Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
File: nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft (raw, json)
Hash identifier: F/sjVrHMFOLSo2xLdkfS2xfjayuxgcIfknjbSbgQyMY=
Subject key identifier: FB:61:33:71:15:70:D0:BF:BA:08:B0:1C:4F:4B:63:90:A3:13:53:4B
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial: 019A51BED9B5D3FADBF75A8DA3B62698D770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
Manifest number: 1034
Signing time: Wed 05 Nov 2025 02:00:53 +0000
Manifest this update: Wed 05 Nov 2025 02:00:53 +0000
Manifest next update: Thu 06 Nov 2025 02:00:53 +0000
Files and hashes: 1: nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl (hash: T+NooSGxDPD+ZIbSFE+CLQ1x/nuRobWYIzVF/jSgT1A=)
2: xk36of5GcRMNZGUJt-_5r_QctTo.roa (hash: BbMVXEvQwTUOBV0n4W+iUw7Na6Uh7I6Smkrm6hqGQWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:d9:b5:d3:fa:db:f7:5a:8d:a3:b6:26:98:d7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Validity
Not Before: Nov 5 02:00:53 2025 GMT
Not After : Nov 6 02:00:53 2025 GMT
Subject: CN=fb6133711570d0bfba08b01c4f4b6390a313534b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:a0:2f:19:3a:e4:19:56:0f:a5:29:73:34:
71:e6:73:18:0e:00:8e:f9:ee:33:bc:3b:5e:51:7a:
f1:c5:8d:99:f1:e4:cd:00:72:59:13:08:9d:bf:7a:
de:72:cb:23:10:93:ac:38:d8:bf:a8:b3:b7:a3:3f:
97:15:a9:26:eb:f6:60:ce:93:b5:c9:8c:d3:c1:c8:
da:46:e4:c1:88:ca:dc:c1:3d:e9:e2:ca:d8:3a:81:
50:b1:58:08:d3:58:df:9f:e1:d6:2d:4a:28:81:ee:
14:5b:ea:42:3f:a4:04:0b:93:b0:80:6a:45:cd:14:
0c:c2:d2:e7:96:7d:0c:4b:47:8e:05:08:9c:3c:71:
f0:0e:36:62:b4:b4:0d:df:44:42:40:ef:e8:30:a1:
80:ba:30:92:59:ac:04:b6:e0:84:e7:5d:fb:68:ed:
09:86:e9:38:00:6f:62:40:29:b9:a7:fd:a7:c2:93:
5b:7e:2c:1a:da:54:73:6b:e4:e8:f0:c0:20:0d:4c:
8d:b9:cd:b8:10:ce:cb:4f:9d:e9:d3:d8:82:d5:9d:
ec:ea:8d:24:4d:05:70:6b:83:ce:43:41:9b:7d:ff:
1f:89:04:30:73:0a:de:4e:36:2a:bf:bb:c9:19:ea:
15:66:f3:cf:76:8f:84:49:00:c2:9e:f6:f0:55:ee:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:61:33:71:15:70:D0:BF:BA:08:B0:1C:4F:4B:63:90:A3:13:53:4B
X509v3 Authority Key Identifier:
keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7e:9b:96:43:89:75:cd:79:53:b7:46:3d:d6:ac:3e:a2:a1:
e3:e8:0b:39:94:05:49:fb:73:8c:68:54:f7:0a:e3:a6:20:3d:
de:79:95:12:73:3b:fc:de:a3:0a:4e:ba:b7:19:11:9f:70:8c:
94:68:98:3c:ab:70:c0:8f:52:0e:cf:b2:d8:39:dd:79:e1:8f:
b8:87:24:fa:a0:1b:3e:f4:a8:e1:17:b5:d1:86:0d:66:bb:7d:
07:ae:51:3b:71:66:26:61:eb:1c:55:9d:90:3c:45:82:92:ef:
a3:ab:3b:47:9d:7f:82:88:2e:40:28:88:ad:e2:60:81:38:af:
6c:02:f6:0e:5b:22:4e:c6:51:4f:c6:aa:74:02:02:0e:86:c2:
2c:a1:80:84:03:13:61:69:4b:4d:ff:e5:8a:27:9a:90:62:b8:
e4:f1:2b:b2:91:50:3a:ec:fd:22:51:8b:c1:28:b6:b1:fd:66:
27:14:d7:26:0e:ff:35:48:e8:9c:eb:55:91:f2:80:59:a0:bb:
3a:d6:6b:1d:0a:2d:c8:e6:d0:38:42:e3:25:50:36:56:0f:98:
a7:59:77:22:a5:bb:ce:3c:50:c9:bd:12:09:d1:66:36:9b:b7:
5e:7a:21:0f:b2:27:4f:f0:c5:c9:8d:ae:65:5f:67:42:e7:fe:
54:19:b1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:39:10 2025 by rpki-client