Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: fJyikq0XjqNCNjdPkbo44sYaH/Etfc/4or5KOa9/y64=
Subject key identifier: 64:11:0C:BE:13:E4:FF:BC:D1:53:9B:68:3D:26:F9:9E:FC:B9:F0:DE
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 01987B9D7166483A409D6413389BE73DDB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0C5C
Signing time: Tue 05 Aug 2025 19:02:52 +0000
Manifest this update: Tue 05 Aug 2025 19:02:52 +0000
Manifest next update: Wed 06 Aug 2025 19:02:52 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: MZbSni5w6LwGkHpWIot4RSU9HDiuOyjUGUmTtSw1yeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:71:66:48:3a:40:9d:64:13:38:9b:e7:3d:db:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Aug 5 19:02:52 2025 GMT
Not After : Aug 6 19:02:52 2025 GMT
Subject: CN=64110cbe13e4ffbcd1539b683d26f99efcb9f0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:21:2c:62:a0:9e:02:dd:2f:ff:a0:50:91:
e5:82:c1:07:78:fd:82:df:2d:0c:6d:be:f7:03:d6:
7f:7e:ec:9e:df:4c:ee:50:d8:c1:6f:8b:51:46:d3:
a5:07:36:8f:a3:dc:4f:f9:41:fe:a3:23:a3:b1:8b:
ea:12:cd:3b:21:84:a1:af:8e:46:b3:03:5e:91:d8:
18:95:4f:34:c6:5a:34:2d:54:f9:86:1a:89:d4:17:
74:c8:a9:f7:69:c8:f2:81:0d:6b:68:ec:82:6c:30:
02:b1:80:b3:39:13:c9:86:9d:bb:a2:ec:ed:8e:5e:
3e:39:4d:c8:df:22:45:fb:0d:82:f3:bf:8b:40:38:
07:6b:2d:17:d5:e8:eb:98:3e:7a:8a:92:20:bf:e2:
02:ad:3e:17:0e:0d:78:fa:b9:1e:88:fa:90:8c:ac:
dd:ed:eb:1f:a3:1f:ee:dc:e1:27:af:7a:67:55:f3:
a1:76:a3:7d:96:7a:7b:e7:bd:3f:8c:0c:bd:a1:5b:
55:95:e1:40:0f:a6:f3:27:3c:43:9c:fd:e8:43:dd:
fa:4c:f3:13:54:52:0c:4e:a8:e6:91:75:ec:2b:82:
f1:c4:12:02:12:ed:88:fb:95:37:b8:07:77:03:e8:
0f:b1:67:f4:10:67:3d:4a:0e:8d:bd:39:1f:fd:18:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:11:0C:BE:13:E4:FF:BC:D1:53:9B:68:3D:26:F9:9E:FC:B9:F0:DE
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5d:c1:7a:18:9b:94:42:93:a3:eb:61:0b:af:b9:4b:d4:68:
56:60:51:84:43:80:d8:f8:c4:c8:b0:54:34:82:1c:e0:ab:40:
d2:51:b4:a7:7e:92:05:27:41:cf:12:b8:17:34:8e:41:fe:be:
12:ac:11:6d:0f:ff:b5:d1:e0:86:c7:91:77:03:80:17:24:d1:
cf:21:bc:50:a0:ea:77:66:ed:7f:00:df:1a:6b:27:71:da:dd:
30:4d:8c:13:76:0d:36:bc:75:b3:d4:fd:02:33:a8:a5:87:21:
09:0f:2a:11:fb:fc:7c:59:4b:89:14:26:93:d8:8c:48:3a:25:
08:a5:ef:a0:8d:0f:2c:a4:a6:93:4b:d4:81:46:08:6d:16:db:
3e:39:48:8e:a5:8a:ef:07:36:6d:b6:55:15:5f:e2:11:1b:b9:
7d:85:c8:a6:5e:d9:fc:61:41:32:ac:35:c2:20:71:b2:cb:fa:
46:f8:fd:9f:05:88:c9:28:51:e1:32:5c:80:24:e7:1f:5a:6f:
fc:7b:b2:30:3a:82:09:b3:85:d3:37:0c:ec:a8:4d:db:0b:5d:
b2:1b:fa:f1:cc:b9:60:9d:64:ba:0e:bd:32:11:11:57:50:f3:
89:dc:91:63:63:d6:c6:db:e0:4f:e4:f5:b8:97:39:76:f8:09:
98:bb:23:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:31 2025 by rpki-client