Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: tFZRfTV3ggakbUYZyEkPhMCPl/TEZRUAARHeqAgJcqc=
Subject key identifier: 44:23:24:9F:3B:64:65:F5:46:66:71:19:E9:77:29:A9:CA:F1:F5:4C
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 0198D73AEFBC8F11EB11A6DBFD717928C9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 0DE7
Signing time: Sat 23 Aug 2025 14:00:20 +0000
Manifest this update: Sat 23 Aug 2025 14:00:20 +0000
Manifest next update: Sun 24 Aug 2025 14:00:20 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: VZ6/+tyTqREIJL9yfttTlzuUohzLXMO8tYUQH9WfxwI=)
2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:ef:bc:8f:11:eb:11:a6:db:fd:71:79:28:c9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Aug 23 14:00:20 2025 GMT
Not After : Aug 24 14:00:20 2025 GMT
Subject: CN=4423249f3b6465f546667119e97729a9caf1f54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:8f:d8:9e:a4:e6:3c:ea:72:ec:da:81:39:
a3:2c:c7:2f:b7:43:9f:3f:8f:ee:6b:79:29:13:0b:
26:21:fa:af:5f:f5:c0:c5:46:80:11:3c:31:8b:17:
32:f9:f8:a5:90:e1:ac:87:b9:b9:2d:23:ba:41:3e:
43:f0:e2:f7:00:f7:29:a1:1e:b9:fb:6a:57:4b:b3:
6e:84:af:47:71:e0:69:de:50:1c:37:9e:ea:c9:ae:
91:86:d8:d2:f9:0c:63:46:ba:6c:09:c9:60:3a:68:
ae:02:74:db:95:94:00:18:f4:90:fe:40:99:59:b9:
fa:a8:ea:f6:91:10:ef:02:79:39:74:2b:7c:ab:2a:
95:3e:cb:74:15:a7:00:5b:c6:b4:0e:af:57:83:26:
34:9b:f0:9e:62:22:05:82:65:5d:99:eb:3f:04:63:
6e:b5:a5:b0:25:fb:74:dc:89:79:bf:c2:9c:c8:20:
f8:ed:df:14:0b:2e:c0:8f:e7:fe:76:b6:9e:7a:71:
0d:fc:fa:82:33:10:ff:1f:56:00:a1:2a:68:20:a4:
1f:a4:65:dd:58:47:59:56:1d:e5:01:b6:68:6f:2a:
1f:aa:2d:6f:c6:fb:ea:11:88:98:68:8c:c3:78:8f:
33:e4:6b:12:33:e7:4f:e0:bb:9a:99:ec:3d:39:48:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:23:24:9F:3B:64:65:F5:46:66:71:19:E9:77:29:A9:CA:F1:F5:4C
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9c:7e:01:11:13:d2:50:00:67:1f:e4:8f:6d:17:b1:c5:80:
82:e8:bd:a5:cf:d9:8d:12:1d:2d:d7:b6:18:f7:de:00:2e:62:
d5:21:9c:fe:44:9e:43:b7:2b:48:fa:04:3e:f1:e0:fe:58:53:
67:b9:3e:b3:0c:9f:ed:fb:97:d8:e3:ab:46:68:6c:00:37:68:
a6:a8:e1:4b:cf:7d:b6:6d:47:83:97:f1:1d:43:a2:8a:b9:b6:
06:bd:55:7e:34:2c:13:38:90:09:d5:1e:31:31:f2:27:14:41:
ba:26:ac:ea:07:00:19:ed:f8:0f:fa:e7:55:e1:1d:31:99:de:
09:d5:7d:49:59:7e:14:32:51:81:aa:73:40:aa:a6:6d:ce:50:
24:0d:ef:52:5c:9d:96:22:18:af:2c:ac:f6:b8:c5:43:d3:d6:
eb:a5:b4:d9:4e:d5:23:28:07:da:20:b6:6c:6b:b1:a2:26:ff:
4e:13:11:fb:11:92:a6:18:aa:ca:c6:01:3a:4c:09:21:61:f8:
c1:ce:e0:a9:9c:d3:4a:34:df:0d:67:bd:14:0f:2f:83:62:e9:
b2:15:62:51:e1:b4:6b:35:7e:4f:de:39:6c:29:85:60:23:c0:
82:9f:03:0a:ee:b6:5f:a5:c9:00:6b:7a:d5:5e:9e:4e:6b:ff:
e8:05:e7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:06 2025 by rpki-client