Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
File: nTXgMBWeVx-qvTebUsHZoa77FEQ.mft (raw, json)
Hash identifier: pcV0wElFTUWddvZwklKow+hh1cnzFySXI+84WZ4wEdM=
Subject key identifier: 0A:CE:94:37:71:7E:71:DD:4F:5D:EC:07:41:F1:6A:22:48:97:5A:46
Authority key identifier: 9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44
Certificate issuer: /CN=9d35e030159e571faabd379b52c1d9a1aefb1444
Certificate serial: 019A729356C14C80F9DFDB645DB1E0EAEE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
Manifest number: 01A8
Signing time: Tue 11 Nov 2025 11:00:49 +0000
Manifest this update: Tue 11 Nov 2025 11:00:49 +0000
Manifest next update: Wed 12 Nov 2025 11:00:49 +0000
Files and hashes: 1: nTXgMBWeVx-qvTebUsHZoa77FEQ.crl (hash: tfWnGjmKVrWGlgdrEDvkbaiTvWHXEuamY1fQPq4P9lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:56:c1:4c:80:f9:df:db:64:5d:b1:e0:ea:ee:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d35e030159e571faabd379b52c1d9a1aefb1444
Validity
Not Before: Nov 11 11:00:49 2025 GMT
Not After : Nov 12 11:00:49 2025 GMT
Subject: CN=0ace9437717e71dd4f5dec0741f16a2248975a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:f2:88:e1:fc:f7:2e:75:79:d0:d0:22:cd:
d3:03:43:81:e9:ec:5b:96:59:99:26:bc:04:be:48:
8a:22:12:27:35:d4:e9:3b:27:5d:03:04:54:0f:4f:
4e:4d:8d:54:8f:e6:ad:c5:2e:04:63:a5:64:78:53:
0f:50:db:e4:ff:54:b0:6d:5e:40:41:81:c7:fa:e8:
2e:ad:f1:6f:9d:2d:c4:8b:71:65:12:55:e6:59:c8:
63:b2:4a:67:7b:66:49:c9:e6:01:ed:78:9e:4d:b7:
97:ca:6c:27:79:04:02:e2:7f:33:13:6b:ec:46:9f:
ba:73:5a:e7:7b:4e:fa:fb:38:01:77:9e:ad:f5:34:
cf:eb:4b:1e:94:1f:d3:49:60:ea:cf:ae:e0:d0:7f:
46:9d:85:57:47:a0:9f:26:42:88:80:c3:84:af:2b:
4f:e0:29:56:68:6d:3a:d8:58:9e:d2:37:4a:74:5e:
b8:71:b2:49:8a:9e:e1:e9:13:84:c6:c0:b1:b4:52:
8d:da:7a:ef:da:cb:0c:0e:9b:56:7f:45:8f:90:cf:
e2:93:e6:b7:4e:48:57:5d:8b:6b:f9:95:6a:c3:fb:
8e:8e:bb:61:ef:db:87:9d:29:c4:1c:28:e1:e1:0c:
65:b5:85:51:ff:81:f1:58:80:fe:5b:3b:ab:df:52:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CE:94:37:71:7E:71:DD:4F:5D:EC:07:41:F1:6A:22:48:97:5A:46
X509v3 Authority Key Identifier:
keyid:9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:05:46:20:a8:71:9e:86:59:eb:18:de:13:d9:86:12:78:36:
c5:b9:d3:68:7f:4a:12:f8:6f:a0:c6:64:d1:1f:cb:88:36:31:
5e:e0:da:00:60:ca:99:5e:05:39:69:6e:70:59:e2:40:ea:08:
77:ba:83:37:44:83:82:de:31:c7:8b:34:18:be:ac:96:7f:fe:
05:99:3f:b7:2a:c9:33:ee:19:20:77:50:2c:6a:86:cb:6a:79:
5a:1e:5b:73:93:fb:63:43:7d:3d:ec:53:02:ad:00:bc:33:5b:
d5:2f:a8:bb:47:a3:71:9e:cc:9f:8a:e1:81:82:3b:aa:ea:c3:
0e:5d:ab:78:21:e1:23:20:d2:a6:80:51:fd:df:1b:b8:82:18:
ea:3c:25:cd:af:f7:6c:88:86:38:f5:69:f1:dd:0e:ec:97:d6:
8e:f6:67:d1:6b:69:b4:22:ca:90:a1:f2:30:1d:3b:ef:9c:8e:
cf:85:04:26:00:8c:d4:e0:11:48:0e:cf:01:7a:c7:c5:21:25:
9d:bc:27:88:da:14:9d:14:08:f5:ac:3e:51:8b:1c:a5:07:f7:
0d:bd:a1:18:2c:2c:95:50:9f:63:6c:f0:e6:c7:ba:31:e1:2c:
d1:3f:e9:51:b1:42:13:b9:87:f7:5e:dd:ca:87:9b:71:85:87:
11:ba:c6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:35 2025 by rpki-client