Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: 3UJgVskBF0MOcfzlqZmn/PdQFvnq/wuZIaRWGWv9nao=
Subject key identifier: 83:FF:D6:B3:88:B7:94:FF:06:D9:35:EA:49:FE:93:1E:11:24:2A:A6
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 0199FBEBE4D5F2EAB82269C8A164AC1E1138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0D23
Signing time: Sun 19 Oct 2025 10:02:44 +0000
Manifest this update: Sun 19 Oct 2025 10:02:44 +0000
Manifest next update: Mon 20 Oct 2025 10:02:44 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: 6qZNUyY6cosO7GYytIRqsjCsFTYl0NR1tyDuOE9Xdh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e4:d5:f2:ea:b8:22:69:c8:a1:64:ac:1e:11:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Oct 19 10:02:44 2025 GMT
Not After : Oct 20 10:02:44 2025 GMT
Subject: CN=83ffd6b388b794ff06d935ea49fe931e11242aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:ba:f1:2f:4b:61:cc:91:e9:23:34:9e:2c:
cc:bb:76:b9:31:59:54:1e:19:80:e8:c6:9b:67:58:
f0:f5:9a:7d:bb:22:34:89:e7:62:50:35:24:7f:0f:
e2:35:82:aa:0f:6c:07:43:eb:6c:b5:b9:81:1c:49:
cd:af:7e:7f:d7:64:0a:49:4a:eb:2e:f2:83:b8:b9:
73:fe:de:67:81:0f:7d:f1:5b:28:e8:33:81:15:c6:
90:31:2e:f2:38:ec:7d:2a:5a:bd:c5:f0:11:fb:d6:
b5:a3:e5:48:cc:94:4c:83:f9:88:2a:9e:6b:0f:d0:
b6:6c:b2:50:ab:77:2c:ce:56:79:f4:4d:b6:cc:c8:
ab:ab:8c:c6:9b:d4:20:0c:ed:c2:96:a8:1a:3e:18:
d7:16:57:f7:d9:65:0c:6e:8e:fa:12:4e:2f:d5:ed:
92:c4:7c:94:40:59:c7:1d:c4:cb:aa:93:fe:c4:87:
2c:1b:42:49:8f:d4:8c:e6:73:33:f0:1e:f8:21:31:
eb:5e:9a:e9:8a:4b:84:4f:9d:e7:d8:29:6c:ac:c7:
54:06:3e:66:17:22:1c:4a:28:a3:05:9b:d4:69:d8:
b8:28:a1:78:3e:fd:3a:49:27:4a:ac:46:9e:24:c6:
01:d4:9d:17:fe:9c:2d:11:bd:4c:3d:17:08:bc:95:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FF:D6:B3:88:B7:94:FF:06:D9:35:EA:49:FE:93:1E:11:24:2A:A6
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a2:97:e6:ce:e8:71:b5:54:c6:1e:5a:13:8b:31:49:df:e6:
ea:1d:ba:ba:9c:ad:64:9f:d8:37:e8:3f:ea:55:14:98:be:a6:
db:29:35:0f:0a:fb:0d:1a:6e:f4:73:75:c2:d4:cc:fa:a3:67:
e9:ca:40:d3:21:84:2e:87:43:92:73:36:b4:13:2c:60:21:ad:
72:b4:ca:37:ec:fb:1f:65:06:68:81:4a:80:99:8e:fe:f1:3a:
2a:18:60:4f:52:af:df:92:e8:a7:83:9b:c0:1a:85:87:6a:87:
08:6b:b2:d2:63:21:2b:87:dc:29:a4:10:e6:df:1a:b1:3f:b0:
ab:d5:4b:31:1f:bf:8f:7c:d6:8f:fa:50:5a:af:c9:4d:fa:aa:
d1:8b:ca:60:df:d0:dd:bb:b5:da:af:02:26:e5:6d:50:8f:e4:
af:d4:c3:74:e7:88:04:3a:16:c5:bf:5f:96:a6:7e:be:5f:06:
43:42:3d:77:88:d3:d4:17:68:63:62:09:3f:39:6e:9c:95:60:
a6:2b:11:27:bd:5d:f7:b1:64:12:71:2e:d0:c3:8d:e1:ac:a2:
a2:ec:ad:32:9d:d6:a0:cd:39:ec:17:2f:7e:6e:5f:c2:30:ef:
8d:93:63:ff:77:c8:fe:88:e9:5c:c5:d0:2b:b1:7c:2a:aa:20:
c9:19:6e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:02 2025 by rpki-client