Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
File: nyjbpUvBou6fd-Br-AglbdyTh-g.mft (raw, json)
Hash identifier: CC61RG6GZbBLl92xG2IWxhEeyfPQBEq+i5KdJnyRfcM=
Subject key identifier: B7:40:A3:25:D8:0E:FE:99:1E:2D:6C:39:8E:D4:79:D2:F7:B8:1E:3F
Authority key identifier: 9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
Certificate issuer: /CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Certificate serial: 0198D660B29A5D62F29EACAD97D93B558683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
Manifest number: 0661
Signing time: Sat 23 Aug 2025 10:01:58 +0000
Manifest this update: Sat 23 Aug 2025 10:01:58 +0000
Manifest next update: Sun 24 Aug 2025 10:01:58 +0000
Files and hashes: 1: nyjbpUvBou6fd-Br-AglbdyTh-g.crl (hash: 4T5YN3+M/OuxjVXAPWfzTvOmz9bevtYG2x2O8pK9Oig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b2:9a:5d:62:f2:9e:ac:ad:97:d9:3b:55:86:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Validity
Not Before: Aug 23 10:01:58 2025 GMT
Not After : Aug 24 10:01:58 2025 GMT
Subject: CN=b740a325d80efe991e2d6c398ed479d2f7b81e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:5f:c5:05:6c:98:2b:93:65:2f:52:15:68:
eb:bc:3b:8b:72:8e:ba:c4:fa:f6:6e:cb:f1:2f:4d:
01:6f:26:eb:f7:4c:65:4d:22:0e:77:75:c2:e5:a0:
a9:82:d0:79:e2:84:5d:49:84:2a:43:3f:46:30:97:
b4:84:d4:0b:cc:c9:82:b6:09:27:da:66:65:e8:56:
de:cf:10:9c:ac:55:ad:c8:44:23:eb:1e:76:0b:86:
10:9c:c3:86:87:ee:1c:f5:60:fa:b3:6b:f8:49:fc:
e6:ed:d3:24:49:7b:ac:8f:4f:65:7b:68:2e:a1:dd:
30:42:9f:a5:72:9c:8c:2b:f9:f7:97:a9:a0:32:f7:
cf:92:4e:01:c5:2d:b8:ff:c0:7a:97:1b:c0:9a:fb:
7f:0e:f8:c2:9f:53:55:9a:20:e4:65:65:48:59:ef:
bc:d2:31:96:99:9d:ba:1a:47:1d:d2:b6:71:96:0d:
31:5f:54:36:b2:c7:1a:e9:a9:c7:b3:b5:16:4a:a0:
ea:a2:eb:64:82:7c:86:ab:66:6c:ed:24:2c:84:3b:
0d:9c:56:d6:3e:5c:9c:45:62:72:7e:0a:66:4b:d6:
e0:20:35:cd:27:c3:e2:1a:d0:3e:65:20:42:a0:e3:
b1:75:80:11:a3:91:10:07:92:ae:01:30:a3:eb:4c:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:40:A3:25:D8:0E:FE:99:1E:2D:6C:39:8E:D4:79:D2:F7:B8:1E:3F
X509v3 Authority Key Identifier:
keyid:9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ed:d1:84:e7:26:f1:76:d2:8e:65:1a:46:d9:58:33:18:b1:
34:c5:46:cd:56:6f:a0:59:a2:b3:93:ea:ef:7a:f7:c4:d6:07:
02:61:2b:48:ed:85:3d:08:fd:3d:8b:1d:79:56:dd:17:bd:8e:
bb:46:fc:7d:67:c6:8d:d1:ed:f5:40:45:2a:31:77:8d:bb:63:
40:97:f1:6c:b4:c3:d2:01:22:bd:a4:90:d7:fc:bb:a5:ac:04:
b8:41:a8:9f:bd:a8:b4:52:a1:d8:c8:68:67:07:b5:9d:4a:b6:
22:25:61:c5:6e:44:f2:5e:a9:6a:2c:c7:2f:15:13:c7:10:28:
fe:f9:21:24:4a:b5:eb:42:39:53:12:60:4f:55:ac:fc:5f:8d:
70:81:47:12:f2:03:59:b4:91:b7:02:ff:95:e3:6f:13:db:a0:
55:d6:4f:91:b2:41:2c:11:73:82:56:8e:e4:77:38:4c:70:3f:
76:f9:aa:91:b6:17:5b:85:c4:8b:e2:9d:21:95:3b:e9:1b:7d:
80:53:03:70:b0:a7:fc:79:9e:f4:b2:d5:06:48:ac:98:28:78:
ce:d9:e7:07:99:aa:ef:d5:22:5f:4d:ca:11:7e:14:ef:be:dd:
d5:7f:95:a7:b5:14:f0:0a:6b:07:40:89:6b:37:ed:f3:ee:de:
ba:6e:db:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:25 2025 by rpki-client