Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: 9ZLvb3TA0Gg8o/mCcW90Fsxg4IWJTj/hZdyYSkhPQT8=
Subject key identifier: 8D:0E:C9:54:C3:5D:3F:9D:50:C0:2D:27:E6:E5:84:B9:18:6B:D1:8B
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 019A54C0322DF4E2C66093BD33127311E75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 01AF
Signing time: Wed 05 Nov 2025 16:01:13 +0000
Manifest this update: Wed 05 Nov 2025 16:01:13 +0000
Manifest next update: Thu 06 Nov 2025 16:01:13 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: y7RZgdua3/3O8fBBxvMSsFPeuxeQiMgmXusdUw+AUFI=)
2: tT9egEPZfOW0iJxsepbGA_UgQjg.roa (hash: nJcChZ33Fi+iAdXvZOyTBjHIrvr+XcKOSiVdHqUG+CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:32:2d:f4:e2:c6:60:93:bd:33:12:73:11:e7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Nov 5 16:01:13 2025 GMT
Not After : Nov 6 16:01:13 2025 GMT
Subject: CN=8d0ec954c35d3f9d50c02d27e6e584b9186bd18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:17:32:e5:5f:eb:e9:e1:49:3e:27:26:49:
3f:6a:36:5e:2d:f1:e1:97:01:d4:87:79:c5:de:bb:
9f:70:9e:3f:26:da:9b:6a:4a:a6:fc:b0:1c:aa:c1:
7f:98:c3:c2:ff:2b:ff:f0:b8:8a:83:1a:00:8c:f0:
41:3a:c7:15:62:bc:98:d4:cc:4d:5a:88:df:1b:17:
b4:2a:d4:27:b7:15:08:65:6f:13:c7:dc:db:9a:a4:
d0:ef:2b:b2:c6:41:73:08:23:28:c1:f2:d1:9d:0e:
b2:6d:1c:7d:57:7d:88:48:f4:7a:fd:9d:ca:72:7f:
c2:3d:9f:53:ae:1f:94:93:92:1b:73:b3:44:7c:3e:
24:ee:e1:eb:af:3a:df:3a:52:95:a7:9d:fc:c7:c4:
78:bf:76:d0:b1:53:dc:f7:9e:5e:64:fe:a9:56:e3:
4c:53:78:45:e5:2f:b6:71:54:61:de:66:b9:77:43:
b2:46:c0:b8:b6:96:ba:59:f8:39:3f:e6:8f:32:ca:
51:5e:f3:db:39:3a:7f:b5:55:db:aa:fe:60:f8:fa:
39:05:a6:31:a4:6d:60:59:53:61:0a:14:56:91:29:
fa:ed:e3:63:00:d5:15:62:34:28:9b:5b:dc:c7:f9:
a9:88:4c:3a:2a:0a:c0:da:09:e9:da:a3:86:68:8a:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0E:C9:54:C3:5D:3F:9D:50:C0:2D:27:E6:E5:84:B9:18:6B:D1:8B
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:87:35:38:48:95:8c:3c:5f:be:a8:01:10:43:9e:9e:72:4d:
c5:13:e5:64:32:8b:21:d3:6d:21:77:76:8f:d9:5b:f2:e5:05:
2c:fa:07:cc:77:80:80:05:b1:cf:bc:83:26:fa:36:35:08:f2:
e6:19:70:ed:74:c0:5d:38:65:8e:ac:3b:1d:f4:db:b1:1d:e2:
c6:83:a8:e9:f4:93:be:94:c2:68:14:dd:c9:b8:9c:c7:e4:a3:
1d:45:36:50:36:9f:45:a3:5d:e1:f2:14:14:5c:6e:79:b2:c0:
c2:71:3a:ce:40:7b:c4:2e:61:34:31:a9:1e:43:b5:34:3c:4a:
08:5d:16:98:50:80:c1:28:cb:26:b1:02:71:e2:3e:7d:40:51:
59:98:76:72:fb:c3:a9:2c:c2:04:db:00:71:14:8d:3f:d3:7c:
28:58:1d:00:6a:81:98:c0:e8:71:e0:ab:81:87:9e:b0:24:d6:
78:f8:b2:76:2e:bc:80:5a:56:b9:0e:a6:fd:fb:4d:6d:4e:cb:
6e:fa:dc:9b:ed:d2:42:4b:5c:d6:e7:79:41:c9:e0:c4:b3:7c:
34:a0:96:64:81:4f:32:39:9c:3b:90:9f:b3:12:fa:78:01:39:
ba:e3:28:e7:b7:f1:20:04:be:79:17:5c:3c:2c:53:b6:62:12:
93:37:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:32:11 2025 by rpki-client