Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: QfLZGxaxecPpMhllqRfCiPiYK9h1/cHGr8PrUsyzGN8=
Subject key identifier: A6:48:80:50:65:D1:2E:76:8D:33:87:FD:17:D1:1E:BC:D1:DE:69:74
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 0197B70F2D8352812083225AAE739CD1AFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 08BB
Signing time: Sat 28 Jun 2025 15:01:54 +0000
Manifest this update: Sat 28 Jun 2025 15:01:54 +0000
Manifest next update: Sun 29 Jun 2025 15:01:54 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: fH9TiHMlIX8Nb6v417xA03kpPsVftGJgn/y42TJCkYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2d:83:52:81:20:83:22:5a:ae:73:9c:d1:af:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: Jun 28 15:01:54 2025 GMT
Not After : Jun 29 15:01:54 2025 GMT
Subject: CN=a648805065d12e768d3387fd17d11ebcd1de6974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:66:5c:36:b5:8b:52:4d:02:91:d7:28:b4:
d7:fe:4e:e3:a7:fe:34:b9:1c:3f:62:97:74:5e:08:
67:e5:51:e9:38:b4:f7:21:a2:20:62:e9:e0:03:e2:
8f:8d:72:fe:9e:19:25:47:20:74:95:92:6f:30:f6:
08:ac:57:d7:6a:7b:8d:63:88:19:be:37:69:a8:b5:
67:b3:b9:ba:6a:79:83:ea:f1:fc:89:18:a5:92:6e:
f4:82:ef:89:b1:5c:75:56:0d:be:07:0f:38:c7:32:
f3:78:1e:9b:e2:a0:c9:fe:79:e5:9b:e2:a8:f8:71:
56:b2:95:f1:fe:33:ee:29:d4:18:0a:ee:c5:5b:67:
cb:a9:1e:ba:8a:89:7e:b8:fc:f6:a0:df:67:1f:46:
e5:76:69:97:68:53:78:b1:b3:c6:5e:8c:c0:40:e6:
8d:9e:56:c1:70:aa:e5:fe:ce:a1:32:93:56:99:89:
6c:95:90:36:52:1d:af:e3:9d:48:12:65:12:8a:d4:
1b:b6:28:42:09:76:5f:9b:8b:04:93:3e:a5:3c:a6:
d2:30:99:b7:f6:1c:75:97:c7:4d:e0:e5:07:9b:6e:
b6:47:c7:da:5f:d2:66:32:38:99:d9:01:82:3f:52:
27:be:3f:7a:98:b6:d6:6f:ca:f0:c2:d0:3c:7a:88:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:48:80:50:65:D1:2E:76:8D:33:87:FD:17:D1:1E:BC:D1:DE:69:74
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:25:c0:2e:cf:55:ad:b4:b3:25:2c:48:51:30:dd:d2:08:3a:
57:af:fc:6b:6e:0b:0f:46:f5:80:82:d3:dd:0b:ea:b6:2a:20:
9b:f3:07:47:7f:4e:88:d4:79:5d:d9:07:ef:d5:bb:a3:44:95:
0a:8f:1b:fd:0e:ce:9b:92:cc:81:25:12:e1:fb:9f:64:1e:83:
9c:8e:29:6a:b2:bc:96:b0:c0:70:4c:24:76:c4:2d:95:1b:05:
f0:0c:82:89:42:ca:97:8a:04:8f:b9:13:6a:b0:78:82:bb:ba:
bb:74:36:a6:ee:f9:1e:7b:2d:5a:1b:ec:9f:9c:12:29:ed:bf:
97:a4:73:bf:ca:46:9d:60:8b:e7:cc:a7:bc:14:3c:6c:79:20:
16:40:8d:26:48:10:ef:3d:92:f4:33:e8:e5:77:dc:6b:47:3e:
3e:21:3f:f5:e2:bc:91:64:43:ca:eb:95:71:2c:45:7e:49:fd:
8e:7b:3f:79:17:ee:c1:b0:72:9a:70:71:1f:b9:ac:8e:d7:82:
b4:9a:db:93:6c:35:3a:71:1a:d1:75:60:9d:72:43:c4:e5:b6:
a6:46:eb:5d:2b:f5:52:7c:68:41:84:23:70:36:7b:39:33:ca:
1c:0e:72:8e:86:7c:e5:8d:a3:41:96:8c:af:01:4f:d5:e6:d0:
09:f7:2c:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dy2DUoEggyJarnOc0a/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MmFmNjU3YzA5ZTE2MmJlNmU2NGFiZTA0ZDIxYzVlNzdh
ZGUyMGUwHhcNMjUwNjI4MTUwMTU0WhcNMjUwNjI5MTUwMTU0WjAzMTEwLwYDVQQD
EyhhNjQ4ODA1MDY1ZDEyZTc2OGQzMzg3ZmQxN2QxMWViY2QxZGU2OTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ5mXDa1i1JNApHXKLTX/k7jp/40
uRw/Ypd0Xghn5VHpOLT3IaIgYungA+KPjXL+nhklRyB0lZJvMPYIrFfXanuNY4gZ
vjdpqLVns7m6anmD6vH8iRilkm70gu+JsVx1Vg2+Bw84xzLzeB6b4qDJ/nnlm+Ko
+HFWspXx/jPuKdQYCu7FW2fLqR66iol+uPz2oN9nH0bldmmXaFN4sbPGXozAQOaN
nlbBcKrl/s6hMpNWmYlslZA2Uh2v451IEmUSitQbtihCCXZfm4sEkz6lPKbSMJm3
9hx1l8dN4OUHm262R8faX9JmMjiZ2QGCP1Invj96mLbWb8rwwtA8eoi81wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZIgFBl0S52jTOH/RfRHrzR3ml0MB8GA1UdIwQY
MBaAFDcq9lfAnhYr5uZKvgTSHF53reIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlyMlY4Q2VGaXZtNWtxLUJOSWNYbmV0NGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yMDA0ODktMTUyZi00NDI0LWI4NjMt
MWM2Zjc3N2Q0MzQ5LzEvTnlyMlY4Q2VGaXZtNWtxLUJOSWNYbmV0NGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yMDA0ODktMTUyZi00NDI0LWI4NjMtMWM2Zjc3N2Q0MzQ5
LzEvTnlyMlY4Q2VGaXZtNWtxLUJOSWNYbmV0NGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyyXALs9V
rbSzJSxIUTDd0gg6V6/8a24LD0b1gILT3Qvqtiogm/MHR39OiNR5XdkH79W7o0SV
Co8b/Q7Om5LMgSUS4fufZB6DnI4parK8lrDAcEwkdsQtlRsF8AyCiULKl4oEj7kT
arB4gru6u3Q2pu75HnstWhvsn5wSKe2/l6Rzv8pGnWCL58ynvBQ8bHkgFkCNJkgQ
7z2S9DPo5Xfca0c+PiE/9eK8kWRDyuuVcSxFfkn9jns/eRfuwbBymnBxH7msjteC
tJrbk2w1OnEa0XVgnXJDxOW2pkbrXSv1UnxoQYQjcDZ7OTPKHA5yjoZ85Y2jQZaM
rwFP1ebQCfcs4w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:18 2025 by rpki-client