Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: tUKlJlNi4VwTd+6h41bYlPPiDh3yjguhYNV/fvPMBgw=
Subject key identifier: D6:7E:2E:8E:11:92:96:BE:5C:2C:AB:C1:C3:54:6B:C5:B9:91:03:72
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 0198D6605784F91D17467B538078497FA873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 0EF8
Signing time: Sat 23 Aug 2025 10:01:34 +0000
Manifest this update: Sat 23 Aug 2025 10:01:34 +0000
Manifest next update: Sun 24 Aug 2025 10:01:34 +0000
Files and hashes: 1: VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa (hash: js4ojfLf5VJc1gb3AG5cMspDXL3JZYEKqGj/N4sAQU8=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: f0JzY6DKqZjMHlJO3zLnT8F+agMcL6s+wS+k36xlh6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:57:84:f9:1d:17:46:7b:53:80:78:49:7f:a8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Aug 23 10:01:34 2025 GMT
Not After : Aug 24 10:01:34 2025 GMT
Subject: CN=d67e2e8e119296be5c2cabc1c3546bc5b9910372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:54:f2:96:54:a4:47:30:7f:e0:38:31:5c:
47:e8:b0:1e:76:9d:d5:61:e2:37:5a:08:5a:77:aa:
b7:91:e2:2e:f7:bf:c1:c2:06:16:40:c1:ee:c4:db:
c5:2d:aa:a7:96:26:5a:e3:ca:39:da:97:51:50:f5:
c4:df:db:d8:80:0f:ad:8c:82:0d:2e:27:b5:61:d4:
47:1e:a4:51:84:a8:7f:85:0b:d6:3d:0c:f9:f7:c7:
8a:08:99:51:19:bd:3c:31:97:50:2b:55:b1:1e:32:
12:6e:ab:97:5e:92:54:1e:65:c4:40:c9:ba:d3:1e:
fa:04:60:85:24:86:e3:91:e8:f2:2a:9e:11:75:43:
13:f7:dc:11:4b:75:65:46:5b:78:54:94:5a:e4:57:
2d:d7:d1:b4:d6:19:2d:3c:c4:f0:87:67:32:85:c9:
32:10:3a:12:e2:82:cc:f4:f4:62:ea:48:f6:8b:d1:
53:e3:85:20:18:9f:65:02:6a:52:b4:44:44:d9:1a:
ca:92:5b:d3:70:f7:87:56:e5:ff:b0:1f:d2:c5:b5:
df:fa:6d:91:f1:b3:80:4c:9a:d8:1d:df:76:51:99:
7d:be:81:2b:b8:c6:25:8f:6e:25:8d:50:d7:95:87:
ef:62:e2:d1:30:29:39:53:fd:bd:11:c2:73:99:db:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7E:2E:8E:11:92:96:BE:5C:2C:AB:C1:C3:54:6B:C5:B9:91:03:72
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0a:57:49:23:2d:3e:5f:4b:5b:f9:21:10:30:23:39:b8:6e:
f5:1d:50:46:a4:43:ec:a8:a7:1e:4d:b8:0f:0f:fd:ee:33:82:
10:bb:9f:b6:f9:c2:13:20:d9:5c:51:dd:44:51:43:11:57:68:
46:bb:c7:7a:54:65:be:2a:23:e2:24:65:a2:ed:c4:47:66:68:
7b:e9:1b:f2:6a:3d:9e:b8:f5:ee:e9:84:bd:8b:45:e4:be:f7:
57:02:bd:56:da:31:77:96:6b:cb:ac:c0:de:ca:ec:cb:b1:0a:
5d:53:2a:fe:91:ea:f8:29:f1:2d:90:4d:37:2c:32:ba:d7:63:
d3:c6:3a:0b:c8:24:b7:36:e6:7a:2a:db:3a:30:fc:c5:d9:5c:
67:5f:8f:1c:a6:45:6d:10:41:b6:44:07:07:04:d9:d9:05:65:
0b:22:49:9b:5f:54:0b:03:9d:ff:62:fe:df:ff:af:ad:fe:79:
2c:3d:f5:be:ed:e6:be:74:b6:fc:65:3a:17:51:2a:93:28:86:
9f:87:f6:87:57:d9:df:65:4b:02:0c:96:e3:05:51:f4:4f:aa:
44:ea:fb:1a:b2:99:84:e5:e6:18:a2:3e:b0:27:87:dc:1b:0d:
3f:18:3c:5e:76:37:a9:7d:2e:b4:5a:c9:90:f1:6e:a7:cc:99:
fa:57:f8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:52 2025 by rpki-client