Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier: 6TiQAr5qXr43lIq5cdRZjIwg7C8vieSk6lWnYH890wU=
Subject key identifier: 5C:3D:EB:7A:FC:01:F7:2C:3C:DC:29:04:53:37:49:C9:F3:D7:23:8A
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial: 0199FBEC16631C93D70AE2F3D66BA9E6A224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number: 08B1
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: GfCkDNWZJC7tTqAONgQkcSI9t8c.roa (hash: ioLhHD20h58KhY7GJ61ivoHQWsANqXCHQxdSr8iWjVQ=)
2: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: CEx3LA7VmPYw+hgbeKcFcy7EvTcX2IMHNja8xYrdcRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:16:63:1c:93:d7:0a:e2:f3:d6:6b:a9:e6:a2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=5c3deb7afc01f72c3cdc2904533749c9f3d7238a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:50:4e:1a:87:10:68:90:f9:01:d5:2b:a9:
5f:6e:f1:5d:01:02:27:1e:5a:84:32:41:ce:71:2c:
2c:21:26:b6:87:08:18:1d:30:a1:43:31:2a:7c:f4:
29:1c:bb:9f:ba:73:1e:a8:20:56:8a:fb:df:d8:ad:
6d:76:fd:ab:92:8d:28:1c:47:70:0b:e2:07:2c:ca:
6b:94:b1:5d:97:55:9e:b1:e2:1b:e1:8c:4c:bd:ef:
6e:b3:b6:79:b4:96:42:51:62:e3:19:20:ad:76:fb:
bd:b3:00:bd:ee:4e:b9:5d:02:37:c4:f8:a7:0a:ce:
72:b7:e4:a3:b4:5b:77:2a:ab:ef:c6:db:95:79:55:
25:dc:2d:80:5c:43:df:11:5e:c4:a0:7a:c9:9d:98:
eb:6f:d4:96:58:db:84:4a:81:94:8c:60:a4:0b:e1:
2b:79:e6:f1:e8:f1:1f:4c:24:45:e0:17:2c:f2:aa:
d8:71:4b:a0:19:07:6f:09:89:2e:bd:8d:59:18:d7:
2a:55:c8:71:92:cf:1e:c0:32:13:5f:20:14:ed:01:
77:9c:ee:a6:cf:db:45:a0:a1:d3:b5:35:07:3a:3b:
e3:d9:ac:a0:96:a5:0e:97:2a:d3:95:9b:7b:c1:14:
73:65:cb:2f:18:05:a5:fc:50:ec:45:d4:59:7c:1a:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3D:EB:7A:FC:01:F7:2C:3C:DC:29:04:53:37:49:C9:F3:D7:23:8A
X509v3 Authority Key Identifier:
keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:60:1d:3a:51:2f:d6:d0:60:8d:08:9f:67:1e:7a:c6:a0:3d:
14:b3:a9:50:dc:53:d0:34:cd:12:97:b6:bc:27:40:66:a3:9e:
c4:f8:6e:48:9d:05:ed:dd:ff:d4:ce:c6:96:d2:f7:95:1b:77:
48:e5:c3:84:1f:8b:1e:49:5c:0c:a5:3e:13:0b:3a:c1:62:73:
4a:7b:93:85:4d:c5:11:52:63:c0:71:c1:95:4e:46:25:e5:bb:
5b:c8:5f:35:24:bd:28:03:a5:d9:3a:11:d8:6b:17:71:52:43:
aa:47:34:0d:05:95:15:a1:9a:79:3f:23:49:a8:43:42:f6:be:
98:0a:1d:96:50:97:4d:27:d0:60:1f:cb:90:83:12:cd:46:be:
4e:a3:6f:6a:23:de:61:e8:16:2f:f3:d0:1f:fb:98:f0:dc:ed:
5f:dd:c9:a7:73:74:ce:83:0a:3b:93:2c:1c:44:ed:de:1b:f5:
0f:38:6d:5b:76:c1:1b:5d:76:2d:71:4f:85:5d:97:85:0d:4b:
ea:e8:55:ff:f9:3d:1f:07:c5:23:3e:7c:f8:96:2f:53:a0:9f:
0b:95:b3:bc:8a:ef:c0:74:20:11:0c:8c:08:29:50:9c:61:6a:
27:19:9d:43:8a:9c:5c:23:ce:2e:e3:99:ab:c0:f2:e0:b0:9f:
8d:4d:61:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:18 2025 by rpki-client