
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
File: nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft (raw, json)
Hash identifier: 38URdtulscEwsLMqCLqvcQVXjqHpfkOSmaHMj6mpRU4=
Subject key identifier: 25:3A:49:AC:BC:1D:61:38:D4:D5:4A:DC:C9:33:E3:58:CA:7E:69:2C
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial: 01988242CA1141F33680BA37AF3529C8FECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
Manifest number: 0F44
Signing time: Thu 07 Aug 2025 02:01:11 +0000
Manifest this update: Thu 07 Aug 2025 02:01:11 +0000
Manifest next update: Fri 08 Aug 2025 02:01:11 +0000
Files and hashes: 1: nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl (hash: M/1PtjM2xx9HXRYlqRuP3MXfaBt9l5lNvMNB7fiZHUo=)
2: xk36of5GcRMNZGUJt-_5r_QctTo.roa (hash: BbMVXEvQwTUOBV0n4W+iUw7Na6Uh7I6Smkrm6hqGQWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:ca:11:41:f3:36:80:ba:37:af:35:29:c8:fe:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Validity
Not Before: Aug 7 02:01:11 2025 GMT
Not After : Aug 8 02:01:11 2025 GMT
Subject: CN=253a49acbc1d6138d4d54adcc933e358ca7e692c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:ed:31:34:59:38:83:98:98:89:32:fc:a8:
bb:b2:64:fe:af:c8:67:af:2c:c4:dc:17:55:2b:ef:
18:69:83:86:2a:be:09:a0:5f:f4:ba:2c:90:31:13:
8d:b1:90:fc:04:eb:fb:ec:53:a5:df:2b:fb:0b:5c:
3b:6c:af:0d:45:6b:69:e2:f8:8f:03:86:88:7c:42:
63:73:ab:ba:0c:cd:10:f6:c2:e7:e5:e3:66:52:69:
b2:0f:76:d7:87:18:13:b2:38:d4:33:03:f2:b8:0e:
67:01:14:6a:a7:b9:ba:79:c6:71:54:91:4a:19:21:
c8:92:e9:7e:fe:7b:81:4e:e2:67:bb:93:68:52:00:
b9:c3:1e:4a:d3:d2:aa:f8:95:36:f1:e7:c3:fd:22:
dd:ae:40:0d:9e:b9:2f:43:95:96:4f:a1:83:bf:15:
37:3a:75:7c:ad:24:a8:00:c6:0c:2f:ff:29:c8:05:
6a:1a:29:87:44:8a:78:4a:ff:5e:c1:97:04:a6:06:
5a:70:6b:a3:c5:80:ed:83:73:a8:6a:35:e3:35:7e:
30:e5:a5:aa:73:16:ba:d0:4f:df:de:26:6e:3d:cf:
4c:4d:4c:4f:ee:50:53:b9:25:4a:93:e3:fa:82:54:
af:a5:c9:30:40:0a:f0:26:14:59:c7:72:5a:da:5a:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:49:AC:BC:1D:61:38:D4:D5:4A:DC:C9:33:E3:58:CA:7E:69:2C
X509v3 Authority Key Identifier:
keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1c:02:d7:75:c6:10:15:23:4c:63:6e:c9:22:12:76:f0:37:
09:70:aa:01:3b:c8:8e:32:7d:ca:07:db:ee:c6:a9:8e:dc:c3:
57:6e:4c:66:db:c7:4a:62:a9:94:ce:cc:ca:83:82:59:0b:1e:
8b:4f:ab:d7:88:5b:1e:0d:a8:71:f4:18:37:07:9d:75:bc:56:
88:1d:d7:7d:51:d5:1d:3d:0a:29:89:fd:6e:96:09:4f:fb:ed:
86:3e:49:59:b0:49:db:86:3a:15:10:1c:43:28:66:03:ec:42:
47:d1:c6:a5:38:26:7e:bd:cf:32:49:0f:31:d8:45:68:d6:f2:
f6:83:b3:dd:dc:1f:fb:9c:1c:92:13:dc:c7:06:19:db:a7:91:
5c:38:6a:20:5f:53:13:a3:d5:8a:a4:ac:1f:bf:55:10:7f:c0:
fe:f2:f7:da:d4:94:5f:91:62:3b:e9:57:12:42:2e:7f:47:0d:
0c:28:5c:fe:13:bb:25:c9:99:98:6e:b4:8f:93:0e:ab:6b:c3:
09:c5:c7:b4:1c:1d:28:f6:9e:59:56:6c:0b:df:08:7c:6a:d3:
fe:75:36:c8:fc:37:9a:53:44:0c:79:6e:26:ff:7e:b6:a4:34:
69:72:ea:6a:01:54:79:91:79:e0:5c:c6:d1:9a:3c:4f:f1:c3:
ad:32:8d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:20:21 2025 by rpki-client