Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
File: nyjbpUvBou6fd-Br-AglbdyTh-g.mft (raw, json)
Hash identifier: tWk1WjVJ3YeiOSfmZXg1ixjk+QzIQSDPns+5+ozAvwM=
Subject key identifier: 6B:4D:1B:77:5B:16:7A:DD:59:4C:C5:4B:DF:AC:4C:A3:88:3F:E4:4F
Authority key identifier: 9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
Certificate issuer: /CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Certificate serial: 0199FBEB29670A363B44B1FA509C506CE601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
Manifest number: 06F9
Signing time: Sun 19 Oct 2025 10:01:56 +0000
Manifest this update: Sun 19 Oct 2025 10:01:56 +0000
Manifest next update: Mon 20 Oct 2025 10:01:56 +0000
Files and hashes: 1: nyjbpUvBou6fd-Br-AglbdyTh-g.crl (hash: SBWRmYDUkMDgp/B1lOH3UmNnccPKi7mTAur8iQu9840=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:29:67:0a:36:3b:44:b1:fa:50:9c:50:6c:e6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Validity
Not Before: Oct 19 10:01:56 2025 GMT
Not After : Oct 20 10:01:56 2025 GMT
Subject: CN=6b4d1b775b167add594cc54bdfac4ca3883fe44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:c3:ca:e7:6a:08:26:85:75:78:eb:62:17:
45:5d:ff:60:6c:52:36:d5:51:f2:ca:8f:7c:5a:aa:
99:7c:96:99:e4:52:7c:0c:48:a9:55:90:cb:a4:bd:
4d:07:96:e7:e0:17:b4:73:97:70:d9:23:81:1e:9e:
03:d4:26:da:da:63:3e:58:79:3e:6b:d5:10:71:8c:
9c:81:90:82:b9:c4:5f:59:8f:d3:fd:33:4b:66:3a:
09:44:d7:79:cd:5a:aa:8f:3c:93:9d:0d:48:fa:92:
92:11:11:ea:a5:67:9b:88:8b:d8:df:18:55:b4:03:
1d:d4:ca:18:e7:c6:67:65:c5:80:34:ea:85:ad:93:
77:e8:d3:e5:68:14:4e:02:1d:78:06:fa:1f:ef:53:
6e:ea:0d:87:fc:58:84:99:38:bd:51:4f:4e:6c:0b:
54:86:70:75:36:8a:d2:ca:3d:b5:05:73:52:72:65:
da:0d:ea:19:55:16:16:c1:77:81:fe:e4:19:e0:09:
0d:e3:90:d4:c8:39:94:17:fb:ff:ff:c3:f3:a0:f5:
88:bb:be:0e:5a:ab:cd:ef:75:f7:29:cf:34:35:c9:
c6:9f:98:f4:6c:96:0f:16:9b:f5:dc:f0:73:9b:4e:
d8:d1:2c:d9:a9:8e:a7:5c:6a:d3:a2:05:4e:30:0d:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4D:1B:77:5B:16:7A:DD:59:4C:C5:4B:DF:AC:4C:A3:88:3F:E4:4F
X509v3 Authority Key Identifier:
keyid:9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0b:70:4c:d2:8b:1f:db:2e:f1:43:17:3d:11:df:0e:72:57:
51:03:e4:7d:aa:c7:c5:cb:af:15:3e:3b:26:36:00:a0:48:db:
3e:d3:a6:3b:61:43:39:f4:7c:8c:cb:e2:89:ee:db:a0:eb:29:
e4:49:16:94:ed:43:10:b8:df:32:48:27:3e:e8:c0:e5:69:82:
b7:d6:c2:df:20:a7:ae:68:9e:fd:0c:a3:58:fd:89:ac:e5:90:
37:5c:a5:26:01:ca:a1:0c:b4:f3:ce:5b:3b:bf:e9:83:f2:e3:
0d:67:3d:4b:41:ac:25:a2:96:8b:73:6d:b9:92:ee:18:b2:b1:
ef:df:d4:59:b1:f8:e9:89:1e:2b:b7:77:b1:e4:1a:37:08:52:
ef:c6:86:82:f0:f8:35:b1:f7:a0:d4:ee:3b:6c:4e:57:b7:d1:
ac:4d:f0:8d:f0:87:9d:3b:d8:ae:69:a1:c0:03:8e:0c:ff:44:
6f:de:89:c0:47:fb:a0:d5:f6:b3:6a:80:5b:f6:f7:86:bc:79:
36:0c:eb:a0:b3:c1:fe:27:80:af:1c:6b:7d:eb:65:0a:33:61:
00:5c:0a:37:6b:e0:24:f1:58:07:44:d6:c7:a7:65:03:b9:de:
39:2d:5e:7b:56:38:c6:86:a9:9a:5f:77:b0:ce:08:3e:ac:ce:
79:07:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:11 2025 by rpki-client