Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
File: ny83TJpzj63o-FDKq11507kARYQ.mft (raw, json)
Hash identifier: K/w5EXB7YfE1vPIuCXEFoEmSOVr9U3+LTElxcoildeI=
Subject key identifier: A4:E5:C6:85:F4:87:C9:96:AE:AF:E2:D4:E7:5A:3B:9F:A5:B6:6E:10
Authority key identifier: 9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
Certificate issuer: /CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Certificate serial: 019896A56C9043476BCCCC150AA3D2568D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
Manifest number: 1625
Signing time: Mon 11 Aug 2025 01:01:20 +0000
Manifest this update: Mon 11 Aug 2025 01:01:20 +0000
Manifest next update: Tue 12 Aug 2025 01:01:20 +0000
Files and hashes: 1: ny83TJpzj63o-FDKq11507kARYQ.crl (hash: f7YlfENqWPtT0nqMXPca4QiqpPNnJSUqYLb5eWGxbHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:6c:90:43:47:6b:cc:cc:15:0a:a3:d2:56:8d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Validity
Not Before: Aug 11 01:01:20 2025 GMT
Not After : Aug 12 01:01:20 2025 GMT
Subject: CN=a4e5c685f487c996aeafe2d4e75a3b9fa5b66e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:51:b4:42:7f:c1:b0:8d:8b:cd:8b:47:ed:
ee:c5:a2:1c:88:90:83:c4:c5:36:13:c0:fa:03:f8:
c3:fc:e3:9f:0a:c4:0f:1d:c2:d7:05:5b:18:bf:6a:
3b:a2:50:7b:82:3e:c6:62:6d:1a:c6:b7:25:7b:2d:
52:6a:03:5e:e3:2f:76:b7:7c:8d:fb:4a:f4:45:65:
6a:b0:08:3f:5a:78:ab:73:25:83:d1:1d:78:49:44:
ba:c2:a8:0a:53:f0:89:3c:02:dc:4e:6c:af:bb:46:
2e:c7:ff:7e:49:90:14:b8:af:a5:a5:e4:cf:1b:7f:
3a:b5:97:46:16:d3:aa:95:ce:6f:d7:ad:97:e0:2d:
71:4c:93:7e:93:e2:5e:a2:e3:8d:b9:cb:ad:9e:62:
74:e5:ba:6b:af:7d:56:82:e4:9d:79:17:b1:13:67:
e5:34:21:e7:52:8a:11:8e:d1:49:6e:0c:1b:4a:1f:
42:9a:2d:43:56:ac:27:74:63:9c:ed:70:29:45:ed:
f7:5f:07:f3:28:1c:28:04:1b:70:73:25:2a:53:5d:
b3:75:a2:e0:03:83:34:57:1e:a2:dd:28:9d:08:17:
69:55:26:c6:f8:5b:2c:93:7e:6b:65:e9:0f:94:05:
06:f4:31:e5:e4:87:47:4e:fc:62:72:c6:52:86:87:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E5:C6:85:F4:87:C9:96:AE:AF:E2:D4:E7:5A:3B:9F:A5:B6:6E:10
X509v3 Authority Key Identifier:
keyid:9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c6:89:69:b7:4b:de:3e:e2:80:5d:b8:40:ce:90:3d:fa:d0:
ca:44:88:57:2e:d3:c8:7d:20:e3:11:6b:0b:e0:5c:86:24:68:
96:df:a2:18:f3:1a:f3:3a:88:3a:8c:92:fd:d8:ca:36:99:1b:
04:21:07:23:b4:02:80:a6:84:e2:ad:60:99:05:7a:18:d4:56:
3b:18:a7:3d:74:30:ea:bb:13:74:65:0e:99:af:85:5d:a8:af:
dd:7b:a6:6e:c2:0e:70:4e:b3:f5:32:14:ef:2b:5c:e2:6d:ad:
55:d7:99:13:96:3b:92:43:72:f4:5a:1d:51:4a:a6:35:04:5a:
32:7c:b8:96:78:f5:94:52:a8:06:82:87:78:98:9f:5c:8c:d5:
0d:7c:74:03:8b:e3:2f:29:25:26:c7:bb:a9:2b:41:18:01:f1:
d2:c7:2e:d1:3a:0c:3e:e1:b9:47:40:f0:f3:fa:ca:7d:3b:84:
25:fc:d8:e0:39:0f:ad:50:89:0e:cd:71:b4:34:82:c9:7e:76:
6e:bb:2c:7a:1b:64:c9:b2:0a:ff:9d:66:1c:b0:ea:23:88:ba:
ce:96:10:5b:35:85:d7:4c:ab:a7:ff:cd:c8:b4:54:58:20:ba:
4c:1d:68:92:e8:de:13:ed:02:c5:86:69:eb:ba:a4:eb:4f:9e:
c3:86:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:30 2025 by rpki-client