Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File: nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier: CZVuEDwATnWQaqRAp8bzTZdKa0PH/AJMWM5c6OIxNdQ=
Subject key identifier: 59:98:82:2D:AD:AD:AE:06:0C:1C:A9:C7:C8:6E:A8:31:61:03:E5:C1
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial: 0198D515E743E5C1C374EE54310EE8464AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number: 1328
Signing time: Sat 23 Aug 2025 04:00:39 +0000
Manifest this update: Sat 23 Aug 2025 04:00:39 +0000
Manifest next update: Sun 24 Aug 2025 04:00:39 +0000
Files and hashes: 1: T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa (hash: RdeAevZDp8XmGqqAvK8gJZd85NjETWsjIIExe3sxUXY=)
2: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: zSSUYYHAddE9fdtLut/OMYh2gKagf+9DOurhTAJlzm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e7:43:e5:c1:c3:74:ee:54:31:0e:e8:46:4a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
Validity
Not Before: Aug 23 04:00:39 2025 GMT
Not After : Aug 24 04:00:39 2025 GMT
Subject: CN=5998822dadadae060c1ca9c7c86ea8316103e5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:4d:72:04:48:62:24:99:e2:37:b4:89:f2:
30:5c:4e:25:de:3c:ec:89:72:48:97:42:45:95:8a:
d9:35:a9:7c:1c:5f:82:8c:9a:76:cb:8c:3d:3b:30:
e7:31:2e:af:e5:37:e1:99:98:8b:16:e8:b1:7a:9f:
4f:02:f0:71:8b:a3:49:17:0a:eb:96:84:fd:ad:f8:
7b:43:69:dd:d9:94:d2:39:6f:60:2d:ac:6a:a5:7d:
90:e9:10:e8:7c:d4:0a:ea:f7:46:4b:12:74:cc:9f:
22:fc:0b:66:b4:5e:42:15:cf:b3:46:60:e1:4e:af:
68:63:6f:48:3b:12:fb:cd:0c:d5:1a:85:01:86:63:
4f:f2:f1:0e:cf:97:09:c0:34:e4:80:7c:de:1e:1a:
86:78:e6:f6:5b:0e:b4:e6:14:31:c1:1c:8d:33:11:
d9:e5:0e:a6:ed:74:34:f2:77:40:f7:77:2c:6a:fa:
55:ab:88:d7:54:2f:d8:01:69:bb:f0:c0:b1:d3:91:
19:b4:33:7a:df:63:98:18:09:e2:43:9b:33:d8:6a:
3d:8d:eb:d3:af:47:4e:bd:1a:e9:2c:94:b7:2b:9e:
fb:87:7d:70:c7:32:e3:8c:97:59:db:c5:67:6f:9e:
d3:d2:78:16:a8:d0:2b:29:1a:6c:e4:72:cc:29:14:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:98:82:2D:AD:AD:AE:06:0C:1C:A9:C7:C8:6E:A8:31:61:03:E5:C1
X509v3 Authority Key Identifier:
keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:73:cf:80:2d:0c:72:b7:83:50:16:b7:29:a8:44:a7:23:a7:
82:72:c7:15:a9:60:c6:ec:d0:1c:0d:cc:08:3c:95:84:0f:30:
d6:7f:96:9a:a7:1a:ac:87:ab:d1:60:d0:8f:44:ec:f8:31:45:
86:c0:07:53:29:ec:fa:2a:0b:d0:a6:d8:93:61:99:78:0e:26:
7c:d0:8d:c7:9d:a9:98:18:27:4c:ca:ff:39:db:93:f0:66:fd:
54:21:43:6b:07:33:8b:6c:66:41:e7:c9:e3:e5:1a:f4:f1:2f:
5e:ff:f1:fe:80:39:59:c9:5e:57:a1:d7:ed:ca:44:12:9a:3a:
48:de:d8:23:65:b9:bb:75:9b:4c:36:88:67:9d:6a:9c:db:44:
b8:ea:05:f1:3c:d4:69:f0:7a:a9:f8:fa:86:09:f3:3d:00:55:
cd:83:a7:65:52:18:41:b8:10:81:d1:32:9a:f3:b5:e2:f5:7c:
68:09:e0:e2:6f:22:24:59:a4:b4:a8:14:cc:a0:70:b1:bf:a7:
82:28:8c:0c:4b:2e:99:36:52:c7:98:4e:4e:d4:fc:19:81:47:
ae:37:49:b4:2f:c3:64:b6:41:51:94:e9:84:a7:8d:95:13:44:
f9:48:9f:9f:12:35:1e:62:4f:55:cc:a5:1b:8d:90:66:9b:20:
07:5a:be:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:47 2025 by rpki-client