Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json)
Hash identifier: Gd0n77IhYOJ9qnapXn/bOZxRSkqIigjhgTg5tYP0dvM=
Subject key identifier: 5F:06:FF:C8:C9:CE:A1:45:E3:F0:73:6F:7A:98:2D:AF:6A:72:A4:97
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 0198A04ED47D3C3BAC36E54124F106AE6DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
Manifest number: 162F
Signing time: Tue 12 Aug 2025 22:02:57 +0000
Manifest this update: Tue 12 Aug 2025 22:02:57 +0000
Manifest next update: Wed 13 Aug 2025 22:02:57 +0000
Files and hashes: 1: IAQeRjmmu9Z-veumwyPKfDrKvbI.roa (hash: Ww+1iOsdAQGbUwn6gW9paX3J1FGXxxEHtorVkrDGTZc=)
2: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: wD0eyUbwgSKbRCeBW4U6kY4WFDhuZuur1G7iWzO+M44=)
3: zE2nCBuCP3GWKcrh09m8L6FV9yA.roa (hash: iLVOHuiEHM03YeDql7RR17g8jhss2HwinXwx77EwMP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:d4:7d:3c:3b:ac:36:e5:41:24:f1:06:ae:6d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Aug 12 22:02:57 2025 GMT
Not After : Aug 13 22:02:57 2025 GMT
Subject: CN=5f06ffc8c9cea145e3f0736f7a982daf6a72a497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:0a:7b:49:98:2b:e0:62:00:65:a3:81:79:
c8:fb:75:c2:45:68:3b:44:f6:bf:e2:16:a2:bf:88:
53:d2:ab:4b:5e:0c:89:99:29:f6:b7:48:9e:bc:87:
d3:1d:ab:69:ca:ce:82:52:43:70:ae:76:4e:c2:57:
82:04:07:ad:b5:f5:aa:82:af:14:38:13:b9:3d:78:
ae:61:a9:36:a3:8c:b3:99:b6:e3:8e:51:89:75:ac:
05:cd:93:16:a1:80:fe:e1:86:2f:c3:c0:b2:af:63:
98:1a:e7:13:2c:a1:23:c2:d8:8a:d0:81:b9:7d:b5:
3b:9e:6d:4f:23:6c:6a:64:a6:15:d7:76:60:22:6d:
a2:26:df:ed:77:41:7b:cf:70:da:66:34:2c:1b:bb:
90:3b:6f:92:f8:ff:4f:6e:14:2f:58:5e:74:e8:87:
e9:9b:21:25:fb:85:2f:73:d0:e8:a7:ce:7a:b0:4a:
11:2c:ca:95:d0:92:c8:60:ef:81:53:16:1e:5e:22:
89:f9:b2:95:ca:91:e2:3b:78:8d:4e:a8:53:d9:c6:
f5:0f:28:12:7d:3d:62:0b:4c:52:86:21:77:d3:f5:
9c:08:ce:e5:90:73:46:02:2e:89:c8:f9:bb:5f:18:
58:56:af:fa:e3:a3:46:58:39:29:9e:3f:18:90:d4:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:06:FF:C8:C9:CE:A1:45:E3:F0:73:6F:7A:98:2D:AF:6A:72:A4:97
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:83:ab:c1:00:8b:fe:c4:b2:72:94:71:03:85:95:1b:c2:41:
ad:22:48:31:87:3d:61:c4:b8:bf:58:a3:aa:01:d6:e1:29:e1:
2e:dc:59:81:0b:be:bd:44:b2:23:a7:33:b6:e1:60:71:3a:50:
a4:66:da:06:9a:25:dc:a6:77:73:ed:40:b7:41:df:65:48:76:
8f:16:b0:9e:56:bd:cc:6c:1f:d0:98:9a:e8:9d:cc:60:7b:11:
d2:8a:66:3a:4f:82:fb:cf:d9:e4:4f:e1:30:03:e1:f5:39:ba:
1f:95:e8:d6:d7:d9:54:e0:6a:01:00:36:ab:7e:f3:2d:4e:ac:
fa:a1:3c:f0:60:4d:a1:ba:89:6c:ca:41:2f:d6:21:7c:19:b8:
67:36:47:83:08:91:4c:89:b4:f7:93:13:6f:f1:b9:a3:05:69:
03:69:c2:e8:4a:ed:de:bb:79:29:25:96:3e:1d:15:9a:43:68:
07:2d:64:d3:39:db:ca:dc:09:3b:3d:fc:40:00:52:80:f1:6e:
6b:3b:55:74:c0:8a:a8:a1:8f:4c:19:12:c3:57:96:67:97:94:
53:7d:c5:95:2e:a3:58:ed:84:49:87:48:e4:ec:96:a7:95:04:
e3:c1:6f:fd:c8:ca:02:07:28:cd:de:64:8c:2d:f3:5b:06:a7:
a0:45:e4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:59:29 2025 by rpki-client