Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
File: nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft (raw, json)
Hash identifier: I9ZrrK/j9Ihh9bWK5pLepTTDs53h0AWudbHhoZwYIjw=
Subject key identifier: 11:24:C7:E6:9F:96:17:1C:7E:3C:9A:E4:68:13:CC:40:33:81:9A:DF
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial: 0199FCC6C1876477668F21570D4F6D8CC5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
Manifest number: 1008
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl (hash: Ql3tYIkWARiOYJMTrklOl0a5VIt2WXsyeYhLOmYRBXE=)
2: xk36of5GcRMNZGUJt-_5r_QctTo.roa (hash: BbMVXEvQwTUOBV0n4W+iUw7Na6Uh7I6Smkrm6hqGQWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c1:87:64:77:66:8f:21:57:0d:4f:6d:8c:c5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=1124c7e69f96171c7e3c9ae46813cc4033819adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:ae:a6:c7:d8:6f:f2:06:90:7c:28:38:e3:
cb:fd:9c:a1:79:02:83:57:ad:64:23:b9:4e:6e:4e:
b5:25:cb:79:84:2d:f4:c6:3d:f7:56:f8:d1:83:dc:
2e:7d:27:1a:f2:18:65:d1:6c:0b:43:f2:45:0f:6b:
52:7e:21:b0:dd:29:de:63:dd:12:8f:ac:16:ef:27:
3f:da:10:03:49:6d:3e:1a:8f:68:0d:4d:1c:56:cd:
f3:b8:15:d1:b0:e7:14:80:8d:f8:f9:00:42:41:41:
1e:8a:f4:9d:86:05:2f:9c:b8:24:80:d8:1c:2f:fb:
52:cd:b6:28:88:4e:01:86:b5:f6:bf:c1:b8:12:ed:
b2:dc:06:2b:4a:8e:ba:08:99:fd:8f:ce:2b:5c:e2:
2f:e9:63:eb:04:84:c3:de:47:78:4e:09:cf:30:97:
ab:66:8e:06:06:b9:43:d7:92:00:27:cf:c0:68:b2:
63:c7:0e:b4:e5:30:3d:22:ae:48:c3:59:88:85:fc:
74:4a:41:60:70:09:fe:49:52:9a:d9:40:ec:1c:5a:
69:30:4d:fb:11:cd:1c:8b:cf:17:57:73:9f:ee:b8:
25:e9:df:ff:0e:b4:6b:e2:b3:eb:3e:2c:2a:95:dd:
c1:58:59:1a:27:3e:41:2c:b6:01:35:28:de:a3:40:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:24:C7:E6:9F:96:17:1C:7E:3C:9A:E4:68:13:CC:40:33:81:9A:DF
X509v3 Authority Key Identifier:
keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:db:0e:68:72:35:d0:74:7c:ca:17:8b:3e:8e:c8:2a:8b:30:
ef:a8:39:34:11:4f:82:ab:32:c6:6c:c8:43:5e:d7:7d:4d:16:
2a:18:6b:47:1f:2c:62:1d:b3:2f:eb:99:e5:8e:40:bf:0c:87:
fd:57:cc:0f:c0:f2:e6:0f:8f:04:73:47:c5:19:82:8a:23:52:
91:54:84:ff:e7:d7:94:23:b0:74:6f:1c:f5:e3:71:cd:b1:14:
8d:9e:4a:4e:64:95:55:97:04:f5:59:14:18:de:c8:10:76:79:
d5:c9:d3:69:7d:55:66:e9:82:ad:f8:9c:a9:fc:42:0e:b7:78:
a8:ff:57:51:b7:c4:2e:b0:62:a9:3d:79:be:b1:4c:f1:de:56:
66:c5:aa:26:04:32:23:22:58:70:84:a8:69:70:ca:4b:3b:48:
41:43:77:72:89:5f:aa:a6:9b:0f:64:09:03:12:de:e8:3d:8c:
75:c3:51:af:bc:79:2f:2a:8d:95:78:28:69:79:05:7c:52:0c:
25:26:02:59:2e:44:cf:90:d5:04:34:7b:ef:a1:1c:86:6a:1b:
12:20:97:77:c6:8e:f0:98:76:80:24:76:7a:77:dc:7e:23:89:
a7:08:21:b8:c7:8d:f8:4f:f3:d8:62:11:e6:9d:39:eb:2a:36:
16:54:92:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:10 2025 by rpki-client