Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
File: nphC_lRy5id-eSB2x9OHcALi4lE.mft (raw, json)
Hash identifier: OP8XZxI2L/uN8Bj1TGh3qzHTkKqAt/SUIJ+KQG0Dllw=
Subject key identifier: 9F:E7:F5:F2:1D:4D:1A:6F:C3:8E:20:58:EB:84:B2:09:CB:68:89:39
Authority key identifier: 9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
Certificate issuer: /CN=9e9842fe5472e6277e792076c7d3877002e2e251
Certificate serial: 0198481B6300A396891EEF9454235052F45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
Manifest number: FF
Signing time: Sat 26 Jul 2025 19:00:11 +0000
Manifest this update: Sat 26 Jul 2025 19:00:11 +0000
Manifest next update: Sun 27 Jul 2025 19:00:11 +0000
Files and hashes: 1: nphC_lRy5id-eSB2x9OHcALi4lE.crl (hash: M19PbracFW36NvokaG7RK+rgz8an9CJ2vlJIXvQFSkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:63:00:a3:96:89:1e:ef:94:54:23:50:52:f4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9842fe5472e6277e792076c7d3877002e2e251
Validity
Not Before: Jul 26 19:00:11 2025 GMT
Not After : Jul 27 19:00:11 2025 GMT
Subject: CN=9fe7f5f21d4d1a6fc38e2058eb84b209cb688939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:c0:1a:d4:ad:c4:94:79:a1:18:96:ae:1e:
38:38:d9:c0:b4:a2:91:43:33:fe:b8:73:43:72:16:
14:6d:46:f1:e8:cf:0a:20:50:63:b3:6f:89:f5:cf:
15:64:bd:d5:eb:56:d6:6f:9c:0b:ae:4f:70:59:f3:
1a:b1:05:84:ec:ff:48:49:54:11:01:a3:0c:6a:6b:
f5:85:4b:39:99:f6:49:5e:85:a8:ab:47:39:19:35:
06:00:a8:84:af:91:47:36:d5:78:d3:4a:52:93:b8:
52:99:9b:12:41:86:9e:70:f2:1b:39:8a:78:2f:cc:
f9:82:89:be:93:00:58:7b:5f:00:33:e2:96:43:af:
43:32:c5:6c:98:54:66:70:b4:a1:d3:d9:82:04:ef:
89:81:6b:1f:cf:89:35:b0:ae:e8:a7:8a:4d:b9:87:
ed:41:b4:b5:f7:0b:cc:ec:4a:b3:ca:09:f0:02:53:
4b:b7:60:e3:4b:81:96:f6:6b:a4:a9:3b:b5:2c:4a:
5b:46:7c:b8:68:74:4b:34:46:09:29:14:5c:a6:57:
a6:bf:2b:1b:8c:2b:c9:b9:c8:df:b5:01:4a:ca:a1:
c9:b6:ed:2a:e5:e7:29:27:32:07:38:73:5c:45:04:
f1:c2:19:25:5c:d2:9b:43:e3:3b:85:dc:06:90:98:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E7:F5:F2:1D:4D:1A:6F:C3:8E:20:58:EB:84:B2:09:CB:68:89:39
X509v3 Authority Key Identifier:
keyid:9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:69:2a:50:15:5f:98:42:3e:5b:9b:28:c9:54:d7:f2:ee:79:
09:94:15:09:09:98:63:9b:d8:06:a5:05:3c:78:53:a7:c5:0f:
f6:55:d4:49:14:36:e5:5f:0c:56:f9:9f:e6:eb:a9:f4:85:27:
