Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: VcUm5AqhFDqqnBgZkL7OIio00mvRVKb0vs+sJjSy9EU=
Subject key identifier: C8:C3:85:25:EF:C3:7F:0D:E1:65:40:03:8B:CC:5E:A6:30:B5:14:E9
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019872CF38CD884204B56E4F5AE94694C5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 0DB3
Signing time: Mon 04 Aug 2025 02:00:39 +0000
Manifest this update: Mon 04 Aug 2025 02:00:39 +0000
Manifest next update: Tue 05 Aug 2025 02:00:39 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: h/OmhB4pu6b4gw7cF9b0sAHzd9UauGjbY7yiC2OC8+M=)
2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:38:cd:88:42:04:b5:6e:4f:5a:e9:46:94:c5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Aug 4 02:00:39 2025 GMT
Not After : Aug 5 02:00:39 2025 GMT
Subject: CN=c8c38525efc37f0de16540038bcc5ea630b514e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:35:dc:5e:d5:17:a5:93:c4:36:81:ed:12:
0d:3e:63:84:cb:2b:ff:f8:cc:dd:2b:99:5d:f1:ff:
71:e3:5a:6c:03:19:32:02:1e:c9:de:2a:3b:54:04:
ed:32:d0:c8:60:fd:fe:b1:63:38:4e:03:87:52:b7:
a3:8d:28:a0:9a:6b:8c:c0:4f:7d:57:0e:e8:94:1b:
da:47:88:0e:92:ab:8a:2f:b5:f3:b3:86:1a:95:0d:
60:2c:d6:f0:bb:c0:c2:e1:87:dd:34:ee:b9:f9:86:
ad:19:53:0c:e8:95:2d:f8:be:78:36:db:eb:0c:ee:
7a:91:d0:fd:47:8f:2d:4c:09:96:00:54:62:c5:a3:
72:95:20:0b:27:4b:9e:48:74:93:ef:a1:fb:4d:5f:
45:51:6f:ce:0f:7f:f3:f8:0d:38:93:0e:9e:ad:7b:
9d:87:d3:07:98:4f:b5:dd:2e:3f:7f:d9:f9:21:15:
b3:e4:a2:fe:8d:83:a0:bd:3f:23:21:ea:84:66:32:
5d:08:99:e0:33:87:c2:03:c5:f9:f0:63:41:9d:bf:
17:9b:73:ec:18:b9:45:00:9d:38:2f:7d:ae:b6:5a:
42:f6:d1:dc:e8:c9:71:52:4b:32:ba:9d:5a:ac:0e:
07:f5:c6:a4:68:5b:e9:e0:54:81:ab:e7:10:f3:f8:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C3:85:25:EF:C3:7F:0D:E1:65:40:03:8B:CC:5E:A6:30:B5:14:E9
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1d:df:ae:5f:f6:ae:14:35:ad:fb:8c:f7:d7:a3:77:e3:6c:
5f:b4:7b:3c:8e:e3:15:ad:ec:43:a7:f3:d2:17:31:a0:95:7a:
38:ad:97:48:65:56:22:be:f1:1f:00:b8:4b:20:c7:eb:b2:53:
25:7a:2a:f2:86:62:ed:eb:5e:17:71:59:9c:6c:6c:27:ac:6c:
b8:ed:b0:ae:a4:b2:f3:bb:60:af:9d:9d:92:33:02:0a:5e:bc:
90:8a:5e:ef:33:29:11:c0:97:ad:c5:5a:c1:ad:9f:0e:70:a0:
e8:58:a0:64:54:81:1b:78:0e:b8:45:79:03:52:ba:a7:c4:98:
14:c6:90:27:7c:f5:39:cf:52:55:f4:36:0f:6a:d0:f2:ef:8b:
2f:89:30:97:c1:a4:14:a4:7e:4d:2f:a9:14:55:90:16:17:df:
8a:3a:0e:8d:a2:86:a2:14:11:90:cd:40:7c:19:f7:18:b8:92:
9a:90:63:59:19:14:24:71:5f:42:e7:6b:c2:bb:ba:7a:74:d7:
3f:4d:2c:a1:92:0f:16:49:d6:7f:c0:ee:02:79:95:47:06:ac:
64:b8:9e:36:35:10:c1:a9:bd:46:a3:ef:b6:e0:39:20:79:73:
4f:e0:c1:e3:e7:d3:5d:98:e3:95:0d:9b:1d:f0:53:16:10:07:
62:55:dd:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyzzjNiEIEtW5PWulGlMXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjVmNzU0MDA0ZWRiZTMwYWI4Y2FmZWVmOWY3MTMyY2Iw
YzI0MTcwHhcNMjUwODA0MDIwMDM5WhcNMjUwODA1MDIwMDM5WjAzMTEwLwYDVQQD
EyhjOGMzODUyNWVmYzM3ZjBkZTE2NTQwMDM4YmNjNWVhNjMwYjUxNGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNA13F7VF6WTxDaB7RINPmOEyyv/
+MzdK5ld8f9x41psAxkyAh7J3io7VATtMtDIYP3+sWM4TgOHUrejjSigmmuMwE99
Vw7olBvaR4gOkquKL7Xzs4YalQ1gLNbwu8DC4YfdNO65+YatGVMM6JUt+L54Ntvr
DO56kdD9R48tTAmWAFRixaNylSALJ0ueSHST76H7TV9FUW/OD3/z+A04kw6erXud
h9MHmE+13S4/f9n5IRWz5KL+jYOgvT8jIeqEZjJdCJngM4fCA8X58GNBnb8Xm3Ps
GLlFAJ04L32utlpC9tHc6MlxUksyup1arA4H9cakaFvp4FSBq+cQ8/gkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjDhSXvw38N4WVAA4vMXqYwtRTpMB8GA1UdIwQY
MBaAFDcl91QATtvjCrjK/u+fcTLLDCQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMt
NzRhZmMzMDQzYjc4LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMtNzRhZmMzMDQzYjc4
LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALB3frl/2
rhQ1rfuM99ejd+NsX7R7PI7jFa3sQ6fz0hcxoJV6OK2XSGVWIr7xHwC4SyDH67JT
JXoq8oZi7eteF3FZnGxsJ6xsuO2wrqSy87tgr52dkjMCCl68kIpe7zMpEcCXrcVa
wa2fDnCg6FigZFSBG3gOuEV5A1K6p8SYFMaQJ3z1Oc9SVfQ2D2rQ8u+LL4kwl8Gk
FKR+TS+pFFWQFhffijoOjaKGohQRkM1AfBn3GLiSmpBjWRkUJHFfQudrwru6enTX
P00soZIPFknWf8DuAnmVRwasZLieNjUQwam9RqPvtuA5IHlzT+DB4+fTXZjjlQ2b
HfBTFhAHYlXdXg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:42 2025 by rpki-client