Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: XwwbpKbG7hVW8wiVX0mDKwO1A7/pIAVsrdKzv3F5W9s=
Subject key identifier: 56:70:97:7F:5D:83:96:6A:44:FB:BC:E9:E2:D0:C9:FF:34:02:E8:C7
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 019A2E20F45D99C54495FDF701125273E4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 019B
Signing time: Wed 29 Oct 2025 04:01:42 +0000
Manifest this update: Wed 29 Oct 2025 04:01:42 +0000
Manifest next update: Thu 30 Oct 2025 04:01:42 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: XGrEy4uhKO08mA6TjCMbgihbeEzQw8+ZOPo2PRJpoqA=)
2: tT9egEPZfOW0iJxsepbGA_UgQjg.roa (hash: nJcChZ33Fi+iAdXvZOyTBjHIrvr+XcKOSiVdHqUG+CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:f4:5d:99:c5:44:95:fd:f7:01:12:52:73:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Oct 29 04:01:42 2025 GMT
Not After : Oct 30 04:01:42 2025 GMT
Subject: CN=5670977f5d83966a44fbbce9e2d0c9ff3402e8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:42:48:af:87:5b:d8:fd:51:c0:1b:f8:b6:
52:6a:7d:82:03:bf:77:dd:e7:0d:e0:fb:2e:ba:a4:
d8:d6:5c:d0:ba:3f:e4:4d:0a:34:a7:1d:e5:4d:95:
d9:d7:1b:64:38:c7:6e:17:49:3e:c4:f4:a4:0e:6a:
4b:92:3e:ff:40:17:48:61:5d:8e:2b:97:25:a5:40:
4f:94:50:03:15:2d:68:5e:62:13:97:c2:f1:35:82:
e5:ac:35:a5:ac:fa:7f:92:40:5a:bb:d0:18:d8:b0:
94:a5:bd:f9:ad:9e:a4:b5:89:94:e0:5d:60:ce:d8:
ca:61:67:9e:6b:62:7b:72:28:26:d2:a4:a5:ad:4e:
47:f1:bd:4f:c6:b7:77:e2:c7:d2:dd:b3:77:ba:a1:
59:16:55:65:7c:20:19:3e:ef:c0:6e:eb:db:67:60:
61:67:06:df:97:53:45:a3:a8:52:bf:a3:db:76:05:
a7:50:5d:1d:d1:01:55:ca:1c:dc:90:6e:9f:50:1a:
df:cb:d6:b4:56:a6:f2:b6:fc:67:fc:c5:58:f3:0c:
36:21:b8:15:c4:c5:e2:b0:d4:56:ac:be:32:d7:66:
96:1b:50:1f:27:97:65:fc:80:50:8d:d1:ec:db:80:
f6:d1:23:73:77:a2:b3:c4:57:62:f7:fc:f3:bf:cd:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:70:97:7F:5D:83:96:6A:44:FB:BC:E9:E2:D0:C9:FF:34:02:E8:C7
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:31:d0:32:b8:5e:90:06:61:02:e6:eb:9f:11:d1:15:ce:e5:
d5:48:c7:12:1c:d5:af:10:e1:83:c8:17:c5:e6:ac:8a:7c:42:
96:57:d2:73:35:f6:dd:74:82:63:d1:b8:e0:6c:59:12:4f:ee:
2c:bb:40:a8:6a:51:d6:bc:e0:05:58:80:e5:2a:f0:b8:bd:79:
4b:4c:db:50:bf:bc:76:47:76:8d:11:4d:b1:8f:34:6e:30:8e:
b6:65:d9:d8:20:aa:53:f0:c5:9f:00:ed:ef:bd:64:ee:0c:f5:
91:30:e9:0e:7b:97:47:0e:d9:83:e0:ae:61:b7:ce:c9:a3:2a:
38:6b:51:64:51:80:24:70:d6:45:50:54:86:8c:2b:04:0e:a9:
59:31:fd:af:ab:06:e3:b7:8f:07:33:39:f5:26:4a:fa:c7:75:
ba:c9:48:d9:5a:71:09:96:02:32:df:25:da:d5:d0:b9:07:25:
15:d5:b0:a9:14:65:5d:8b:e4:cc:d8:01:6b:50:81:b8:08:af:
32:66:43:e8:1a:ec:f0:7c:80:1b:e9:5d:ad:66:9a:33:07:c2:
c8:0f:f7:0d:f0:6c:b1:04:95:48:24:3c:18:ff:ae:01:2b:ec:
9c:53:77:a1:3b:9e:51:0d:44:ca:09:6d:27:34:84:11:35:90:
9d:c1:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:48:26 2025 by rpki-client