Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
File: NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json)
Hash identifier: iw93BXqNXFFJhQVSg15xFiVRje8i0eFmXRIZa0R3w+g=
Subject key identifier: 9D:A3:32:02:F7:08:ED:BF:B6:6A:EE:16:CA:E3:81:33:12:D0:87:3B
Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
Certificate issuer: /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Certificate serial: 0198D65F395C90B4958FBF651D5FC9994F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:21 +0000
Manifest this update: Sat 23 Aug 2025 10:00:21 +0000
Manifest next update: Sun 24 Aug 2025 10:00:21 +0000
Files and hashes: 1: Ex_2ickmNwSl468A43nBNWlR1U4.roa (hash: 2F6N+mLC+ZFSEAJYbcx9IRB+VD26lz+G1r697PEXjx4=)
2: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: mhuEOtmCwy0rhr/BIVK5u3lzG3c3LUC/5W6WNElpDBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:39:5c:90:b4:95:8f:bf:65:1d:5f:c9:99:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Validity
Not Before: Aug 23 10:00:21 2025 GMT
Not After : Aug 24 10:00:21 2025 GMT
Subject: CN=9da33202f708edbfb66aee16cae3813312d0873b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:f6:bd:83:b9:e9:19:73:8d:98:e5:a0:31:
81:b1:dc:1f:5c:f6:2f:4f:b1:71:6a:98:4d:9b:1d:
43:0e:bc:49:a4:52:c8:68:16:7b:73:86:41:88:4b:
98:a1:b1:46:30:fe:23:84:61:ac:5f:77:53:9e:f2:
25:c2:2d:e9:29:fc:d6:29:a8:25:a0:f9:19:ca:b9:
8c:2a:de:e3:19:b3:13:82:82:3f:60:11:b2:d3:66:
7b:3e:2a:04:00:e2:70:78:b1:0c:4e:9d:55:36:e5:
48:1e:98:d3:21:13:b4:f6:55:4b:e9:86:2d:b1:3b:
dc:49:09:12:24:b6:65:86:dc:61:90:c6:7e:9b:dc:
60:ed:b0:c0:41:e2:ab:65:ca:57:22:40:09:b0:79:
bb:06:73:28:0e:63:ab:55:5c:2b:1b:c6:4f:89:68:
b7:9d:88:c7:b8:f9:65:a3:bd:8a:b0:38:d1:5a:7f:
fc:36:d8:fe:cb:4a:a4:7c:e9:de:e1:b9:dc:9c:d7:
8b:8a:c0:58:3b:89:b6:cc:7e:de:85:85:48:b1:5c:
2e:2b:90:23:24:14:f3:83:e7:b4:6b:0d:41:4c:c4:
db:1d:74:44:7d:c2:f5:98:b1:d0:2b:5e:c3:3f:5f:
22:1e:2d:e2:57:d3:77:6f:74:0b:a5:2f:90:74:7f:
d5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A3:32:02:F7:08:ED:BF:B6:6A:EE:16:CA:E3:81:33:12:D0:87:3B
X509v3 Authority Key Identifier:
keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d3:50:a8:da:a4:c1:af:41:25:32:ea:b2:9e:9f:31:c4:43:
96:19:f6:d3:86:c8:43:67:b6:f9:7c:38:8e:1a:53:ae:b4:ca:
0c:27:3b:db:b0:66:6c:89:fe:e8:85:4f:0e:5b:4b:56:50:0a:
0d:1b:02:db:3e:ca:7a:fb:77:f2:4c:4c:44:83:cb:37:5c:91:
31:e3:42:e2:4f:fd:e2:7b:42:62:23:34:ce:eb:c6:d4:b5:71:
d6:18:62:7e:cf:52:d8:c3:aa:1f:d3:e9:fa:c7:b0:bd:35:1b:
65:58:ee:b9:ff:8a:f0:89:44:c5:d8:6c:0a:5a:1b:bb:b1:53:
48:4c:21:24:cb:b8:fb:03:c2:3f:17:5f:ec:29:e9:29:13:13:
68:2f:31:56:d6:61:e0:ac:3d:95:1b:6f:23:1e:62:a5:38:d2:
2b:75:fd:fd:aa:4e:f0:59:b6:01:f6:83:8b:57:41:f1:9e:a9:
32:f1:2a:ab:9a:a7:cb:b6:71:9b:20:e0:21:8c:de:82:6e:49:
ab:18:a8:f5:bd:4e:26:23:1d:52:1c:81:bb:8d:ff:d2:21:da:
ab:19:e8:62:d3:68:b0:99:0e:cc:72:ba:67:13:a1:55:ce:5e:
02:e4:90:82:f0:9d:2e:a5:cd:41:ac:0e:a1:f1:a9:96:1c:ae:
c9:ab:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:31 2025 by rpki-client