Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
File: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft (raw, json)
Hash identifier: yA73aJbEGu8gzAnOPRJA9zMV4I6ZlX3Um7Ohb8bEEH8=
Subject key identifier: 8B:EF:BD:89:75:7B:97:25:75:73:86:A7:37:2C:FA:A6:EC:F0:60:22
Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
Certificate issuer: /CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Certificate serial: 019889C53B5E55F64CDB25A04DD0ED73BE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
Manifest number: 0306
Signing time: Fri 08 Aug 2025 13:01:01 +0000
Manifest this update: Fri 08 Aug 2025 13:01:01 +0000
Manifest next update: Sat 09 Aug 2025 13:01:01 +0000
Files and hashes: 1: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl (hash: Q/95jNIzA9f3Z4vfNjROKAqgayQNaV2btRkk8hOnmuo=)
2: dbO_KM950SVoV4qdoDfieNWIw0s.roa (hash: DCE7AE8Wo5HEULV6TjwRejnJ6LMRCD866TcEBq5yg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c5:3b:5e:55:f6:4c:db:25:a0:4d:d0:ed:73:be:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Validity
Not Before: Aug 8 13:01:01 2025 GMT
Not After : Aug 9 13:01:01 2025 GMT
Subject: CN=8befbd89757b9725757386a7372cfaa6ecf06022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:92:ee:55:af:e3:4c:b8:47:48:e2:6e:5d:
60:8b:65:0c:1d:0e:9e:b0:20:26:b7:e0:54:62:26:
38:fb:d7:51:9a:b5:e3:e9:63:12:bc:8a:e8:b9:9f:
48:c1:82:c8:e8:a0:73:39:33:86:cf:90:11:ee:9d:
4b:fd:1d:8f:2e:e8:52:dc:9a:59:8a:d3:62:3f:2b:
a7:0f:61:f8:b4:03:b7:6e:df:1e:ef:82:cb:aa:86:
6d:64:0d:12:52:d3:ce:c7:c3:f1:de:57:ec:7d:8c:
ab:bb:ae:91:eb:26:c4:9a:77:b5:38:9d:5c:eb:29:
74:cd:ec:78:8c:7e:df:33:86:80:af:46:c2:f9:67:
d9:6f:1e:a4:f8:51:14:8e:7d:8c:56:a8:c2:87:c7:
2b:f5:cb:83:d0:c9:f7:aa:00:70:dd:76:f9:3e:9d:
26:bf:31:51:55:3c:d2:b2:9a:a0:b4:89:ba:e5:bb:
e5:79:8b:f1:1e:67:e7:5a:b4:7c:4a:5c:cf:37:18:
28:de:ba:2e:c3:3a:a5:70:2d:f2:45:5c:cd:b9:d9:
08:a2:b5:c6:8f:5f:f1:a9:f8:b2:0a:a1:08:4c:b8:
00:50:80:98:0b:c1:1a:a3:db:18:65:0e:d3:56:c6:
9f:fe:85:d5:53:8a:5d:12:0f:ea:28:43:d6:69:b9:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EF:BD:89:75:7B:97:25:75:73:86:A7:37:2C:FA:A6:EC:F0:60:22
X509v3 Authority Key Identifier:
keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6a:db:5b:f4:b8:3b:4a:f3:d7:eb:7b:0f:e9:2d:36:15:c8:
97:08:da:4f:c8:4d:1c:de:97:3c:b7:10:88:23:80:ef:5f:6a:
3e:30:dd:3d:ef:4c:02:ce:f5:7c:0f:42:60:6c:fd:44:93:f1:
e9:3c:82:f5:05:3b:63:f3:03:55:1c:24:ee:f5:bb:5b:91:96:
3d:e2:e2:10:a5:f3:55:91:48:f2:14:3f:0f:05:77:7c:d8:e3:
09:d1:f4:d4:3b:6b:d1:64:1b:0a:3c:df:5b:03:0e:75:81:48:
13:31:89:a4:38:55:ac:f0:72:a8:f9:c4:f0:57:90:cd:1a:de:
0b:8c:bc:40:8e:4f:37:50:56:02:69:c0:be:a1:d0:ff:32:23:
5a:5b:f1:6e:98:4f:3b:05:8f:4d:43:fb:dd:7f:a6:43:6f:fb:
0e:29:d8:f1:e4:6d:80:73:cd:1e:0a:64:0e:13:e2:16:c0:6a:
98:de:87:06:d0:c6:54:fc:75:be:63:99:73:cf:70:24:f0:ed:
11:6d:52:57:0b:d2:0a:74:27:6b:0d:91:43:7b:22:f2:53:19:
6e:95:6d:b8:05:d8:43:a0:57:3e:b6:9e:17:a3:a2:81:18:e3:
37:84:e5:73:3d:ac:0c:b4:d2:37:8f:1a:5a:43:ef:c3:b6:82:
e1:84:e0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:12 2025 by rpki-client