
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
File: NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json)
Hash identifier: HvBrWvrLvPu2w705G1ab+O76MJnQ6GfL64HXEq6nRgo=
Subject key identifier: 94:F1:BC:1A:11:B6:D2:B0:F8:1F:F1:3E:2F:FB:0C:E8:13:13:06:8F
Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
Certificate issuer: /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Certificate serial: 0199FBEB387B84C6EC039FBFB0E4CA83B5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: Ex_2ickmNwSl468A43nBNWlR1U4.roa (hash: 2F6N+mLC+ZFSEAJYbcx9IRB+VD26lz+G1r697PEXjx4=)
2: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: YIaUZHAVXvYkvGiNk3StjK+e8SJKtuvYf69MgoFPAS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:38:7b:84:c6:ec:03:9f:bf:b0:e4:ca:83:b5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=94f1bc1a11b6d2b0f81ff13e2ffb0ce81313068f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:6c:55:83:80:a5:45:34:fc:cb:b3:2e:ab:
d9:3d:6f:33:b6:39:9a:a6:da:5f:fb:43:2d:87:fe:
08:a9:38:90:46:87:4e:2c:56:fc:f0:03:03:37:5c:
0d:af:0f:fa:9f:ce:90:bc:71:a6:6f:dc:94:0c:6f:
bc:8e:4e:a4:f2:fc:07:18:09:db:1e:c8:f4:4e:7c:
66:9d:ab:ff:eb:b3:4c:e5:64:6e:48:1a:15:e3:f8:
b5:15:b4:3f:3e:98:08:a2:88:ef:89:c1:1e:7f:c2:
fa:98:c6:cb:7a:a2:08:d3:60:68:a9:fe:66:62:95:
fd:92:b7:a0:c1:9f:9b:35:67:49:06:c2:7c:a5:10:
d7:db:1a:0a:ca:33:a4:50:34:41:e1:ba:a1:dc:96:
ae:2a:bf:a9:91:a7:8d:b8:cf:20:3a:a5:45:fa:6f:
81:5d:4b:6d:2e:8f:f3:57:dd:ae:f4:d7:d6:be:82:
15:09:33:2e:46:1e:8b:1a:5e:80:8b:9f:e3:26:00:
05:94:af:78:93:10:bb:a1:bb:13:bb:82:58:21:c8:
19:ce:99:1f:16:31:dd:73:00:79:8a:67:d3:95:ea:
77:4a:6e:27:e5:0d:52:28:83:c9:41:60:18:a5:2a:
85:d2:a9:f8:90:c6:70:5f:ab:f4:7f:6b:8f:2c:82:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F1:BC:1A:11:B6:D2:B0:F8:1F:F1:3E:2F:FB:0C:E8:13:13:06:8F
X509v3 Authority Key Identifier:
keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3f:d7:79:28:5c:46:df:9e:9a:37:57:fb:8d:e1:b5:e4:ee:
c2:cc:cd:f2:7b:a1:d4:81:91:82:58:82:3b:ca:08:c3:97:fe:
48:5a:1d:42:60:cc:9f:e2:c9:18:13:58:d1:64:6c:30:ca:bd:
57:1b:80:09:62:a7:84:cf:87:b7:2e:6e:1f:a9:d1:eb:c0:88:
cf:47:2a:eb:0e:9e:1f:dc:b2:c9:d1:4b:47:83:25:af:6c:cc:
10:db:bb:d6:d8:ef:7d:d4:0b:23:ed:36:f7:a0:09:83:ae:fe:
96:17:2a:fc:5c:69:e9:03:9b:0d:43:1b:b6:31:5f:83:4d:0a:
96:ba:b6:a3:d9:1d:5d:f8:b5:e7:1d:29:6f:67:80:b2:b1:5d:
08:ec:49:47:2d:4c:29:7b:41:e6:2e:73:2f:f0:70:a4:a8:01:
38:ea:c5:5b:bb:9e:e1:9d:ac:f1:cf:c1:68:b2:39:07:76:f8:
98:32:f7:f7:c3:6b:6f:49:00:d3:73:e0:3f:9a:ff:56:da:2d:
0a:f5:ff:ef:14:c0:e6:cf:ef:bc:82:f9:1e:57:29:67:d4:03:
7f:fa:0e:21:76:41:d9:8c:64:7e:b7:d8:10:82:f5:d4:be:be:
e4:77:3b:c8:f5:09:1e:6c:ad:76:d8:20:72:45:be:93:b8:63:
e6:ef:e7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:50 2025 by rpki-client