bb:6d:83:d4:87:5a:47:fa:0e:8a:d0:1c:43:53:e5:58:24:b3:
b1:a6:40:f5:95:60:9a:c1:39:df:3e:b2:af:8b:90:db:17:9d:
e9:e5:f9:24:d9:d5:a5:59:a1:a1:25:bd:cc:1f:ad:8b:1e:ce:
59:c3:af:79:f0:9a:ca:cb:8a:81:c1:41:01:a2:f1:08:8e:c0:
70:e1:12:3f:19:ec:89:7e:13:d6:1d:01:89:e1:28:7f:89:ce:
3c:a8:75:b5:da:41:38:e9:84:89:09:e4:9a:b4:ac:dc:20:3f:
a5:59:76:bf:d1:d5:0c:da:42:5e:4e:cb:64:e5:03:91:70:66:
b7:43:ef:70:ec:99:c6:e3:47:f9:5d:2c:3d:61:81:67:34:b9:
16:02:93:48:3b:96:d5:2f:3f:57:ee:1d:94:8e:58:4d:4b:52:
0f:77:3f:71:33:aa:ab:5e:ac:ec:e9:b7:0d:2a:be:0b:9d:63:
a8:fe:02:55:23:b4:30:c2:53:b6:7f:f8:b5:fc:df:27:54:7d:
c1:7e:ac:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG2MAo5aJHu+UVCNQUvRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTg0MmZlNTQ3MmU2Mjc3ZTc5MjA3NmM3ZDM4NzcwMDJl
MmUyNTEwHhcNMjUwNzI2MTkwMDExWhcNMjUwNzI3MTkwMDExWjAzMTEwLwYDVQQD
Eyg5ZmU3ZjVmMjFkNGQxYTZmYzM4ZTIwNThlYjg0YjIwOWNiNjg4OTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmrAGtStxJR5oRiWrh44ONnAtKKR
QzP+uHNDchYUbUbx6M8KIFBjs2+J9c8VZL3V61bWb5wLrk9wWfMasQWE7P9ISVQR
AaMMamv1hUs5mfZJXoWoq0c5GTUGAKiEr5FHNtV400pSk7hSmZsSQYaecPIbOYp4
L8z5gom+kwBYe18AM+KWQ69DMsVsmFRmcLSh09mCBO+JgWsfz4k1sK7op4pNuYft
QbS19wvM7EqzygnwAlNLt2DjS4GW9mukqTu1LEpbRny4aHRLNEYJKRRcplemvysb
jCvJucjftQFKyqHJtu0q5ecpJzIHOHNcRQTxwhklXNKbQ+M7hdwGkJimXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/n9fIdTRpvw44gWOuEsgnLaIk5MB8GA1UdIwQY
MBaAFJ6YQv5UcuYnfnkgdsfTh3AC4uJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBoQ19sUnk1aWQtZVNCMng5T0hjQUxpNGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84ZjExYjMtODljNS00YjExLTljMDkt
M2EwN2Y5MjI0ZTIxLzEvbnBoQ19sUnk1aWQtZVNCMng5T0hjQUxpNGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS84ZjExYjMtODljNS00YjExLTljMDktM2EwN2Y5MjI0ZTIx
LzEvbnBoQ19sUnk1aWQtZVNCMng5T0hjQUxpNGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2kqUBVf
mEI+W5soyVTX8u55CZQVCQmYY5vYBqUFPHhTp8UP9lXUSRQ25V8MVvmf5uup9IUn
u22D1IdaR/oOitAcQ1PlWCSzsaZA9ZVgmsE53z6yr4uQ2xed6eX5JNnVpVmhoSW9
zB+tix7OWcOvefCaysuKgcFBAaLxCI7AcOESPxnsiX4T1h0BieEof4nOPKh1tdpB
OOmEiQnkmrSs3CA/pVl2v9HVDNpCXk7LZOUDkXBmt0PvcOyZxuNH+V0sPWGBZzS5
FgKTSDuW1S8/V+4dlI5YTUtSD3c/cTOqq16s7Om3DSq+C51jqP4CVSO0MMJTtn/4
tfzfJ1R9wX6s9w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:55:11 2025 by rpki-client