Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
File: NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json)
Hash identifier: Dmghlwqsobmmv1tHU+xUzHHbQQNKiKFsNwmFzp53758=
Subject key identifier: 6C:A0:44:71:20:25:C3:4F:E4:EE:A9:B2:8E:C8:68:7C:BD:E2:E8:4A
Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
Certificate issuer: /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Certificate serial: 019A4EF4ACF7007A96A1CE63766AC0A6DE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:49 +0000
Manifest this update: Tue 04 Nov 2025 13:00:49 +0000
Manifest next update: Wed 05 Nov 2025 13:00:49 +0000
Files and hashes: 1: Ex_2ickmNwSl468A43nBNWlR1U4.roa (hash: 2F6N+mLC+ZFSEAJYbcx9IRB+VD26lz+G1r697PEXjx4=)
2: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: 2TmOMJVWs+e4xExc8OCb9G/Woew7XDgstubnWjZM6Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ac:f7:00:7a:96:a1:ce:63:76:6a:c0:a6:de:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Validity
Not Before: Nov 4 13:00:49 2025 GMT
Not After : Nov 5 13:00:49 2025 GMT
Subject: CN=6ca044712025c34fe4eea9b28ec8687cbde2e84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:7b:23:ad:bf:82:97:22:33:c7:a0:bd:f3:
71:b6:49:b7:04:15:82:89:7d:06:ec:0a:6e:b3:e9:
b9:4e:00:61:16:17:45:ea:33:2b:59:43:ba:9d:81:
d6:4e:db:1b:2d:5e:fc:df:c2:74:34:98:e7:fe:c5:
a2:0d:7d:b6:7c:b2:64:fe:a8:0c:a7:03:35:91:3e:
e2:92:9c:36:0c:90:54:05:4c:45:25:f7:d9:98:ad:
06:61:c9:f0:5f:67:ff:0e:36:fc:d3:46:ab:ef:4e:
bc:90:35:57:70:d8:44:05:dd:46:80:7d:73:1a:44:
7e:33:da:1f:65:a3:40:36:70:22:e0:54:95:ff:86:
85:a0:fb:2e:d5:37:f4:b7:9e:32:b5:bc:92:43:37:
b2:66:ee:73:80:d2:48:aa:10:73:ed:16:14:f1:51:
b7:6c:3a:74:5f:e2:74:9b:5d:91:3d:ac:18:38:13:
68:85:ce:f1:eb:bd:0a:40:d9:99:98:f0:8f:24:13:
4b:71:48:df:94:99:e5:49:eb:cc:49:65:d9:05:05:
d1:7e:86:e6:09:f4:fb:8c:c0:00:c1:de:47:bf:13:
ed:17:6c:46:ca:a2:94:78:45:77:a8:8a:a7:e6:87:
d0:84:bb:a2:60:01:45:d4:3b:c4:41:a4:8b:87:4e:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A0:44:71:20:25:C3:4F:E4:EE:A9:B2:8E:C8:68:7C:BD:E2:E8:4A
X509v3 Authority Key Identifier:
keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8d:5f:eb:54:90:e5:2f:d0:99:e5:a7:c2:1c:0b:3c:45:6d:
0a:70:14:7b:e2:19:4d:c0:32:97:33:4c:eb:50:0a:2e:fd:df:
92:3b:3c:19:28:5b:86:ef:ba:41:cf:c4:f7:1e:5a:64:5a:31:
b5:96:4f:73:ec:2c:10:ec:a1:20:53:2d:de:2d:84:a0:29:16:
3b:ab:40:a0:c8:9f:bd:02:90:e1:aa:dd:c7:fc:9f:1e:fb:b4:
59:79:2e:e5:82:97:fa:2c:34:ce:1c:30:5f:fd:da:fa:dd:cc:
5d:da:46:d1:01:8b:d1:1d:14:80:a4:de:0d:9f:3b:f5:52:c8:
92:af:9c:b7:2b:ec:58:95:c0:a4:f6:a0:e4:d4:cd:7c:bc:93:
ca:25:39:e2:c4:c7:ed:68:e2:c6:59:a6:be:a2:18:0f:4c:e9:
e3:7e:cc:8c:7e:02:87:e2:48:0b:6b:c4:c7:6b:70:02:73:c6:
3d:de:7d:77:d3:b2:a6:09:c5:8b:09:b5:f2:79:a5:5d:84:f4:
c4:a6:1c:4e:bb:3d:91:64:f1:a8:e7:91:91:4b:2b:2f:67:f1:
64:83:d6:20:b7:41:5d:36:a0:af:cf:5f:0a:50:82:58:57:5a:
0a:a7:6f:2c:43:aa:1e:d5:ff:14:b7:e9:b3:79:9b:c4:87:65:
bc:2b:6e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:52 2025 by rpki-client