Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
File: ny4CE8HB23M97spK4mFsqv-lFXA.mft (raw, json)
Hash identifier: W/SlENB2CIbWglZba9eno0KP5bdl3dpFTvBsiij1RCw=
Subject key identifier: 78:B8:0C:1A:29:A5:2B:32:75:48:93:F4:F5:2F:39:BE:6C:18:FD:2D
Authority key identifier: 9F:2E:02:13:C1:C1:DB:73:3D:EE:CA:4A:E2:61:6C:AA:FF:A5:15:70
Certificate issuer: /CN=9f2e0213c1c1db733deeca4ae2616caaffa51570
Certificate serial: 0198D54DE05355EF3D5448F296935FE96C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
Manifest number: 12F7
Signing time: Sat 23 Aug 2025 05:01:47 +0000
Manifest this update: Sat 23 Aug 2025 05:01:47 +0000
Manifest next update: Sun 24 Aug 2025 05:01:47 +0000
Files and hashes: 1: ny4CE8HB23M97spK4mFsqv-lFXA.crl (hash: hLh7cNs9N0dScVJA7R9LoVWEud0h61+UMXEoJJE2F1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e0:53:55:ef:3d:54:48:f2:96:93:5f:e9:6c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2e0213c1c1db733deeca4ae2616caaffa51570
Validity
Not Before: Aug 23 05:01:47 2025 GMT
Not After : Aug 24 05:01:47 2025 GMT
Subject: CN=78b80c1a29a52b32754893f4f52f39be6c18fd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:8d:b1:99:3d:2a:63:24:99:8e:0e:73:72:
66:81:3e:9c:21:ed:02:e8:ab:f2:8d:e9:2c:73:2d:
e1:64:c7:58:6d:be:f5:cf:00:2c:71:ab:b9:a9:85:
a3:75:c9:8c:ff:82:da:11:e4:19:8f:b7:10:05:c9:
c0:a8:a1:a2:95:59:ad:7a:85:d4:26:34:24:29:eb:
e0:35:6d:10:ff:ff:86:70:f6:71:c6:5f:54:a6:1e:
7e:8c:2a:41:c3:c1:31:e5:7a:94:0a:9a:3e:39:4b:
94:59:29:39:b4:54:38:db:6f:0a:57:01:d9:99:b3:
34:93:69:e1:25:aa:73:7f:e7:21:d5:e3:ca:b7:83:
ed:90:3f:59:13:3d:d2:23:f8:a1:23:a4:e6:e3:5b:
7a:f6:68:c4:4a:ea:b7:94:78:34:d6:92:70:79:07:
3d:46:8a:2e:c6:85:b5:f3:d7:6c:2d:2c:40:9f:3f:
1c:fa:12:89:44:67:55:cb:be:49:e3:cc:c0:47:7d:
91:32:d0:5a:fa:d8:69:dd:9c:50:58:e4:cf:f7:3a:
c5:9c:b5:eb:86:59:6c:b9:a1:f7:44:df:90:65:4a:
bd:bc:b0:e9:3e:a8:43:45:ca:90:32:e0:44:1b:ff:
5c:dc:58:bf:ea:47:6d:16:55:eb:1c:eb:91:00:aa:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B8:0C:1A:29:A5:2B:32:75:48:93:F4:F5:2F:39:BE:6C:18:FD:2D
X509v3 Authority Key Identifier:
keyid:9F:2E:02:13:C1:C1:DB:73:3D:EE:CA:4A:E2:61:6C:AA:FF:A5:15:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:36:b1:a6:80:fb:9e:f9:42:a4:6f:0a:11:cd:13:7a:38:ba:
a4:36:fc:7d:70:6d:60:3d:b3:ac:e4:e6:4e:6c:61:57:e4:26:
f7:c1:54:72:d6:f0:8c:72:dc:ff:02:ef:c8:72:9a:03:3e:bc:
47:60:e1:0b:81:49:95:dc:fc:c6:cc:e3:cb:20:1f:3b:c9:19:
67:a6:85:9c:ee:64:d8:5c:4b:cb:98:eb:12:c5:d5:d4:22:2b:
c0:3a:00:d5:bd:dc:71:53:2e:c7:50:d5:4e:52:bd:b7:ae:21:
3f:a9:84:c1:f1:b4:4a:97:3d:b8:01:41:ff:d3:10:fb:7e:a5:
3d:2f:6d:de:b5:8e:b1:97:c9:4c:81:df:f9:e8:73:45:56:50:
56:50:32:fa:ad:b5:8f:a3:58:a2:d8:01:32:84:20:4e:c6:70:
f2:ec:10:ca:e3:9a:d5:54:31:64:9d:b3:f0:14:03:41:d0:9d:
c5:96:c3:59:04:f2:7f:aa:a9:f3:5d:fc:7f:87:2d:e0:3b:20:
b3:16:a0:01:a4:e8:f4:ab:68:26:09:c8:09:6c:3a:f0:bf:cc:
49:64:b0:5b:30:9f:00:fe:15:ea:86:ff:6f:33:ba:f4:a7:a7:
36:c5:28:8d:9e:2a:8d:0a:0f:9f:0d:ad:8e:be:85:70:77:98:
cc:2f:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:09 2025 by rpki-client