Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
File: nyHqqnvQ7mfKYwLj16quZNcpQC0.mft (raw, json)
Hash identifier: /7Gm+M+paOae93DbKSdf6Hk8JY77hq8nv95Jq8rRSgE=
Subject key identifier: 0F:10:2A:B2:CA:F5:AA:A1:4E:A8:1B:98:5B:12:64:AA:E2:4F:AC:57
Authority key identifier: 9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
Certificate issuer: /CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Certificate serial: 0198D54E4108CD0397D2CA3EA3CEB28E680B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
Manifest number: 072E
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: nyHqqnvQ7mfKYwLj16quZNcpQC0.crl (hash: Xuem+L0x9D4A3m2YnkGp0kycfAM7cthjv8WaRtiXXSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:41:08:cd:03:97:d2:ca:3e:a3:ce:b2:8e:68:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=0f102ab2caf5aaa14ea81b985b1264aae24fac57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:1b:05:29:f0:d6:71:1f:05:4e:fc:f1:a2:
1f:d5:b7:bc:b2:78:cb:3b:d0:89:18:80:5b:ab:65:
60:e2:42:9b:b0:be:73:7f:4a:64:73:1f:8a:b5:9d:
a4:87:8a:e1:ff:28:10:2c:ca:6a:0b:58:cb:45:91:
4b:3b:47:d9:bc:51:6e:aa:69:8e:6c:e7:9d:f2:0a:
3a:66:77:99:77:66:d8:71:0d:4c:f2:f9:5c:03:ca:
a8:76:a6:24:66:45:69:4c:83:01:7d:32:4a:90:61:
b2:85:9e:dd:4a:ea:ab:82:04:05:30:14:19:54:f5:
c3:5e:b6:92:33:ea:71:6a:7a:b9:14:04:92:d5:b8:
34:b9:93:76:33:e4:15:a5:e3:d4:cf:21:04:00:90:
b5:1e:c2:89:e9:c5:14:3a:93:7b:ad:12:5b:9c:5d:
b9:6b:9b:16:e4:37:1e:d9:a4:e2:16:36:b0:f4:8b:
fb:e7:ca:28:8b:59:1c:7d:dc:6b:cc:66:4b:fe:22:
b1:82:a5:d2:06:de:b6:49:82:ba:42:80:cc:1e:1f:
76:7e:3d:db:d7:f2:a4:ec:2d:04:3c:06:20:ae:33:
54:e4:fd:35:9e:32:e7:b6:72:46:d9:6d:be:94:46:
0b:ac:95:db:04:66:81:16:e9:fa:72:b6:f6:28:93:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:10:2A:B2:CA:F5:AA:A1:4E:A8:1B:98:5B:12:64:AA:E2:4F:AC:57
X509v3 Authority Key Identifier:
keyid:9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4d:f9:48:92:9c:a2:de:04:23:c1:72:ae:ef:7c:71:0e:d9:
35:ab:4d:40:10:5a:59:6a:a3:b7:5d:6d:5e:2a:0b:33:7b:de:
4c:fe:aa:19:63:18:41:ad:6b:72:27:fd:a3:e0:be:12:98:f2:
e0:07:ee:ed:1b:84:fe:31:83:75:d2:78:68:75:2f:23:1c:29:
3f:8f:a2:4a:11:e5:a0:4b:d9:ff:07:5a:85:d0:5f:85:51:72:
36:35:e8:4f:f6:7d:ef:ac:3c:bb:10:e9:bc:a3:b9:4c:05:41:
3f:7e:53:77:d2:f3:e3:7b:ce:46:b5:af:25:61:72:aa:f0:5d:
ab:a0:a9:71:b7:d6:1f:9b:92:ab:db:44:64:7a:43:b6:29:36:
02:97:98:4e:c2:bf:ee:b3:f3:68:2a:f1:5c:56:cb:72:93:40:
08:44:d6:3f:94:7a:5a:23:b1:73:f3:12:e7:1c:01:1e:2a:31:
5a:f5:45:5e:ba:26:00:ae:3a:7c:ca:b2:4d:31:0b:a8:ae:ba:
48:40:2d:1f:c8:65:1a:b4:7a:e4:c3:0a:1c:44:19:50:a2:98:
e2:4f:5a:8c:3a:57:4c:ec:97:58:2e:39:54:0d:78:d0:9c:e7:
fd:91:d6:3c:4e:61:15:b9:58:51:66:91:5d:80:da:3a:74:1b:
38:9f:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:52 2025 by rpki-client