Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: iQISHnOrX/yC2FdbN9/pT0DLLPezq9D6EF4Dfl0CFr8=
Subject key identifier: F9:5C:EF:A4:C2:24:3A:5E:60:81:58:E1:15:E5:C9:79:A8:9E:48:86
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 0199FBEB0F97EA9A6859BFB5569B33731767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 0181
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: NcH/9OJDnXCw+qwn3Z55Jg/tcfDpOzWLPwrMsVpIJQY=)
2: tT9egEPZfOW0iJxsepbGA_UgQjg.roa (hash: nJcChZ33Fi+iAdXvZOyTBjHIrvr+XcKOSiVdHqUG+CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0f:97:ea:9a:68:59:bf:b5:56:9b:33:73:17:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=f95cefa4c2243a5e608158e115e5c979a89e4886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:2a:8a:05:a3:0f:72:be:fb:8d:ec:30:23:
86:84:8c:b3:65:75:05:6e:d1:c9:e0:0d:ab:78:da:
e4:3a:ac:87:57:c2:ab:df:4a:02:7e:74:a6:8c:57:
e2:8e:71:04:f7:8d:19:7c:84:ff:06:96:00:ed:0e:
78:d7:63:9c:2d:d9:de:ea:9f:90:bd:ab:00:e7:94:
40:48:20:d2:e8:05:89:a1:4e:54:91:0a:53:0f:71:
7e:cc:37:7f:be:20:23:b9:e8:fc:9c:d0:51:56:c8:
00:a8:34:d8:d9:72:96:61:b9:04:4b:09:f4:c0:22:
50:47:51:2c:ce:4a:f8:b9:02:ef:9e:78:4c:ad:b1:
87:7a:0d:f0:80:7b:cf:3c:56:d3:81:f6:fb:e6:82:
de:8e:5b:2a:2b:b0:1f:57:28:c6:1f:44:f5:b3:14:
95:a2:d3:4c:6f:ee:a0:29:e7:be:3e:0b:e0:81:ad:
40:07:82:c3:51:2b:58:6c:a8:34:9f:99:87:d2:6b:
5d:d4:1f:ef:62:ff:00:72:e0:6c:2d:0f:d3:7e:38:
36:d4:97:b6:7d:2a:26:21:35:b7:92:52:5d:3f:76:
d6:4c:48:75:79:45:b4:5e:3b:d6:ed:dc:63:56:dd:
50:94:d1:7b:1d:5c:e0:52:27:dc:b3:6c:d2:50:62:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5C:EF:A4:C2:24:3A:5E:60:81:58:E1:15:E5:C9:79:A8:9E:48:86
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:58:52:00:a6:24:9f:89:05:e6:dc:2b:64:0b:d8:f1:eb:9f:
3f:49:41:0c:92:73:36:a7:79:d5:e6:2b:ff:02:3e:c6:22:5e:
1f:19:12:d0:c8:6e:62:59:32:a9:a1:de:6b:01:f2:3d:f5:9a:
fa:2f:f7:d7:89:5c:01:e3:2f:55:78:9c:92:c4:48:7f:a3:04:
0a:62:4b:90:a6:f6:58:5f:91:9e:3d:63:63:8c:02:c2:87:0b:
75:fc:7d:1a:1d:91:fc:27:b4:89:07:2b:0d:3e:0a:9e:16:c2:
8b:df:a6:87:88:ad:c7:da:f0:c8:ae:e8:18:9a:eb:9e:85:38:
ce:49:d8:aa:df:1f:ec:91:4f:15:c2:10:5b:23:0b:30:7c:d7:
9d:9c:3f:49:47:9f:bc:29:f1:dc:ae:b3:8e:f6:4c:68:75:17:
f5:9a:c2:4b:7e:de:af:79:5f:a6:bc:fc:94:a9:ee:37:32:45:
34:7e:69:87:14:7a:05:e5:c3:14:3b:97:ba:7a:40:45:cc:76:
52:06:b5:6f:b1:ad:30:9d:d0:30:32:80:12:53:fb:36:61:df:
18:da:d3:d3:33:de:50:08:b1:fe:4c:37:79:dc:09:e9:0b:88:
47:2f:49:59:31:54:e6:83:be:f3:70:df:7c:a2:85:00:7d:d1:
f0:a8:24:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:40 2025 by rpki-client