Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: 5UNSC3c/hdwFuB/adVT9Upkn2+dnb9bHMV/kA8kaSK4=
Subject key identifier: 6F:EE:D8:AD:C1:FF:C3:DF:BC:66:96:05:D2:AB:9C:28:85:04:AD:9C
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019A51BE5C7FBC7B45E6F16002723D314F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 0EAB
Signing time: Wed 05 Nov 2025 02:00:20 +0000
Manifest this update: Wed 05 Nov 2025 02:00:20 +0000
Manifest next update: Thu 06 Nov 2025 02:00:20 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: yJdK8Q2rG7nnf6oKZYuAHKB0u7BS6nbgrYfI2Qxjukw=)
2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:5c:7f:bc:7b:45:e6:f1:60:02:72:3d:31:4f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Nov 5 02:00:20 2025 GMT
Not After : Nov 6 02:00:20 2025 GMT
Subject: CN=6feed8adc1ffc3dfbc669605d2ab9c288504ad9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:8c:17:a3:fc:09:8f:c6:ae:c8:16:63:80:
1d:b2:1f:a5:5b:dc:05:da:8c:15:9d:26:78:8b:e9:
7e:7f:40:61:15:04:ed:c2:38:0f:04:b1:06:43:c5:
38:77:0e:13:77:73:7f:8f:46:a2:14:f4:2f:e5:1f:
cd:a9:1b:b1:2d:06:93:07:59:f4:10:16:40:88:e7:
ec:a8:fd:4c:18:bd:31:2f:1d:d0:a5:04:71:fa:40:
1e:be:e7:68:e0:ee:33:af:95:4c:2c:aa:02:86:07:
34:e7:50:86:83:29:a6:c1:f2:75:44:f6:3c:78:58:
65:20:e7:cd:32:d4:47:df:2b:fa:d3:64:5f:94:50:
7c:27:09:42:91:ef:cf:88:7a:90:6b:47:73:b2:79:
0f:23:06:aa:31:33:3e:66:83:b7:f1:7d:9f:03:f2:
7f:5f:a5:fe:ff:b3:de:89:81:f7:f6:7f:3f:0d:25:
e7:cf:e0:2f:da:f4:ad:a5:6e:2b:8a:13:41:6c:75:
be:02:34:ef:c7:ae:04:e7:23:ce:59:da:6f:c5:64:
3b:56:3d:de:2b:a3:16:9e:dc:f2:0f:ab:e1:d8:f4:
c6:3a:fc:4c:cf:a9:dc:17:34:de:51:d7:b2:84:37:
94:bb:59:8a:b8:d5:7f:3f:73:fc:b9:fc:9d:ff:f6:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EE:D8:AD:C1:FF:C3:DF:BC:66:96:05:D2:AB:9C:28:85:04:AD:9C
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ef:96:b6:2d:bf:97:20:2a:10:e9:cc:de:41:52:1b:8a:ad:
e7:10:28:1c:eb:be:25:c5:2f:2c:17:6f:20:e1:93:36:a5:71:
ef:cb:54:05:05:b6:2e:56:6a:a0:0f:59:4d:6c:f9:2c:cd:f8:
ac:ad:75:81:9d:a2:29:83:9e:9c:d1:94:a8:7a:b9:04:e9:ff:
a0:f6:ae:b9:29:96:16:f9:4e:b8:3f:0b:ff:3e:e8:a1:b4:ea:
76:01:67:97:50:f0:a0:7a:c3:39:d5:a2:a8:35:f8:c5:04:8a:
0a:a2:6c:7e:7c:27:82:46:ce:5c:2a:3c:ca:b1:02:27:74:2f:
26:be:c9:2a:d3:0e:ae:75:b8:b8:b2:38:0e:76:58:94:0a:98:
99:64:e4:4b:11:aa:1d:49:25:8b:45:ea:d1:49:2b:74:cf:53:
69:d7:60:79:84:e4:2f:1f:a4:af:70:ce:c5:06:17:81:2e:6a:
04:53:ce:47:37:36:73:fc:f9:cd:98:6f:c7:5e:c9:1d:00:48:
d9:3f:8b:16:e4:b1:b6:c7:f5:0f:e1:0a:5a:bb:84:08:89:12:
56:1e:dd:a1:9a:f5:40:0b:45:02:03:43:99:44:01:22:ad:81:
2a:00:59:dd:3a:05:53:ec:6b:de:1c:28:43:82:6c:7b:e9:a7:
e0:67:4d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:53:13 2025 by rpki-client