Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
File: nYy-lCn5RJlbPJNL2vZglrURSNQ.mft (raw, json)
Hash identifier: sh0scPVmniRTRXpEheNdhboaunwwo82b/yykBlV3Esw=
Subject key identifier: E7:9E:0F:8E:38:F9:BD:29:ED:85:CF:B9:EF:79:6A:C2:06:A4:0E:29
Authority key identifier: 9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
Certificate issuer: /CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
Certificate serial: 0198D5162F6DC3DD7F1636B53E542A5E72D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
Manifest number: 0596
Signing time: Sat 23 Aug 2025 04:00:57 +0000
Manifest this update: Sat 23 Aug 2025 04:00:57 +0000
Manifest next update: Sun 24 Aug 2025 04:00:57 +0000
Files and hashes: 1: nYy-lCn5RJlbPJNL2vZglrURSNQ.crl (hash: F+iisVGtKllKukLG5eO8KR6LHkX/5AEGsuEFmnEIZTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2f:6d:c3:dd:7f:16:36:b5:3e:54:2a:5e:72:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
Validity
Not Before: Aug 23 04:00:57 2025 GMT
Not After : Aug 24 04:00:57 2025 GMT
Subject: CN=e79e0f8e38f9bd29ed85cfb9ef796ac206a40e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b5:e5:e7:ac:17:a1:4b:0a:fb:62:33:6e:ba:
5e:5b:aa:db:ca:93:b8:44:bb:b9:fc:7a:18:d8:25:
67:c7:f6:ca:0a:d7:e3:d2:dc:7c:c9:ad:17:c7:03:
fc:7c:d9:4a:bc:67:3c:5f:a1:a2:75:4e:65:5e:b7:
85:59:e4:5a:2a:2a:69:6d:d4:b5:72:d9:bf:de:50:
0f:78:fc:84:6c:d9:bf:82:53:a6:08:44:d7:56:8d:
fb:9b:39:60:f1:c5:ce:7e:c0:d3:1a:de:9a:82:a8:
6e:0e:e9:e6:fc:0e:c8:0a:2f:e3:7e:4f:2a:8f:2f:
55:21:31:ad:4f:e7:fd:a6:3f:4a:05:53:dd:e7:3a:
1b:7e:74:22:1d:7f:42:21:f4:eb:2a:88:2a:ea:46:
ef:1c:55:f2:24:76:00:c1:75:c8:8e:2c:bd:da:ff:
c7:41:ee:27:ea:26:ed:ec:50:7e:c7:aa:c0:3c:38:
5b:94:e1:a4:bd:ef:f3:d3:cc:32:8d:b2:1f:a2:95:
d5:54:3a:86:af:77:76:80:80:77:41:18:e3:32:fb:
23:f6:c5:2c:2b:34:4f:dd:4f:2b:7d:1c:84:a9:8f:
76:8e:45:47:85:0d:9c:dc:d0:de:3c:9d:b4:2f:81:
e4:c3:fa:2c:e6:c3:b3:e4:d6:56:19:03:6c:d6:4e:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9E:0F:8E:38:F9:BD:29:ED:85:CF:B9:EF:79:6A:C2:06:A4:0E:29
X509v3 Authority Key Identifier:
keyid:9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:21:6c:78:38:4d:74:85:58:de:b7:93:17:60:e2:a1:a3:42:
6e:aa:ee:42:c6:ed:c7:d0:74:9e:de:6b:47:3d:ae:89:da:a3:
55:6c:4a:e8:bb:ed:42:90:7b:33:94:25:91:4a:53:15:c7:7c:
69:ce:f3:3b:24:37:d0:75:5e:df:70:ec:80:d0:d0:6f:d2:13:
b9:2f:cc:2e:e3:af:a6:80:8d:ca:fc:5f:72:51:12:05:89:20:
0f:c1:94:77:81:7c:53:7c:91:3f:14:6e:e2:6a:50:9b:a3:b2:
b3:4d:07:7d:3b:8a:3a:bd:5c:74:3f:f1:bb:c7:d2:b6:5d:2c:
2e:ba:ba:ad:23:eb:3e:00:b5:cf:7e:4f:4b:c8:9d:3e:5a:89:
ae:1e:09:10:5f:82:9b:98:4e:e1:b3:54:c0:3c:b2:35:2f:f9:
06:de:f9:ba:07:e4:05:dd:f4:e7:1f:9c:29:35:b3:6f:e6:07:
c7:1d:00:46:22:d8:ea:73:40:38:83:75:2a:3f:f2:5e:c3:1a:
68:f2:d4:c6:47:5f:7d:d3:7b:97:9b:56:b3:64:1d:b7:e9:d6:
6b:db:24:43:b2:a3:8e:b9:5e:25:80:d5:71:06:42:60:a7:45:
f9:d3:51:5b:aa:15:2b:70:b2:6f:7a:be:a4:e5:f0:51:d5:84:
e4:52:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:31 2025 by rpki-client