Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: tse2O32ohyHPJa79qq2mae89I5pXEz1jjO7uZ9VVtCc=
Subject key identifier: BD:D2:F8:A1:9F:11:E2:5F:9E:A0:B7:FC:11:EA:B9:93:C9:34:90:0A
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 019A71B8160A4928D149624B19934FFEAC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0D60
Signing time: Tue 11 Nov 2025 07:01:20 +0000
Manifest this update: Tue 11 Nov 2025 07:01:20 +0000
Manifest next update: Wed 12 Nov 2025 07:01:20 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: QeSdwfsOGqE3obv7s28VYw49IKHvGUlQ0azyAb7YccU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:16:0a:49:28:d1:49:62:4b:19:93:4f:fe:ac:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Nov 11 07:01:20 2025 GMT
Not After : Nov 12 07:01:20 2025 GMT
Subject: CN=bdd2f8a19f11e25f9ea0b7fc11eab993c934900a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:38:59:4a:65:21:a9:9a:f3:f4:2a:a1:f3:
50:04:39:50:a9:85:b0:60:a7:29:fe:f0:57:e2:01:
97:66:c7:5d:1c:cf:a8:e4:06:28:78:82:6d:93:59:
90:45:43:d2:30:57:ee:50:42:27:48:66:e7:9f:ec:
3a:bb:a8:da:b8:d0:8f:a9:a8:77:cb:40:33:ec:79:
30:af:b6:49:46:75:16:91:d6:96:86:67:fd:42:5a:
9e:cf:4b:2c:b5:a6:47:c4:d9:ce:3e:b6:cd:07:49:
54:ea:65:24:7b:ad:31:01:5e:1a:a2:9c:0f:5e:c5:
7d:47:c5:d1:ca:7f:5e:79:b9:48:75:af:e7:53:26:
9f:ea:4c:90:20:67:8e:ae:de:58:ec:91:06:f6:9f:
2f:f7:d2:14:7b:dd:81:48:47:63:4c:32:28:5b:3f:
86:78:84:cb:fe:fc:48:1e:5e:fb:83:1a:96:3e:53:
a3:b3:a2:10:d3:93:d7:b2:54:51:92:d6:56:d7:c4:
11:ff:08:a3:45:23:42:86:a8:51:cf:ab:df:d5:97:
d8:57:63:b7:25:9b:59:7f:54:45:b7:ee:dd:ec:88:
77:a6:1a:26:1e:af:ac:9e:6a:44:ad:bd:2e:d5:7d:
3b:25:1f:3f:74:37:39:10:a9:65:b5:e5:52:2f:43:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D2:F8:A1:9F:11:E2:5F:9E:A0:B7:FC:11:EA:B9:93:C9:34:90:0A
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:30:ef:1b:cf:88:5f:2a:6e:c1:2c:30:d8:96:c0:d5:5a:d0:
f2:3b:7d:7a:d0:d1:f0:25:0d:32:32:02:ac:91:ec:8c:ee:af:
c7:3a:8c:ff:b1:a6:ec:83:68:80:11:c3:12:67:64:10:65:ce:
98:b8:df:65:9c:a0:ab:42:e9:f3:bd:0e:20:5e:2e:14:b6:31:
7d:ba:00:6d:33:87:00:a0:a7:43:ed:70:42:08:7c:92:02:6e:
13:4c:e0:e7:1c:60:eb:c4:77:ed:d1:4a:6e:1a:37:f8:4b:0b:
b1:e0:35:6c:50:a4:a2:2d:9d:fd:25:55:05:0b:cc:7d:77:b0:
31:d6:0f:63:e6:f0:10:c3:db:74:65:f3:6a:ff:97:df:40:19:
03:65:a7:95:13:6d:d5:eb:9d:fc:cf:dd:8e:bd:ef:29:5a:30:
0b:3c:7f:61:d5:aa:1c:a4:f1:4b:69:b2:89:f5:40:16:7b:f5:
8d:63:fd:5d:96:21:d9:4e:58:6c:88:83:e6:62:e0:d1:2c:b5:
a2:b6:24:21:79:21:5d:e4:f4:b0:52:c2:94:b2:3e:01:b9:4e:
2e:bf:3d:c4:92:8e:c7:09:49:08:70:29:21:cf:9d:87:75:22:
ad:86:7d:43:66:a3:39:1a:b4:39:ee:59:bf:47:36:c3:3f:f3:
f9:d6:b9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:26 2025 by rpki-client