
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
File: nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json)
Hash identifier: dCFwdOprG/5562wMxH+y0puCHLNoIR+ds9AtqkcAdXg=
Subject key identifier: 3A:46:69:82:75:E7:3E:33:36:2B:17:80:8D:12:92:DD:35:2C:84:AB
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial: 0198D515825683F1BC61A1B199D7DB1A46BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
Manifest number: 09A6
Signing time: Sat 23 Aug 2025 04:00:13 +0000
Manifest this update: Sat 23 Aug 2025 04:00:13 +0000
Manifest next update: Sun 24 Aug 2025 04:00:13 +0000
Files and hashes: 1: nJBx_aFvLLmg9WQ03TK76fpJWGM.roa (hash: 02dNoeVE9Sy74k3q/XOECz/G2VHIiUVMONX/87WPyrU=)
2: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: 6DMDBt7mjtFxEcoMojKqQo7djbZPjGnzr/wOPJVh9JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:82:56:83:f1:bc:61:a1:b1:99:d7:db:1a:46:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Validity
Not Before: Aug 23 04:00:13 2025 GMT
Not After : Aug 24 04:00:13 2025 GMT
Subject: CN=3a46698275e73e33362b17808d1292dd352c84ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:ec:e7:15:36:e1:4d:2a:67:34:3c:ff:d4:
38:b1:5a:69:9a:38:96:b3:29:24:eb:fb:e0:5c:e4:
1d:f4:c1:5b:30:01:1f:69:76:ea:c6:42:49:31:34:
2e:f3:2e:22:67:1d:3b:8a:bd:7e:70:fb:7d:5c:cc:
51:78:e4:2d:d8:10:e3:03:97:7c:b4:01:f7:e5:12:
e7:c9:a0:b3:21:e8:ce:35:71:b6:74:bb:cb:6d:ca:
be:e9:35:2c:1a:70:56:17:8f:73:b4:df:b1:01:ef:
db:a1:9c:72:0f:3c:e9:8f:3c:20:06:6c:14:3a:ee:
b7:82:c6:ea:db:6d:5c:ea:b7:dc:6e:6f:fa:db:ef:
9c:63:67:37:2b:f6:c5:d1:64:93:32:b5:b6:5f:9b:
9f:5d:50:65:e4:44:e3:1f:a4:66:49:29:a1:f1:00:
15:24:d4:e1:46:a1:58:e3:18:99:e8:ed:4b:d9:a1:
64:73:f8:c3:7a:fa:ac:ae:e3:27:d8:eb:de:eb:d8:
0c:dd:fd:28:6b:06:40:f2:ef:5f:d3:55:4f:b6:33:
b4:41:7b:2a:70:cd:3d:8b:5c:a4:bf:39:6f:7c:99:
37:2e:b1:57:1f:12:e5:3f:ee:da:12:46:62:f4:35:
72:23:4b:a6:ed:fe:fe:56:b2:55:4e:6c:58:eb:a1:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:46:69:82:75:E7:3E:33:36:2B:17:80:8D:12:92:DD:35:2C:84:AB
X509v3 Authority Key Identifier:
keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1c:9f:81:5b:2b:c0:06:02:2a:c3:3c:79:8a:08:51:7f:9a:
65:76:4c:ec:a4:32:11:2c:51:72:f7:e8:a0:a4:32:88:f4:f5:
d9:46:80:20:45:c3:21:ed:e8:57:5c:f8:7d:22:00:fc:42:3a:
44:ba:52:88:a0:d4:af:20:6d:df:54:bf:bc:63:89:32:4b:a3:
ec:f7:f1:6e:8c:61:24:7b:64:42:98:b5:d2:81:e2:31:cd:0e:
6f:54:b7:c9:42:2f:b1:3a:96:a4:51:be:24:a4:bd:9c:ee:6d:
4a:7d:5f:70:d4:f8:fd:91:23:9d:c8:e6:2c:b3:1a:fd:ab:01:
d6:0d:36:d7:37:d2:45:3b:b1:57:48:65:aa:33:ff:02:64:1a:
4a:32:bf:a8:71:ba:01:b3:b1:0a:4d:3d:b7:1d:ed:e4:e3:55:
d8:44:4b:74:05:d6:6e:a0:9c:d6:4b:54:d8:01:14:91:a7:66:
71:b9:a1:8c:2d:d8:b6:da:24:c2:76:57:d0:80:5d:d5:82:d5:
75:87:18:c3:c0:44:82:3c:aa:78:6e:4b:81:76:1d:fb:5f:22:
71:7e:39:ab:25:c0:80:7d:93:ae:b8:9e:88:d5:c4:22:92:b4:
75:19:77:f2:94:9c:b2:d6:f0:bf:8d:3e:26:d5:dd:82:ef:91:
75:09:71:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:27 2025 by rpki-client