0:49:ca:65:df:07:06:ce:6a:d2:52:cb:38:e4:c8:
ca:c8:02:44:59:c1:c4:d1:c6:83:49:14:7d:75:f2:2f:fa:b3:
a6:a4:64:48:35:fb:32:0e:53:79:21:f9:53:2a:9d:85:c8:9d:
ea:84:ca:13:35:2d:87:86:ad:9b:bb:50:01:9b:0f:cf:6d:0b:
cd:16:91:64:01:c0:0d:75:a3:09:45:c5:72:1f:25:01:75:c6:
44:ce:bb:19:a9:ee:48:8e:a8:68:a6:0f:14:51:f9:45:80:f8:
2d:fb:79:85:ed:5d:7c:33:11:7a:ef:1d:a1:b8:a3:f3:fc:14:
61:14:66:a8:3d:8d:6e:b4:4b:b0:f9:5a:6f:e3:e0:4e:45:bf:
52:88:15:94:0c:59:01:b7:81:f6:91:60:ad:4d:20:e6:29:cf:
6b:d3:5a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:00 2025 by rpki-client