Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File: nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier: 5k1DL3v5Wpe0c8krSRU9FD3YTDZOoQS9CCXCvgrjv2E=
Subject key identifier: 52:F2:E3:E6:BF:F0:B6:68:47:DB:18:41:68:29:23:CE:D5:FF:62:24
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial: 01987486FC82B14B658891CC6C75F8A4B42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number: 12F6
Signing time: Mon 04 Aug 2025 10:01:00 +0000
Manifest this update: Mon 04 Aug 2025 10:01:00 +0000
Manifest next update: Tue 05 Aug 2025 10:01:00 +0000
Files and hashes: 1: T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa (hash: RdeAevZDp8XmGqqAvK8gJZd85NjETWsjIIExe3sxUXY=)
2: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: wMo6/T9j/kCXppfvcTtzsLFZ9mJ8vLogfcyUHYmp9pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:fc:82:b1:4b:65:88:91:cc:6c:75:f8:a4:b4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
Validity
Not Before: Aug 4 10:01:00 2025 GMT
Not After : Aug 5 10:01:00 2025 GMT
Subject: CN=52f2e3e6bff0b66847db1841682923ced5ff6224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:7f:b4:7c:a9:d2:01:e8:d1:c0:a9:4e:3c:
f8:f1:2e:e4:f6:5a:55:fe:ee:c0:1f:a4:83:be:0d:
7d:a2:73:86:c0:ff:be:a4:24:d3:31:1e:73:50:d5:
99:32:59:9b:2e:93:4e:a6:b5:99:83:45:b3:ca:16:
db:72:33:e9:bd:79:f9:1c:27:c2:72:a1:71:5a:fb:
f0:cf:61:ef:af:f6:32:ad:33:33:36:94:ea:22:7d:
8a:3b:87:bf:36:e9:ec:44:08:ae:44:8e:c6:5f:fe:
9b:0d:e5:6f:55:45:2c:eb:1e:00:fa:b7:4f:8b:ba:
4f:2c:00:89:65:1a:75:b4:be:99:d7:76:34:65:be:
cd:01:77:51:d0:26:3c:da:d9:3f:55:23:40:aa:3f:
85:06:a8:a4:b9:f0:e4:97:41:d6:39:cf:2d:2b:e6:
a3:d5:3b:a2:02:1c:ce:cf:f3:fe:d3:b1:0f:14:16:
e7:65:b7:0f:e1:ac:2c:67:9d:c4:80:c5:b7:f9:ae:
24:df:f9:ef:6e:cc:7c:11:09:5b:e6:f5:99:cc:41:
24:18:7c:28:ff:ab:7f:d1:c6:5f:f5:69:46:1a:9b:
80:ab:91:a9:93:35:ed:4a:84:2a:10:ef:60:6c:2f:
b5:12:37:aa:1d:de:74:44:97:15:0a:00:2d:ce:45:
d4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F2:E3:E6:BF:F0:B6:68:47:DB:18:41:68:29:23:CE:D5:FF:62:24
X509v3 Authority Key Identifier:
keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8a:64:10:5c:f8:34:a5:a6:81:ba:01:b6:4e:16:39:08:60:
04:f9:62:83:73:bc:3b:08:24:a1:e0:79:29:5d:04:f8:1a:43:
7b:be:a3:a6:c9:6a:4c:8a:6d:72:c2:ec:0f:b2:ef:f2:52:39:
ab:76:1e:dd:ff:8b:77:a0:f9:a4:04:24:3d:58:fa:65:3c:2e:
aa:97:0d:ba:42:2e:74:3a:66:21:04:6b:7f:e6:03:4e:58:18:
11:1f:9f:a2:e5:ef:9d:47:97:de:6b:d7:3d:99:9b:91:bd:8a:
86:e5:51:d2:a5:3a:10:26:28:6b:98:69:6d:3f:c5:c7:fb:d7:
5c:b8:51:b4:e8:2f:e3:42:cc:cd:75:a6:61:a7:0e:ff:c5:64:
b3:3a:1a:79:59:71:4d:2b:8f:22:f8:db:61:24:37:e3:8c:9b:
c6:e7:9a:de:54:3c:82:89:d0:9c:09:c9:d9:66:3d:8e:fd:3d:
07:4c:04:d4:9c:41:2d:e3:6e:9d:85:fd:76:32:31:38:40:a6:
60:67:55:16:21:a1:87:92:d6:7c:ef:bc:49:76:46:c9:c4:27:
26:32:94:0d:db:0d:c5:64:d7:6e:1d:73:ce:9f:4a:63:34:4e:
a8:8c:93:ae:1f:4d:67:6c:dc:54:bd:25:03:1d:26:14:bc:2c:
02:77:05:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:48 2025 by rpki-client