Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
File: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft (raw, json)
Hash identifier: NLvAm1xM1eCrd15xg/mUpTCm1kgDZhSzoaMiMl9S+UE=
Subject key identifier: CF:43:D5:72:65:93:45:97:72:66:A1:73:4D:9D:04:BB:5B:14:27:A2
Authority key identifier: 35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
Certificate issuer: /CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Certificate serial: 01989749B1495A87877A6330BFC4A78E7E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
Manifest number: 1261
Signing time: Mon 11 Aug 2025 04:00:45 +0000
Manifest this update: Mon 11 Aug 2025 04:00:45 +0000
Manifest next update: Tue 12 Aug 2025 04:00:45 +0000
Files and hashes: 1: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl (hash: zW5KlK3bmRwPy9U18mJIkVDSn9pfVaDtNhI2eOS4R1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:b1:49:5a:87:87:7a:63:30:bf:c4:a7:8e:7e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Validity
Not Before: Aug 11 04:00:45 2025 GMT
Not After : Aug 12 04:00:45 2025 GMT
Subject: CN=cf43d572659345977266a1734d9d04bb5b1427a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8f:7b:db:94:38:e4:14:d6:bf:a1:59:66:01:
8f:06:91:f1:95:f5:aa:a3:32:d4:5a:8f:69:ee:21:
4d:e3:60:ba:93:30:1c:55:65:fb:a3:d1:a2:c3:8d:
6e:ef:a9:e9:b2:55:7b:8b:8e:b8:50:36:6c:fa:a6:
29:b6:9c:1f:6d:3b:79:14:bc:95:84:f1:05:cc:d1:
91:a5:74:26:b0:59:15:46:19:a1:36:59:0f:c7:31:
5f:d4:79:5e:e7:c9:2f:6f:2a:75:1a:a2:13:06:78:
32:18:25:43:4c:4f:be:c2:62:a0:35:d0:ef:fe:9b:
d8:a1:bf:78:06:62:49:ca:b9:0f:ea:2e:92:2d:35:
4b:da:ab:76:de:aa:9b:3f:63:ff:00:10:07:18:45:
e9:16:67:3e:e6:f9:44:71:83:73:ee:64:29:db:39:
93:11:d1:b4:70:18:b3:06:46:66:9d:d4:61:49:e7:
4f:b8:91:b6:9b:6b:6f:f2:a9:47:41:69:d6:b1:b6:
66:21:18:c1:16:29:6a:e7:39:db:14:b9:df:e8:28:
f5:02:e6:87:90:1d:9f:ff:45:95:a4:8f:a3:67:68:
20:d0:9f:ce:3a:9a:ba:0d:55:47:97:7e:c2:a2:23:
f6:c0:d5:4d:db:ee:d6:5e:f9:04:31:cd:0a:91:54:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:43:D5:72:65:93:45:97:72:66:A1:73:4D:9D:04:BB:5B:14:27:A2
X509v3 Authority Key Identifier:
keyid:35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:98:65:bf:87:8e:64:fc:4e:13:20:02:54:23:a8:f8:4e:45:
7a:af:99:2a:05:37:75:83:57:30:47:36:97:26:e7:3b:f5:9d:
7c:5b:95:d6:71:cc:76:f3:2e:3b:72:d0:d3:13:d1:13:8f:52:
1b:f3:e8:b5:08:b4:03:fa:cb:92:1c:fa:2c:5f:91:b0:98:86:
a6:1a:f4:3c:ec:26:2f:4e:fe:7e:ea:53:ef:55:c6:4b:f7:d3:
96:5d:3d:33:03:92:cd:b0:9f:16:00:ab:c3:ed:b4:72:9b:f2:
d6:55:8c:ea:90:55:17:ef:fe:5c:2a:45:8c:d1:b9:c2:f8:7e:
8b:fa:2a:7d:d3:e3:68:ef:3c:a6:9e:a5:da:4e:b7:29:76:f8:
89:4c:6e:e5:7a:63:b7:f0:cd:85:dc:8e:5e:a7:16:01:fd:5c:
c6:c8:d8:84:6e:38:4a:95:40:43:31:a9:47:32:2e:45:ab:1e:
60:bc:da:14:08:6a:8d:9a:9d:ae:c6:2a:3f:70:23:3d:a7:36:
1f:f2:06:f5:67:37:61:23:ce:53:33:61:dc:17:8e:ef:5e:f4:
65:dd:54:05:6d:79:4e:5c:26:c7:c6:a2:4d:0e:05:e0:c4:68:
01:69:8c:c8:39:31:2b:10:dc:87:c1:b5:32:0c:39:09:fc:7a:
ab:fb:1d:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXSbFJWoeHemMwv8Snjn5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OGFlNTgwYjJmN2I0NWMzZDJhZTlmMTlmM2MxYmU5N2U4
MzlhYWEwHhcNMjUwODExMDQwMDQ1WhcNMjUwODEyMDQwMDQ1WjAzMTEwLwYDVQQD
EyhjZjQzZDU3MjY1OTM0NTk3NzI2NmExNzM0ZDlkMDRiYjViMTQyN2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6o9725Q45BTWv6FZZgGPBpHxlfWq
ozLUWo9p7iFN42C6kzAcVWX7o9Giw41u76npslV7i464UDZs+qYptpwfbTt5FLyV
hPEFzNGRpXQmsFkVRhmhNlkPxzFf1Hle58kvbyp1GqITBngyGCVDTE++wmKgNdDv
/pvYob94BmJJyrkP6i6SLTVL2qt23qqbP2P/ABAHGEXpFmc+5vlEcYNz7mQp2zmT
EdG0cBizBkZmndRhSedPuJG2m2tv8qlHQWnWsbZmIRjBFilq5znbFLnf6Cj1AuaH
kB2f/0WVpI+jZ2gg0J/OOpq6DVVHl37CoiP2wNVN2+7WXvkEMc0KkVQhcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9D1XJlk0WXcmahc02dBLtbFCeiMB8GA1UdIwQY
MBaAFDWK5YCy97RcPSrp8Z88G+l+g5qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2Njct
NTI0ZjNhMmY2OGIzLzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2NjctNTI0ZjNhMmY2OGIz
LzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJhlv4eO
ZPxOEyACVCOo+E5Feq+ZKgU3dYNXMEc2lybnO/WdfFuV1nHMdvMuO3LQ0xPRE49S
G/PotQi0A/rLkhz6LF+RsJiGphr0POwmL07+fupT71XGS/fTll09MwOSzbCfFgCr
w+20cpvy1lWM6pBVF+/+XCpFjNG5wvh+i/oqfdPjaO88pp6l2k63KXb4iUxu5Xpj
t/DNhdyOXqcWAf1cxsjYhG44SpVAQzGpRzIuRaseYLzaFAhqjZqdrsYqP3AjPac2
H/IG9Wc3YSPOUzNh3BeO7170Zd1UBW15Tlwmx8aiTQ4F4MRoAWmMyDkxKxDch8G1
Mgw5Cfx6q/sdvg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:50 2025 by rpki-client