Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier: hfE3MDwaCBhWKktbhXrZA8gYE/6+QY2YKHkgzzVFBh0=
Subject key identifier: 64:F7:16:18:81:54:0D:F8:DC:A4:54:C1:01:89:14:D5:B0:7E:63:1E
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial: 019A7226689F92006758A1CC1BF6BC60ED27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number: 040D
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: XWtfwdUl4KxmRs1MxiA1IATUcfRjUt+RVIp/DIRNAss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:68:9f:92:00:67:58:a1:cc:1b:f6:bc:60:ed:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=64f7161881540df8dca454c1018914d5b07e631e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:92:32:34:ce:e6:a0:52:d4:f0:3a:3e:2b:
44:62:a7:30:e2:36:d5:35:46:22:e6:64:0c:d8:36:
36:77:55:f0:54:3a:44:a2:2e:d2:db:e8:59:57:df:
52:2c:10:2d:91:8c:ae:62:7c:0a:99:4f:76:16:da:
2a:53:64:ab:05:df:29:98:c5:59:3e:77:42:e6:d0:
17:cc:a3:4e:08:11:42:17:b3:4c:0d:8a:30:31:0b:
fe:17:c5:f0:1a:57:37:2b:78:34:78:13:bc:90:b2:
e2:b2:4c:74:c6:ab:07:43:6d:ec:b5:c7:57:a3:4e:
c8:2a:ef:fe:01:48:34:e2:11:c2:8c:26:0a:82:89:
c6:87:f5:b3:d4:6b:db:d9:e8:87:d2:c1:9d:00:26:
0b:1a:15:84:78:ce:f4:83:7e:2b:d7:c3:bd:64:f1:
56:1f:66:3e:88:14:43:cc:39:ad:68:58:2e:cc:58:
16:d8:0c:8d:f0:3c:7c:8e:74:35:78:e6:09:02:35:
c7:e8:52:fd:54:1c:cf:0d:7c:54:73:f3:90:9b:52:
14:b2:06:df:99:fb:b0:02:c6:d2:2a:8a:25:70:12:
2c:b4:ba:28:7c:e8:05:e4:80:4c:12:8b:24:f7:20:
91:60:37:e9:3f:da:58:50:24:fa:d4:e2:68:63:00:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F7:16:18:81:54:0D:F8:DC:A4:54:C1:01:89:14:D5:B0:7E:63:1E
X509v3 Authority Key Identifier:
keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fb:ea:99:e3:92:6e:e0:e2:9c:b4:bf:ae:03:30:6e:65:dd:
47:9f:71:17:7e:31:0e:a8:7f:d7:eb:37:f8:f4:d7:00:f4:1c:
c2:e1:0a:8c:2e:c4:4d:9f:a7:0a:b9:a4:12:a7:b0:b8:dd:45:
09:a6:bc:20:2f:0b:e8:03:b0:2c:bf:8a:55:bf:16:bc:59:9a:
4a:a3:b0:52:f5:b9:f1:df:9f:48:29:f3:11:b2:9d:69:2c:b2:
01:f5:cc:d7:d7:b0:10:71:fc:57:2a:09:10:9f:3c:f8:10:e0:
83:0c:26:af:2d:c0:20:28:bb:56:c2:ef:fb:0a:86:0b:21:f0:
e7:c7:36:41:95:6e:79:7e:91:dc:6d:ee:c6:97:16:1a:9e:ba:
0d:c3:81:38:c1:58:21:c1:d9:d1:a3:97:1f:67:c3:e4:01:73:
77:d7:e7:d0:54:93:c9:6d:cb:04:c5:20:ee:3f:e6:d4:c6:7f:
62:51:ea:d1:11:41:5e:1f:6a:0e:48:92:c7:8d:69:d3:0b:a6:
d9:5d:5a:a0:28:74:68:14:b1:a3:86:df:a2:a5:93:16:1d:b2:
41:e1:36:e6:e1:97:ff:c2:bb:92:61:2a:aa:38:94:29:f1:77:
a2:aa:9c:a2:bf:49:0d:fb:ee:5c:94:d8:9e:67:76:77:b2:e0:
df:2c:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:49 2025 by rpki-client