Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: Z6zZ8mRbZABrSWhtQe5lLgtTaGw2d8oO7qo52qKfoho=
Subject key identifier: E8:92:F4:0B:D6:3A:5B:3C:FE:ED:BD:57:03:5C:E1:23:CD:04:9E:46
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 0199FE475F6F86032465AE78F84F0998ADB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 09E9
Signing time: Sun 19 Oct 2025 21:01:54 +0000
Manifest this update: Sun 19 Oct 2025 21:01:54 +0000
Manifest next update: Mon 20 Oct 2025 21:01:54 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: iQs4zlp3x/YpfL6y53qX0HDppaof5TG9Yya/5P3Fixc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:5f:6f:86:03:24:65:ae:78:f8:4f:09:98:ad:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: Oct 19 21:01:54 2025 GMT
Not After : Oct 20 21:01:54 2025 GMT
Subject: CN=e892f40bd63a5b3cfeedbd57035ce123cd049e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:87:4a:cb:25:17:07:d8:81:a4:0e:c0:77:
f7:8f:7a:b4:2b:17:28:b5:16:3f:1d:fc:a0:be:f0:
66:1b:e7:38:d5:12:0d:d8:05:95:8e:cd:25:2e:58:
62:7f:fa:7e:43:e0:92:b8:b8:c9:14:f5:54:e8:ea:
a7:0d:97:f1:a7:08:8e:94:e5:8b:8b:84:cb:5e:d3:
ba:cd:6a:b9:3b:b0:af:86:85:6b:12:81:de:54:b0:
c2:69:24:33:57:c6:41:f6:dd:21:5d:aa:a6:0f:98:
a7:77:a2:6c:b1:45:86:4d:7c:a1:83:93:db:74:f7:
68:c4:2e:53:5a:5a:c1:e0:b7:10:3b:1e:07:a4:68:
6d:94:da:95:f8:12:b2:0e:76:a2:e2:f2:e6:72:45:
b8:a7:e7:4b:71:2d:5d:d6:0a:4c:da:c0:34:38:05:
c1:57:96:f3:20:cd:97:48:34:dd:09:20:56:34:1e:
db:71:f3:3b:7c:31:9d:83:34:9d:b5:1f:08:f8:2a:
72:4d:01:11:6a:05:8b:6c:a8:41:34:97:ba:02:87:
56:07:80:58:5a:32:70:66:73:25:a1:7f:26:99:4a:
9a:0b:18:12:0f:bd:3f:b7:d1:bd:d4:a9:cd:10:68:
75:cf:ee:bd:8d:9d:34:ab:8e:38:e8:6a:c4:35:36:
65:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:F4:0B:D6:3A:5B:3C:FE:ED:BD:57:03:5C:E1:23:CD:04:9E:46
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:59:c0:15:2a:c8:4f:7b:56:fc:12:5b:91:77:6e:8d:77:8d:
9b:b0:ff:b4:47:77:a4:51:70:af:5c:22:1e:5c:7d:ca:84:3e:
e5:61:a0:9e:4e:7a:e6:62:2a:2f:39:0b:ca:c5:f1:65:f9:29:
f2:0a:55:91:6a:e6:2b:8d:65:b5:7c:e0:b2:e7:d5:8c:54:ea:
ca:ea:3d:db:a2:22:0a:8c:ed:dd:1e:b7:25:a2:a2:c6:59:ac:
6f:e5:57:91:2e:4b:a2:9d:4b:ab:75:fe:59:de:4d:a9:cf:3e:
73:69:fc:8b:48:b1:13:3d:8a:a0:7f:76:24:50:e4:1b:fd:47:
85:65:a0:73:2d:31:ee:e8:e4:08:b4:be:d1:6b:d0:20:32:34:
2f:8d:60:06:70:0b:73:be:64:0d:d2:29:a7:37:d5:38:03:81:
53:a1:e7:86:79:01:f7:66:ff:5c:51:95:99:15:70:61:d2:1a:
fc:04:03:54:fc:ee:74:3d:75:30:93:cb:64:5e:19:19:b9:61:
24:7b:92:04:ed:40:70:f0:70:b6:fe:b7:89:b3:a8:1e:e4:ad:
cc:56:2b:26:bd:b5:d2:31:47:c3:d6:bb:c1:c4:18:7d:49:e9:
3f:cf:a7:ef:a4:c3:1b:7d:7e:e3:55:b9:6d:c9:97:43:3b:85:
f8:64:34:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:31 2025 by rpki-client