Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: ipPoT5Ycw6P7fCeqMY+cfY5ZzxCc4HF81VFQYFeZ5H4=
Subject key identifier: AE:30:2B:66:E4:00:D8:A3:4B:40:9B:69:7F:D0:D6:56:0F:67:43:3F
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 01989147AEA9BD2859F2AFEBEC0175FC8FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 092C
Signing time: Sun 10 Aug 2025 00:00:50 +0000
Manifest this update: Sun 10 Aug 2025 00:00:50 +0000
Manifest next update: Mon 11 Aug 2025 00:00:50 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: SYHAAgGCcxWbSwVGHNdPMax2e0rsKtC6fbzCPz0U1hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:ae:a9:bd:28:59:f2:af:eb:ec:01:75:fc:8f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: Aug 10 00:00:50 2025 GMT
Not After : Aug 11 00:00:50 2025 GMT
Subject: CN=ae302b66e400d8a34b409b697fd0d6560f67433f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:2f:c8:9d:1e:90:44:5f:e3:82:62:d4:a2:
ea:4b:9a:8d:c7:76:ab:1e:af:b5:5d:85:fe:d7:16:
89:63:d7:b0:b0:36:20:98:1b:63:52:eb:00:7c:9e:
16:96:fc:d8:8c:76:4e:f7:fc:30:3c:43:f4:9c:22:
69:f5:d1:be:58:c3:dd:4c:be:d3:75:45:96:a2:ab:
6b:34:58:c1:fb:7d:39:9f:9e:4e:2b:b1:ad:4a:7f:
3d:ae:8f:67:fd:49:e8:c6:98:6b:95:7f:af:07:1e:
4c:0d:a2:f4:1d:fc:12:3f:2d:b8:92:1d:33:bf:24:
cf:59:6f:a4:69:06:07:e6:b0:04:0e:d9:bf:ab:da:
91:28:dd:da:37:8f:a8:4c:50:65:f7:37:e7:c7:1b:
f0:63:0f:7c:36:f0:92:25:e0:9d:2e:ca:eb:cb:b7:
20:59:74:e6:33:22:03:f7:cd:0d:c4:4d:d8:f4:42:
45:85:7d:2c:2b:39:39:86:0a:fb:53:d6:cc:a0:1f:
b3:f2:76:62:29:9b:2e:3e:95:ce:c0:32:64:0f:d2:
59:20:99:c1:8d:00:46:6d:9f:e3:58:85:93:c4:46:
07:d9:31:d0:a2:59:39:d5:cd:c1:a0:db:67:53:24:
97:d9:a7:3a:3f:f0:5c:af:aa:c2:12:19:f5:bd:d6:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:30:2B:66:E4:00:D8:A3:4B:40:9B:69:7F:D0:D6:56:0F:67:43:3F
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:30:85:34:b9:ed:06:7a:66:f0:8c:54:fe:d9:56:04:62:7d:
1c:12:9d:3c:20:32:9c:10:14:9c:41:c8:95:33:93:55:e9:4f:
77:00:4e:30:e2:8b:a9:ba:97:34:9e:02:e6:ce:35:c8:4a:be:
04:13:32:1c:8c:48:cc:e5:ec:07:ef:f2:de:e5:41:f6:20:5d:
c0:fa:8b:95:27:5d:b3:a4:03:7a:db:b2:13:ff:d9:49:3f:56:
93:1b:ba:ef:6b:c2:94:6a:9a:e8:da:b5:25:93:73:08:d2:01:
87:b6:b6:60:2d:59:92:a6:0e:04:f5:97:3b:b3:99:30:c4:13:
6c:2c:1f:c7:f8:98:c3:d7:97:bc:c7:be:0e:b9:c2:9c:14:31:
6c:60:67:fc:58:7b:49:be:0d:db:7b:27:9b:34:77:44:ef:b5:
ab:58:e2:80:e6:23:51:90:7b:8f:ed:7c:01:94:8a:21:f3:53:
dc:9b:fd:8b:af:5f:84:6d:0c:a4:bd:ca:1e:3f:3e:b8:3d:01:
ed:62:fa:8e:43:34:0b:d8:cb:e3:b3:59:ef:39:51:06:c5:19:
99:47:17:16:75:55:31:0e:ea:28:14:05:47:56:25:42:58:80:
cd:48:bd:1f:d3:94:2b:f2:32:b6:92:e0:27:64:79:1b:ad:09:
9a:8c:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:37:55 2025 by rpki-client