Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier: 7bmLsputzH5jCdnXIGlJlj4h3nyYYXDhQJJEnkhvCRU=
Subject key identifier: 81:47:D8:B6:30:1D:E4:5D:3B:3C:92:C7:C1:3A:8C:F3:61:20:3C:BB
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial: 019A7149BDD16A91D5DB3A76EB2EA8C0704A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number: 07B8
Signing time: Tue 11 Nov 2025 05:00:49 +0000
Manifest this update: Tue 11 Nov 2025 05:00:49 +0000
Manifest next update: Wed 12 Nov 2025 05:00:49 +0000
Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: UVSkZlYLwpF3ubxv0M6xdoZW3EvxqDgD9mUocIcSm8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:bd:d1:6a:91:d5:db:3a:76:eb:2e:a8:c0:70:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
Validity
Not Before: Nov 11 05:00:49 2025 GMT
Not After : Nov 12 05:00:49 2025 GMT
Subject: CN=8147d8b6301de45d3b3c92c7c13a8cf361203cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:d9:7a:83:5a:4a:42:0c:c8:42:04:a9:95:
52:87:20:58:4b:35:dc:ac:61:eb:f7:ff:21:c4:91:
a3:f3:93:70:04:5b:4b:bd:93:9b:09:f9:00:73:b4:
23:b8:61:b9:cf:f5:3f:4a:16:ad:0c:d2:5d:bf:1f:
cb:55:2e:1a:e9:8e:a9:5c:dc:27:c9:51:90:26:0f:
da:5a:62:67:d4:70:ea:fc:dd:3c:bf:08:0f:5b:10:
21:58:68:1e:c4:d0:a9:ac:4a:f5:7c:1d:fd:f0:68:
d5:84:30:aa:5f:a8:f9:1b:05:b6:d0:ec:39:f5:14:
4b:1d:7a:7f:91:1f:6c:f8:82:ba:bd:66:24:29:c2:
ca:a2:18:a6:55:d8:a1:07:49:a4:4f:4f:2d:50:c9:
d6:ad:00:12:bb:22:8a:6e:c1:61:73:a5:e0:2e:44:
16:08:68:81:fc:75:04:d0:2b:2e:17:b0:1f:62:72:
f5:c8:0e:bd:9e:20:1c:88:5b:b3:fd:65:66:e3:95:
bf:5c:3b:fc:74:27:a3:5d:8a:4f:da:8b:e6:c5:35:
c3:c0:33:92:3c:1d:14:87:5c:72:b8:ab:ff:1e:62:
68:e4:2a:79:5a:fd:cd:e5:37:f0:d9:4e:3e:3e:54:
cb:c5:27:08:ed:ee:17:91:b7:84:55:e9:21:c4:7d:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:47:D8:B6:30:1D:E4:5D:3B:3C:92:C7:C1:3A:8C:F3:61:20:3C:BB
X509v3 Authority Key Identifier:
keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ac:9d:78:69:f9:9b:db:c3:62:c1:78:a6:08:2d:e4:12:a2:
41:24:c5:11:18:23:87:62:7a:e5:3a:50:e5:5c:05:b7:82:01:
82:70:a5:da:4c:ae:4a:27:4d:40:cb:01:25:a4:fc:cd:8c:8b:
eb:53:8e:85:0e:44:71:3f:66:03:41:bd:35:4b:33:34:b5:16:
f5:01:f5:9c:81:68:2f:08:a9:62:e3:08:ed:1d:5e:3a:ab:34:
96:5d:5d:cb:e1:28:9a:16:4c:90:e3:e5:81:4d:43:60:96:d1:
60:95:fd:8e:35:cc:2e:ec:57:2b:cc:c7:d8:8b:6a:b9:10:6c:
52:41:6f:99:ef:ba:3b:0e:4f:3f:30:63:19:0f:ad:f8:d7:aa:
46:48:8c:87:96:17:a4:d1:86:d2:5f:d8:90:50:08:50:d8:4f:
28:21:52:ef:2f:10:52:91:96:28:67:ba:9c:31:c4:23:e4:f8:
7e:95:a9:97:06:9a:df:d5:8d:0b:a7:af:4c:29:84:0e:ed:6b:
09:f5:08:53:e6:90:80:a3:d4:12:04:27:f1:6f:2f:d1:e1:de:
41:48:37:b5:06:cd:a1:75:e1:99:c0:29:d5:64:6f:68:31:70:
79:56:29:9b:fe:5c:65:ce:97:22:70:ed:e3:73:d6:a2:b8:78:
ca:6e:a6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:22 2025 by rpki-client