Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
File: nYy-lCn5RJlbPJNL2vZglrURSNQ.mft (raw, json)
Hash identifier: 8mqNdsa/XiGYy9sI3gM6gPWvd30yQ3JKr7GfFQXWAXA=
Subject key identifier: 75:0F:F4:F2:4D:55:09:9A:24:A0:1F:68:D5:9D:CB:FC:BF:A6:A7:60
Authority key identifier: 9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
Certificate issuer: /CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
Certificate serial: 01989F03DA553032B8E5631F9D7470A5B555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
Manifest number: 057A
Signing time: Tue 12 Aug 2025 16:01:26 +0000
Manifest this update: Tue 12 Aug 2025 16:01:26 +0000
Manifest next update: Wed 13 Aug 2025 16:01:26 +0000
Files and hashes: 1: nYy-lCn5RJlbPJNL2vZglrURSNQ.crl (hash: 5FhsQSmAnLA99lXrdBNC8UObDhCOewcjybWpH4NUWdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:da:55:30:32:b8:e5:63:1f:9d:74:70:a5:b5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
Validity
Not Before: Aug 12 16:01:26 2025 GMT
Not After : Aug 13 16:01:26 2025 GMT
Subject: CN=750ff4f24d55099a24a01f68d59dcbfcbfa6a760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:66:23:44:8e:c5:b3:d1:08:8b:ea:ad:ce:
2d:6e:f8:0b:55:ca:55:61:83:59:63:ae:7a:e9:2b:
18:59:c0:00:fb:d8:ec:47:16:bb:b7:06:fa:b0:46:
bc:f1:60:d4:04:75:48:ab:0f:97:cc:cc:31:4d:07:
a0:ca:db:43:24:58:bc:5e:ef:54:d8:bc:06:83:26:
17:c4:f3:db:1a:cb:d1:67:fa:69:48:e0:6c:07:ef:
5e:91:75:6c:5e:87:ec:01:36:61:d8:fe:3c:12:f8:
d5:e3:3c:45:7e:38:83:b0:96:93:92:d3:59:2c:22:
a5:fe:c4:9d:a0:3c:7e:84:9a:9c:38:53:9e:eb:ae:
8a:eb:da:96:31:0d:e4:56:be:ab:47:81:fe:68:81:
f8:40:0f:45:19:8c:cc:7a:a2:66:74:4f:0b:0f:c5:
e4:0f:04:ed:23:0f:27:74:c2:4f:95:21:a6:03:11:
cc:cd:82:94:a6:36:d9:4a:c6:f9:a6:d4:1e:0f:40:
48:83:aa:2d:04:1a:33:a3:88:9e:56:9b:d4:95:2d:
db:fb:17:38:44:9e:2f:85:d6:a9:81:d9:c5:ed:e2:
e4:ec:43:2d:5e:35:34:4a:ff:ae:ba:a1:ec:c2:ad:
81:09:85:42:42:d8:a3:03:ce:08:9b:a2:c5:f0:cd:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0F:F4:F2:4D:55:09:9A:24:A0:1F:68:D5:9D:CB:FC:BF:A6:A7:60
X509v3 Authority Key Identifier:
keyid:9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:06:d0:4d:28:b1:86:fc:d4:9e:ac:ff:d5:e2:c6:6d:5a:4d:
41:be:c4:13:ff:f1:40:22:f3:c6:eb:ca:44:91:7f:5e:58:33:
f6:a3:98:1d:80:3a:7f:fa:99:00:af:02:3e:b0:22:3f:fa:76:
b6:37:91:a8:db:87:dd:b9:25:03:a8:17:6b:19:a8:2e:90:7f:
1a:d9:c8:55:f2:6c:9e:33:9b:b6:2d:eb:59:68:c5:61:85:c1:
d0:74:9b:60:64:e4:62:70:79:9b:a5:9e:25:06:6d:57:7e:72:
75:08:5c:e3:5c:ee:d6:5b:f9:c2:fc:72:17:d9:9a:93:8d:0c:
6d:21:dc:fe:bf:60:28:75:54:a9:1f:1d:8a:ff:9b:aa:e5:f7:
14:bf:32:c1:ef:cd:c1:85:70:ed:fc:5a:14:5d:fe:51:59:1d:
8b:f5:53:a9:9a:d5:15:b6:7d:ee:e9:71:73:d5:48:19:d8:19:
cb:69:c2:7c:48:3f:f2:be:ca:26:0f:79:bf:1a:63:de:34:b9:
a4:bb:ae:dd:66:6c:83:de:53:23:e7:8a:5a:d6:ab:18:ca:c8:
40:69:63:34:71:45:93:d6:a1:91:2e:01:4e:9f:43:7d:8e:9e:
58:51:31:03:e6:44:1b:7c:b1:57:d3:9c:9b:fb:19:3b:14:a7:
65:88:cc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:59 2025 by rpki-client