Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File: nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier: k+ejTeZNbGjfk3Gi+0OmPmChFadZ1hrZIlkYlv/cM/k=
Subject key identifier: 66:42:85:44:2E:9A:16:25:82:DA:CD:FF:27:D0:50:DE:5B:73:B8:97
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial: 0197B745B175150AF4B885B9F2081C72ECD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number: 1294
Signing time: Sat 28 Jun 2025 16:01:27 +0000
Manifest this update: Sat 28 Jun 2025 16:01:27 +0000
Manifest next update: Sun 29 Jun 2025 16:01:27 +0000
Files and hashes: 1: T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa (hash: RdeAevZDp8XmGqqAvK8gJZd85NjETWsjIIExe3sxUXY=)
2: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: bzrxxvXKvy1K+Xpez5GMvFo2t1Uv0mtLJXe5QGiJguY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b1:75:15:0a:f4:b8:85:b9:f2:08:1c:72:ec:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
Validity
Not Before: Jun 28 16:01:27 2025 GMT
Not After : Jun 29 16:01:27 2025 GMT
Subject: CN=664285442e9a162582dacdff27d050de5b73b897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:ac:48:c5:32:7f:6f:dd:c3:5b:44:2d:34:
a9:5e:be:6a:3d:08:7c:a9:78:09:e0:f7:20:95:6e:
ad:93:c9:fa:37:59:38:d4:5e:bc:77:d7:a1:bd:e0:
e9:27:a7:29:4e:3b:24:d1:c8:ca:2b:45:b4:88:76:
f9:95:de:7e:e6:01:2b:7f:76:33:40:71:42:92:4c:
2b:52:e8:2e:e5:70:47:a4:67:05:a6:cd:d2:08:61:
2d:fb:d0:7d:36:33:be:e6:32:28:87:52:9b:8c:93:
50:8f:e3:62:bc:84:18:3d:28:e7:f6:da:a8:a9:8f:
c9:77:01:8a:5b:7f:82:2c:d6:be:c0:23:2e:ca:d8:
ef:4d:fb:20:68:30:57:64:d2:bf:e9:25:57:68:46:
33:13:bd:05:3c:a3:29:a1:4a:4a:66:12:60:8f:15:
b2:c6:f8:3f:1a:84:62:d1:52:74:fe:5c:54:6d:db:
e3:8f:61:aa:1a:1c:4d:e1:cc:fb:16:37:d0:c2:73:
88:94:5e:44:1d:26:57:6d:a1:ba:83:a7:a4:70:23:
0a:ff:36:fd:97:2f:64:81:30:69:96:c5:75:dd:7c:
b4:72:88:51:d8:9c:6d:b5:da:44:22:45:34:1b:ab:
b9:3a:b9:dc:97:96:20:2f:2e:da:f1:ff:a3:0b:52:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:42:85:44:2E:9A:16:25:82:DA:CD:FF:27:D0:50:DE:5B:73:B8:97
X509v3 Authority Key Identifier:
keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9a:85:14:5e:ac:40:c6:47:77:a2:ae:d0:14:df:bb:75:b2:
e2:30:7e:2d:45:b8:ce:1f:fe:f1:cf:f2:56:ab:67:b2:ed:63:
33:d9:cc:8a:c6:57:c0:a2:6c:9a:94:d5:0f:ae:fd:e6:1b:e1:
94:5a:cf:ae:9b:57:76:d4:29:65:81:22:5d:64:47:66:e1:f4:
df:46:e4:e0:4a:c5:06:cd:b2:a1:b7:b9:c6:d1:bf:01:4d:2c:
cb:de:32:d5:52:ca:6a:0d:b6:d6:60:d8:1b:05:0c:1c:eb:ba:
78:f5:46:44:81:ad:df:52:e2:a8:52:68:ad:4f:81:35:5a:28:
dc:ca:98:f8:92:4a:f8:3e:5c:d3:4c:c7:b6:db:3a:bd:ad:fd:
45:82:b7:2d:81:39:33:37:41:fd:b7:04:e7:08:46:77:4d:9f:
b2:0a:67:5f:0b:e5:c4:b6:79:cb:10:cf:d2:84:ff:fe:08:f0:
11:9e:de:81:08:c6:e8:c1:b1:be:c6:8e:40:db:2f:9f:b2:2b:
84:20:f6:9d:e3:fe:19:92:75:6d:b4:c4:e1:0b:9b:3e:8e:69:
5f:43:c6:fe:c4:6f:ed:55:36:8a:5b:77:a2:3e:1b:70:20:a0:
76:4e:41:8b:4a:48:bc:da:a7:f7:37:d6:23:06:9e:29:a6:d6:
de:3e:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:36 2025 by rpki-client