Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
File: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft (raw, json)
Hash identifier: 80RCw82uh997q/DsxDf06vNoLuRUI/vQn+hbE7JD0Yw=
Subject key identifier: 58:AB:7A:82:75:22:46:C9:4F:06:0B:9A:CE:51:B9:C6:26:44:87:AD
Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
Certificate issuer: /CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Certificate serial: 0199FAA142E15D574085CAF6ADD6F0588AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
Manifest number: 03C5
Signing time: Sun 19 Oct 2025 04:01:36 +0000
Manifest this update: Sun 19 Oct 2025 04:01:36 +0000
Manifest next update: Mon 20 Oct 2025 04:01:36 +0000
Files and hashes: 1: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl (hash: bMrAVdI7auP9AvlFcrtPnLDpocmTafiLH9CguTde77I=)
2: dbO_KM950SVoV4qdoDfieNWIw0s.roa (hash: DCE7AE8Wo5HEULV6TjwRejnJ6LMRCD866TcEBq5yg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:42:e1:5d:57:40:85:ca:f6:ad:d6:f0:58:8a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Validity
Not Before: Oct 19 04:01:36 2025 GMT
Not After : Oct 20 04:01:36 2025 GMT
Subject: CN=58ab7a82752246c94f060b9ace51b9c6264487ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:d4:f9:55:07:d2:7d:73:13:5d:b7:63:9b:
62:c1:e3:76:b3:77:8d:bc:e7:10:cd:8f:b9:12:a8:
cb:4f:cb:07:78:e0:11:46:46:e1:18:03:fa:e5:d7:
36:05:da:49:90:c2:82:d0:fb:e5:2d:67:98:30:e2:
af:f4:b4:9f:c8:5a:1e:60:1f:c4:5e:ae:05:4b:ec:
e3:6f:28:3b:13:d6:06:d6:f4:77:8e:ce:c9:35:6e:
76:bd:7c:92:43:44:21:34:44:f4:e1:53:4b:91:eb:
b7:96:a7:5c:91:69:f7:f1:24:79:61:e8:a0:52:0a:
c2:a4:98:3c:7b:97:91:8e:f2:b3:5e:cb:1f:14:7e:
47:1f:21:e3:fc:7f:ce:d5:94:92:1c:be:3d:94:c0:
53:bd:87:b5:fd:dc:a5:1c:d8:b3:ed:c7:d7:40:af:
6a:b7:05:d5:9e:94:60:54:5a:32:79:ed:6e:4d:c9:
d1:02:8f:d2:42:1e:58:52:83:a6:ec:02:17:3b:26:
01:a8:fc:e0:fc:2a:ab:74:0d:6a:9b:75:8f:18:e1:
9d:76:62:95:3b:f6:c1:6d:01:b9:7f:73:eb:cc:6a:
8f:e2:e3:89:45:50:e2:d3:f3:65:a7:df:da:38:ca:
d0:bf:63:2f:74:31:54:e5:aa:2a:8d:5c:a9:89:1c:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AB:7A:82:75:22:46:C9:4F:06:0B:9A:CE:51:B9:C6:26:44:87:AD
X509v3 Authority Key Identifier:
keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:31:3b:7e:ad:f2:d9:79:94:38:70:29:9d:95:5a:57:1d:f2:
b5:c5:f9:0e:54:f1:97:f7:aa:2d:01:20:4e:1d:3b:a0:92:f1:
5d:ff:7e:fc:c9:be:fb:ac:b0:ee:aa:a9:34:c2:c3:cc:cb:f0:
da:14:22:db:ce:85:7e:ad:64:a7:8f:39:a8:29:e2:2b:97:49:
21:0d:0b:89:01:90:2e:83:a7:13:ef:be:1c:6d:c0:45:0e:d4:
ea:aa:76:bf:69:11:8f:a7:29:4e:4f:dd:91:7e:2b:19:02:d5:
90:b8:84:da:47:e4:e8:ba:ff:72:0f:d2:cb:c9:af:38:67:94:
fe:f0:b7:b6:6a:98:c8:e7:fc:ec:c1:92:da:b9:93:d9:11:46:
ff:35:b0:54:64:c5:26:cf:ee:50:3d:66:6f:0a:5e:3f:8c:27:
02:b8:e5:d1:61:a0:7e:21:e5:d0:61:d6:5a:be:01:f7:8b:eb:
87:21:8d:5f:9d:5c:7d:ed:40:4f:76:ca:bd:82:c7:69:3b:bb:
74:95:17:1c:3b:40:b7:7a:5d:96:92:53:5e:92:0f:ab:da:3b:
0b:df:83:2c:d1:72:fd:67:21:60:04:15:85:4d:6e:9c:8b:e6:
52:61:99:98:06:30:41:4c:bd:25:0b:1e:b0:d1:fd:b8:73:6d:
ad:15:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:17 2025 by rpki-client