Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: qwTfhJkpb2rDtztuMM4COcCK4p1nbyalBtz4g7iy3Ko=
Subject key identifier: 46:50:4F:92:37:4C:54:BA:8C:DB:29:CB:E8:DE:54:53:D5:B6:00:33
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 019892C97C23C6747BF7F7E68EA1C808C5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 0ED5
Signing time: Sun 10 Aug 2025 07:02:14 +0000
Manifest this update: Sun 10 Aug 2025 07:02:14 +0000
Manifest next update: Mon 11 Aug 2025 07:02:14 +0000
Files and hashes: 1: VuAVCD-mhoc5i9vtP0A_gPbk1w8.roa (hash: js4ojfLf5VJc1gb3AG5cMspDXL3JZYEKqGj/N4sAQU8=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: wD/T/W5eax1++HWH9UuELoNkonqbT/cA3oj/KirBBkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:7c:23:c6:74:7b:f7:f7:e6:8e:a1:c8:08:c5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Aug 10 07:02:14 2025 GMT
Not After : Aug 11 07:02:14 2025 GMT
Subject: CN=46504f92374c54ba8cdb29cbe8de5453d5b60033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:17:5f:95:a7:c3:41:6b:df:75:f8:b1:a6:
38:08:18:d3:00:02:ca:25:ba:68:a2:97:28:d8:f8:
18:c1:86:8d:38:54:37:82:18:be:e8:54:c8:f8:e9:
f4:f3:03:d8:09:ff:d1:17:10:63:2a:70:b0:58:12:
6d:91:0e:6f:b8:00:f5:a1:71:9e:b9:7b:b1:cc:39:
5b:f7:97:d7:fe:da:d7:2c:59:3f:17:86:61:16:5a:
6d:82:02:4d:ca:01:51:7d:69:7d:11:21:db:e0:be:
b4:a6:c2:c0:04:1b:e0:70:c2:8c:53:b4:bf:7f:3a:
f7:a2:55:3d:51:c5:41:4d:9d:bf:7b:0d:7b:34:8c:
8b:c9:a9:ec:77:c4:f2:26:58:69:ee:15:56:d7:12:
d1:37:e0:52:c3:0b:f5:4b:08:d0:3c:d7:60:fe:c8:
15:4a:42:25:22:e5:d0:fa:ab:51:31:cf:d8:ea:18:
4e:ea:55:42:e9:05:f8:a8:d6:b8:c7:3a:55:58:2c:
13:0f:4e:c8:53:06:77:af:8b:be:d7:e6:ee:08:8e:
c4:b9:d4:c7:09:97:f8:cb:64:13:48:a9:27:be:77:
51:6c:3a:08:b2:67:01:69:66:37:08:3e:30:46:3f:
91:0d:f7:14:4d:fe:00:d2:86:81:8d:d5:59:f5:2a:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:50:4F:92:37:4C:54:BA:8C:DB:29:CB:E8:DE:54:53:D5:B6:00:33
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c3:72:8f:fe:5f:36:4c:06:47:71:fd:41:6d:1a:a1:86:2b:
4d:a2:01:d5:94:fd:49:de:9d:15:77:f0:09:9c:ad:0e:15:8f:
d6:f1:c2:c5:59:5a:5b:63:d9:b4:8f:21:f0:39:a2:cd:0e:e2:
46:65:fa:29:ac:7b:ea:c6:9b:d5:13:39:c7:5e:63:29:ac:1a:
46:93:05:74:86:38:73:85:bd:09:7d:48:68:3f:9c:f0:8b:83:
1b:d1:b5:28:e0:fb:c2:74:3b:08:8f:7f:c1:13:9b:ec:19:90:
02:39:7c:19:a7:76:c7:45:74:76:cb:80:a1:e9:31:70:92:55:
3e:12:9e:8b:ed:cd:53:0f:db:42:2f:74:e5:33:b0:80:50:48:
b5:de:d4:db:0d:20:8d:0f:76:91:08:da:7b:7c:89:a4:f1:8a:
0c:9d:9f:b7:68:7b:5d:67:77:d3:39:a1:be:85:cd:92:f3:17:
15:24:bc:54:0b:2f:b3:74:b6:34:c0:66:e4:0a:d8:5e:32:b6:
1b:44:34:d5:e1:92:2c:f5:6a:f7:1b:29:2a:b2:e6:bb:69:00:
fe:6b:86:9a:cd:c1:b3:5b:e1:64:e5:a6:55:ae:72:11:b2:f7:
f4:98:42:62:c9:31:f6:e6:cc:e2:2a:52:32:0f:6a:ea:74:0b:
78:c7:b5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:46:39 2025 by rpki-client