Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
File: cNySeAi5pn58uhunTvtb9sEsiVs.mft (raw, json)
Hash identifier: myphrWPB9TQGtGb3N2qxCsc0itR9UouVlHDowEYYjGE=
Subject key identifier: C9:99:8E:48:BF:8B:E8:8E:F5:6C:6F:EA:EB:86:E2:C9:8D:28:27:C7
Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
Certificate issuer: /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Certificate serial: 01989FA7BFE0B6F5243C00695E1BBF7B2634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
Manifest number: 162A
Signing time: Tue 12 Aug 2025 19:00:27 +0000
Manifest this update: Tue 12 Aug 2025 19:00:27 +0000
Manifest next update: Wed 13 Aug 2025 19:00:27 +0000
Files and hashes: 1: BAJtDqJxaWUqQAfiueye7uuRaiw.roa (hash: xliJwPehY40wkTea7xdHZ3Ii3nZae+NEE66sFETvyTA=)
2: cNySeAi5pn58uhunTvtb9sEsiVs.crl (hash: PyQ/iwjjZbyeDVsxVpnsjCZXKY4KamO2jeRuyIGorps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a7:bf:e0:b6:f5:24:3c:00:69:5e:1b:bf:7b:26:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Validity
Not Before: Aug 12 19:00:27 2025 GMT
Not After : Aug 13 19:00:27 2025 GMT
Subject: CN=c9998e48bf8be88ef56c6feaeb86e2c98d2827c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:5c:cc:30:ca:cd:52:e2:7e:e3:d3:5a:c2:
70:ee:ef:91:98:cf:45:05:73:75:cc:de:f3:1a:c5:
e3:95:12:d1:e0:69:62:e7:c1:e1:c0:4e:ab:19:f2:
6d:e9:79:b8:26:53:21:86:b7:56:04:e9:d7:45:8a:
a5:1d:60:1a:70:bc:42:88:27:23:93:3d:c3:14:b9:
62:8a:75:cd:f1:8d:d8:af:fd:6b:d8:75:15:3c:59:
49:33:75:9a:8b:14:a9:7d:74:1a:5c:e7:8c:47:af:
99:3f:68:81:1b:e4:5b:3b:84:05:5a:95:5c:97:29:
9a:0e:de:54:8a:79:10:2c:ac:99:82:90:0f:e1:2e:
d6:19:36:97:85:cb:6f:22:6c:39:13:fa:fb:91:e9:
b4:43:09:7e:ca:6f:ad:52:14:9e:75:66:cf:8b:71:
71:c7:a2:01:66:1d:da:d1:fc:93:44:67:6e:6d:13:
7d:ec:94:91:e8:f9:73:cd:3e:25:62:15:cf:a4:91:
d3:64:b0:d8:9b:fc:08:46:1e:71:4a:98:97:88:c7:
58:2a:bb:33:e5:29:b7:b5:5d:74:ed:31:71:b4:9d:
e1:34:63:e2:58:bc:9e:55:00:30:fd:78:80:74:4e:
cc:07:70:aa:3b:71:60:a0:82:fa:f9:9f:e5:7d:51:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:99:8E:48:BF:8B:E8:8E:F5:6C:6F:EA:EB:86:E2:C9:8D:28:27:C7
X509v3 Authority Key Identifier:
keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e1:dd:02:84:72:98:81:90:6a:21:1e:2c:83:68:68:1d:2d:
bf:38:79:22:79:9c:79:a9:ae:37:47:b4:c2:53:eb:69:c1:26:
7a:56:df:cf:da:00:23:81:cf:43:05:4c:4c:f5:42:a5:06:32:
df:32:a0:4a:fb:56:7f:95:27:0d:af:e8:34:72:d0:43:0b:0c:
5c:b3:d0:ac:fc:bd:86:6c:4e:25:be:c3:4a:a7:94:19:d2:37:
41:7d:aa:2e:85:a3:c3:5b:12:14:48:30:58:f1:b9:f9:34:0f:
99:8f:1d:d9:63:36:8e:e2:b3:33:8d:29:46:0a:73:29:40:d9:
95:af:07:e8:f0:e0:79:9b:c9:25:cf:3a:2d:cc:49:01:3e:04:
6a:da:17:e4:d3:ed:84:9c:d0:da:d8:d5:a6:32:66:12:ef:40:
b6:db:33:cf:7c:ad:2d:cf:51:10:45:fe:68:4b:bb:a9:8d:af:
6c:7c:98:3d:fc:ef:71:9b:33:87:1e:a5:83:3d:4f:9f:15:a4:
0b:9b:2e:ef:48:98:d9:e3:2a:c5:94:e2:5e:bf:62:56:09:d8:
3d:83:40:31:05:a5:95:a1:f9:6a:35:18:47:97:5e:8e:09:7e:
a2:0d:76:30:e4:d2:bf:06:86:78:06:13:3c:c1:5b:9a:c3:d0:
e1:14:29:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:17 2025 by rpki-client