Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: 1DYrUqHjc5oKt/o6Rc+lBNgSgMFERyFTBLWAVLkLNDU=
Subject key identifier: 11:8B:A8:D5:A9:1F:11:D5:2A:07:AB:C7:0C:58:AB:D4:01:E3:D3:8E
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 0198D6608FA2F651BE1857219129A8C3960D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0C8B
Signing time: Sat 23 Aug 2025 10:01:49 +0000
Manifest this update: Sat 23 Aug 2025 10:01:49 +0000
Manifest next update: Sun 24 Aug 2025 10:01:49 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: PFZQ3m/inEkbDmzG17IvwF3wAqMLZ0aer7g/aCgojaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8f:a2:f6:51:be:18:57:21:91:29:a8:c3:96:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Aug 23 10:01:49 2025 GMT
Not After : Aug 24 10:01:49 2025 GMT
Subject: CN=118ba8d5a91f11d52a07abc70c58abd401e3d38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:e6:00:ed:83:61:4c:c1:09:20:97:bf:4e:
1e:6c:cb:76:b3:69:7e:50:3a:c6:95:52:5c:13:07:
97:ca:bf:4b:f8:df:03:b2:dc:b0:27:18:39:cc:18:
4f:63:47:d7:51:15:9e:b8:fd:d3:27:df:32:24:fb:
ac:6d:8c:cb:6e:6e:84:4b:7d:cb:18:56:23:bd:e8:
c1:47:04:40:c0:d7:cc:cf:80:4d:dd:79:9e:41:9c:
8a:a4:9f:a2:b2:24:ab:e8:cc:1f:33:15:ef:76:8a:
83:8b:0e:03:d7:44:44:a6:1a:0a:38:7b:b3:c4:5d:
76:60:18:2e:24:5c:c0:e2:d6:15:68:f2:99:bd:69:
b2:61:1e:69:d4:68:fb:45:52:99:c8:59:58:2a:91:
cd:2d:95:e2:a4:40:3c:38:ff:08:e0:e9:0c:fd:01:
77:fa:94:ec:10:29:a9:91:c5:21:b3:b8:5b:37:8a:
61:41:70:02:c5:34:54:69:e0:e0:ff:b4:b7:e6:e2:
5d:c5:b5:73:68:b1:db:b4:39:e8:b3:29:25:4e:dd:
68:f1:5d:fd:a0:b1:7f:52:4a:89:4e:eb:a7:e6:32:
a5:03:5d:d2:48:db:01:f2:b3:42:2b:38:bb:91:0b:
23:5b:63:eb:47:ef:1f:20:43:56:e3:84:cf:d8:83:
4f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8B:A8:D5:A9:1F:11:D5:2A:07:AB:C7:0C:58:AB:D4:01:E3:D3:8E
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:11:9e:ca:93:a0:c5:80:a4:ff:65:9c:d9:1b:8b:c5:7d:4e:
87:70:e8:49:75:af:84:11:8e:83:5e:de:62:25:36:e9:71:02:
e0:a9:1d:e8:8a:ab:40:54:6a:b3:9d:0d:25:1e:65:b3:c8:f9:
1d:cf:d8:fe:84:24:af:29:06:68:47:cb:54:7e:47:dd:83:74:
5b:12:1e:49:dc:9d:06:94:03:a6:ad:80:14:85:3b:9a:66:21:
b8:4e:b4:6a:9d:a6:25:c5:4f:f9:8f:29:c1:d2:3c:b3:5d:75:
c1:9b:0e:1f:d0:d7:84:fe:6a:ea:07:e9:cd:53:dd:fa:01:d0:
e3:17:d7:05:e1:32:ae:d6:63:08:0e:9a:34:50:ba:02:9c:58:
93:97:3e:7f:8a:34:ef:4c:89:c3:3d:c8:31:91:27:e7:22:51:
41:8b:92:12:35:74:a7:91:8a:e3:99:b9:e8:45:e9:ce:83:85:
5f:85:f6:3b:9b:74:33:ec:15:b1:a3:ab:44:b0:55:b7:68:5b:
db:19:9f:e7:09:89:d2:ea:9d:11:5e:32:a4:42:ba:50:fb:6f:
80:c2:59:96:26:6b:49:36:1d:d8:5a:cd:0c:93:2a:79:22:81:
73:b5:c1:a3:2d:57:89:5e:37:ff:a4:71:a9:59:9f:20:0a:cd:
d8:a4:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:57 2025 by rpki-client