
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File: nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier: UfjOcds7dvoL5fSEXS1w0FGfHT6mIblvNYRDeewTfn0=
Subject key identifier: 62:88:0B:58:4B:5D:6C:5C:BF:40:31:85:7E:62:AD:43:A3:2F:6A:0E
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial: 0199FC8F3FCFB90A3FBD524C31DBB73AD560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number: 13C1
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa (hash: RdeAevZDp8XmGqqAvK8gJZd85NjETWsjIIExe3sxUXY=)
2: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: dsPCAHiU4WxfdpH5b+5iw7FlLsELPlwK2q6Efav8ixI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3f:cf:b9:0a:3f:bd:52:4c:31:db:b7:3a:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=62880b584b5d6c5cbf4031857e62ad43a32f6a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:38:fd:0c:ea:d5:6d:02:9d:b4:47:e9:8e:
a0:a8:b4:9a:e1:27:5c:61:a2:77:81:55:63:fe:21:
3e:c2:9c:dd:8e:44:29:21:c8:74:97:90:aa:40:55:
ab:ab:d2:15:28:44:54:d3:f4:fd:d2:24:37:c9:95:
e9:d9:29:62:09:2c:27:c7:4e:3f:06:4a:ff:c0:2b:
25:07:db:44:f6:f8:a8:be:4b:d8:c5:c6:93:56:ec:
ec:0b:27:86:05:26:4c:5c:9a:cb:55:57:70:ad:41:
f7:0c:ae:32:b0:81:ae:c2:e6:f3:b2:c5:55:38:3f:
f8:55:9c:ba:c3:b8:3a:fe:1d:0e:66:78:ca:87:84:
11:4b:ae:09:f7:80:74:28:7c:83:2d:5b:74:ef:b5:
a9:d0:de:5a:98:2f:08:b3:35:bd:a0:7c:8c:fd:96:
6b:da:2c:50:a8:89:1a:1c:20:c2:62:f7:76:81:f1:
20:4c:90:47:01:83:c1:6a:db:6c:e5:f2:58:a7:2e:
25:23:0a:61:94:ce:8a:9d:27:9b:9e:8e:51:29:21:
a5:b5:98:c3:cf:52:c0:0c:ed:d8:07:2c:b1:35:33:
12:59:0c:3a:3e:db:91:3a:12:da:a6:59:8e:f0:ca:
11:a8:21:f6:84:d0:29:3d:ae:33:40:d8:86:09:30:
b4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:88:0B:58:4B:5D:6C:5C:BF:40:31:85:7E:62:AD:43:A3:2F:6A:0E
X509v3 Authority Key Identifier:
keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b8:29:f3:7c:49:e7:e0:3d:ef:6f:06:12:fd:44:e0:54:05:
59:72:30:2a:59:e0:4a:e7:01:89:d6:f9:b0:68:c2:93:4d:86:
17:90:3d:af:bb:93:e1:80:0d:85:c5:89:8d:6b:c4:6c:b2:6b:
d1:e5:b1:e9:bf:fc:0f:80:4a:7b:44:1a:66:15:8d:ef:64:0e:
38:27:39:4d:fd:10:c0:9f:51:ee:1d:b3:be:b3:0d:d4:26:b7:
c4:1c:4d:76:2a:dd:15:4f:76:a9:b9:03:1a:cf:de:4f:a6:5f:
a1:11:78:2d:92:1a:df:2a:59:e8:7a:6d:14:5f:61:71:ce:91:
58:75:c7:2e:e4:20:6b:96:a9:21:1d:81:af:16:fa:04:db:f7:
15:55:e6:df:4e:c1:fd:37:f4:ab:32:1f:03:03:74:45:4c:51:
d9:81:48:d3:30:01:94:8c:eb:3c:d0:7e:7d:9e:6d:3b:6f:a9:
e2:d6:48:c2:f6:7d:91:2f:82:37:25:b3:f7:74:f9:24:8b:25:
1c:4b:d7:43:28:df:5a:c7:1a:8c:c6:ad:4c:12:6e:7d:e9:15:
a5:50:d9:39:32:e3:f3:e7:36:af:f8:d1:df:3b:d3:0e:1f:88:
d3:b9:f5:68:76:c9:22:84:2e:d6:ba:cd:d5:97:6c:bc:99:f1:
97:91:1f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:34 2025 by rpki-client