Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File: nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier: WUwUjM8oFov1kFvMtbRDdHG2rEg/D3SNeExbyrR/DcY=
Subject key identifier: C6:6E:91:95:0F:D6:A6:DA:24:2D:21:88:1C:6D:B5:CA:AF:47:25:69
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial: 01976FD0D74EB6D0BBF718921A66550EB089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number: 126F
Signing time: Sat 14 Jun 2025 19:00:46 +0000
Manifest this update: Sat 14 Jun 2025 19:00:46 +0000
Manifest next update: Sun 15 Jun 2025 19:00:46 +0000
Files and hashes: 1: T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa (hash: RdeAevZDp8XmGqqAvK8gJZd85NjETWsjIIExe3sxUXY=)
2: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: 7K+beUMQmR8rI7LB/bU+iWBm/JRAvKe6kBHBY9bktL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:d7:4e:b6:d0:bb:f7:18:92:1a:66:55:0e:b0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
Validity
Not Before: Jun 14 19:00:46 2025 GMT
Not After : Jun 15 19:00:46 2025 GMT
Subject: CN=c66e91950fd6a6da242d21881c6db5caaf472569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:3b:6d:f4:c3:18:67:e0:8f:88:27:07:59:
bf:6b:14:d2:1b:c7:47:15:0b:7f:32:e7:9f:82:84:
22:88:91:90:b5:72:47:71:75:1b:5b:2c:f7:6f:69:
e7:1b:01:da:08:88:84:1b:7d:3f:5e:4e:19:7f:97:
e5:d8:ad:54:de:7f:5f:2e:32:e7:dc:eb:13:5a:c5:
8d:a2:1c:95:ba:25:2c:d6:6c:42:85:28:ec:18:a1:
a9:1c:f5:e3:a2:4b:b4:d0:fd:91:72:ff:fe:a8:74:
26:d1:55:ca:d3:f7:c6:fa:c1:7f:e1:67:c8:bf:3a:
b1:f5:d8:5c:54:63:33:c5:37:1a:b6:41:b3:5f:bb:
cf:c3:6c:4a:71:77:61:bf:9a:d1:03:aa:eb:ec:3a:
68:13:91:f1:0e:24:88:fd:7f:a3:00:03:7c:31:09:
27:4f:06:aa:01:1d:d3:30:ee:95:fe:07:b8:f0:0c:
2d:1c:45:66:e9:67:db:f6:d8:85:b5:16:74:97:bc:
1f:5a:9a:89:a7:18:d6:61:ce:80:5a:9e:be:92:bf:
87:dc:47:a9:aa:c2:a1:dc:02:fa:52:f8:30:f2:94:
20:da:09:b5:f6:a2:08:ae:82:ca:ec:87:ff:bc:dc:
bc:33:67:27:f7:44:74:4e:43:05:6c:60:0b:b4:bc:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6E:91:95:0F:D6:A6:DA:24:2D:21:88:1C:6D:B5:CA:AF:47:25:69
X509v3 Authority Key Identifier:
keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3a:0d:54:25:8d:47:36:d3:21:09:15:e5:91:ed:a2:0c:bf:
70:8a:c4:14:35:72:70:26:65:35:82:b6:2a:e1:99:cc:5f:30:
75:88:54:01:21:76:38:90:2f:8b:8a:7e:4f:12:79:a5:83:2e:
c6:6f:e7:b1:39:0d:d5:80:41:00:f1:16:d3:7f:e6:6e:c8:a0:
15:5e:ad:04:bb:9b:b9:75:af:ab:29:bb:ae:14:ce:dc:5d:74:
14:2b:85:fc:aa:48:cf:79:25:e3:9c:5c:7c:8b:fa:48:a4:d5:
5a:7c:57:16:65:a9:1a:d1:af:04:59:c2:f5:5b:6a:25:c2:8b:
97:90:97:19:9c:b8:6d:fe:2a:68:3a:5c:d7:e7:bd:14:07:ba:
0e:66:98:23:e0:76:51:91:87:c9:67:24:5a:68:8d:eb:54:ef:
7f:3b:b9:17:a2:8f:a7:38:59:c4:e0:c3:12:55:11:04:64:11:
36:30:36:0c:e9:02:a8:0c:8e:cc:f0:d2:16:84:2a:4c:b1:b8:
68:25:0e:21:01:c2:20:25:e1:74:1e:ac:d7:02:0a:29:d7:c4:
1a:f9:e7:0b:a7:3d:7a:28:66:c1:11:49:e7:da:b9:d9:f9:77:
f4:b8:34:be:33:51:b2:8d:6a:74:15:e8:ca:16:da:8b:85:75:
11:db:c3:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0NdOttC79xiSGmZVDrCJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjg0MTExNzAwNDkyYWIwYmUxMTBlODIxYTFiY2U3M2Y4
MGE1NjUwHhcNMjUwNjE0MTkwMDQ2WhcNMjUwNjE1MTkwMDQ2WjAzMTEwLwYDVQQD
EyhjNjZlOTE5NTBmZDZhNmRhMjQyZDIxODgxYzZkYjVjYWFmNDcyNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPc7bfTDGGfgj4gnB1m/axTSG8dH
FQt/MuefgoQiiJGQtXJHcXUbWyz3b2nnGwHaCIiEG30/Xk4Zf5fl2K1U3n9fLjLn
3OsTWsWNohyVuiUs1mxChSjsGKGpHPXjoku00P2Rcv/+qHQm0VXK0/fG+sF/4WfI
vzqx9dhcVGMzxTcatkGzX7vPw2xKcXdhv5rRA6rr7DpoE5HxDiSI/X+jAAN8MQkn
TwaqAR3TMO6V/ge48AwtHEVm6Wfb9tiFtRZ0l7wfWpqJpxjWYc6AWp6+kr+H3Eep
qsKh3AL6Uvgw8pQg2gm19qIIroLK7If/vNy8M2cn90R0TkMFbGALtLz2jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZukZUP1qbaJC0hiBxttcqvRyVpMB8GA1UdIwQY
MBaAFJ8oQRFwBJKrC+EQ6CGhvOc/gKVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yZDBlOGYtY2Q4YS00ZDM4LWFjNTEt
NmY1MjNmOTYwMDczLzEvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yZDBlOGYtY2Q4YS00ZDM4LWFjNTEtNmY1MjNmOTYwMDcz
LzEvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlToNVCWN
RzbTIQkV5ZHtogy/cIrEFDVycCZlNYK2KuGZzF8wdYhUASF2OJAvi4p+TxJ5pYMu
xm/nsTkN1YBBAPEW03/mbsigFV6tBLubuXWvqym7rhTO3F10FCuF/KpIz3kl45xc
fIv6SKTVWnxXFmWpGtGvBFnC9VtqJcKLl5CXGZy4bf4qaDpc1+e9FAe6DmaYI+B2
UZGHyWckWmiN61Tvfzu5F6KPpzhZxODDElURBGQRNjA2DOkCqAyOzPDSFoQqTLG4
aCUOIQHCICXhdB6s1wIKKdfEGvnnC6c9eihmwRFJ59q52fl39Lg0vjNRso1qdBXo
yhbai4V1EdvDSg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:57:30 2025 by rpki-client