Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
File: nphC_lRy5id-eSB2x9OHcALi4lE.mft (raw, json)
Hash identifier: vz81vkl+Cd4a6EowuT7lQ7DtCVNZH9J3I3kC9YoNMFc=
Subject key identifier: 8F:9A:EC:EE:47:41:99:7E:1A:5F:1F:67:1C:66:B2:58:B1:9E:DB:C7
Authority key identifier: 9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
Certificate issuer: /CN=9e9842fe5472e6277e792076c7d3877002e2e251
Certificate serial: 019A725C75A32393EA5BB08FCEBF2043E56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
Manifest number: 021E
Signing time: Tue 11 Nov 2025 10:00:53 +0000
Manifest this update: Tue 11 Nov 2025 10:00:53 +0000
Manifest next update: Wed 12 Nov 2025 10:00:53 +0000
Files and hashes: 1: nphC_lRy5id-eSB2x9OHcALi4lE.crl (hash: ptLrzqBUXIFmxUAom4yjE4vqPzFgnq8/TXEIDiBGZl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:75:a3:23:93:ea:5b:b0:8f:ce:bf:20:43:e5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9842fe5472e6277e792076c7d3877002e2e251
Validity
Not Before: Nov 11 10:00:53 2025 GMT
Not After : Nov 12 10:00:53 2025 GMT
Subject: CN=8f9aecee4741997e1a5f1f671c66b258b19edbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:cf:5a:53:23:00:8f:67:bc:01:3f:e2:c8:
9d:3f:88:e9:ff:82:36:c1:12:36:34:38:86:8a:b2:
e1:fc:2e:71:c6:27:0a:af:c4:8e:98:14:9f:a5:ed:
2d:0d:c5:ee:e3:c7:70:e9:5a:11:07:f1:e8:b7:12:
b9:f2:59:fb:df:fd:2b:73:48:bd:94:91:6b:32:00:
e8:be:2a:88:8c:63:33:ae:e7:3c:9e:c8:d7:bb:b8:
c5:fd:22:22:37:25:59:29:e0:c8:d4:58:8a:5f:f9:
bb:18:2f:91:63:06:5e:b5:25:13:cc:ef:13:19:2b:
6a:e5:dd:78:91:07:86:77:40:c3:67:90:04:8e:fb:
9a:ee:1e:b4:f3:55:90:8c:ae:9c:4b:46:0f:2e:c2:
b4:2d:e2:73:6a:2a:66:c4:e0:37:89:0c:ea:29:36:
ab:d1:40:ae:56:0f:66:8b:de:0e:76:15:de:2d:27:
40:8b:d4:b9:f9:4f:8d:3c:87:b2:e2:a5:2c:37:65:
04:eb:fe:73:9c:19:3b:82:5f:74:73:4c:ac:2b:1d:
c5:44:0c:3f:be:4e:9b:8e:11:80:0a:01:34:18:0a:
2e:f1:c9:4f:f1:1e:9e:c2:88:83:27:f8:18:a6:16:
a1:3e:e2:cd:be:9a:d3:f7:07:b9:04:02:52:a5:0d:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9A:EC:EE:47:41:99:7E:1A:5F:1F:67:1C:66:B2:58:B1:9E:DB:C7
X509v3 Authority Key Identifier:
keyid:9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f6:66:54:dc:01:3c:4e:7c:0b:c4:df:71:bd:b0:b4:d4:ac:
68:fe:b8:6c:4f:72:82:7c:97:88:57:01:8b:16:66:a9:57:4b:
c7:57:5a:38:e5:3a:90:17:7a:08:38:93:8c:68:06:7a:17:b3:
98:e3:a6:63:84:fb:ff:86:44:c4:72:66:a3:da:78:ed:0f:6f:
e2:e8:95:7b:4f:5b:f5:be:94:b2:ce:fe:89:d8:45:49:4f:53:
ee:cb:89:57:02:14:9d:e4:ea:13:8f:df:dd:41:f6:1f:37:50:
6c:2e:d4:c6:44:a7:42:4a:37:5f:f3:2f:38:3d:b7:db:77:d5:
5e:86:a4:75:db:17:8e:bf:08:e4:62:7b:5a:10:02:61:28:7c:
eb:7f:1e:29:4a:7d:42:05:b0:28:e8:a9:81:b4:09:f0:cc:42:
66:73:b2:92:0a:f1:fc:92:7b:5a:2a:43:2c:65:c9:8a:e5:cc:
07:df:32:a0:61:bd:45:9c:39:58:fe:da:74:2d:e1:0b:06:08:
39:53:9c:03:4e:0e:da:97:1b:ae:ac:6b:9d:77:44:6f:67:6e:
8f:24:a8:a0:5f:e8:9e:88:ad:f3:e5:19:c4:15:98:23:a9:2e:
57:8a:ca:76:db:73:46:63:a9:94:dc:e6:0e:15:52:9c:f2:24:
76:17:ce:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXHWjI5PqW7CPzr8gQ+VvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTg0MmZlNTQ3MmU2Mjc3ZTc5MjA3NmM3ZDM4NzcwMDJl
MmUyNTEwHhcNMjUxMTExMTAwMDUzWhcNMjUxMTEyMTAwMDUzWjAzMTEwLwYDVQQD
Eyg4ZjlhZWNlZTQ3NDE5OTdlMWE1ZjFmNjcxYzY2YjI1OGIxOWVkYmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I7PWlMjAI9nvAE/4sidP4jp/4I2
wRI2NDiGirLh/C5xxicKr8SOmBSfpe0tDcXu48dw6VoRB/HotxK58ln73/0rc0i9
lJFrMgDoviqIjGMzruc8nsjXu7jF/SIiNyVZKeDI1FiKX/m7GC+RYwZetSUTzO8T
GStq5d14kQeGd0DDZ5AEjvua7h6081WQjK6cS0YPLsK0LeJzaipmxOA3iQzqKTar
0UCuVg9mi94OdhXeLSdAi9S5+U+NPIey4qUsN2UE6/5znBk7gl90c0ysKx3FRAw/
vk6bjhGACgE0GAou8clP8R6ewoiDJ/gYphahPuLNvprT9we5BAJSpQ2p0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+a7O5HQZl+Gl8fZxxmslixntvHMB8GA1UdIwQY
MBaAFJ6YQv5UcuYnfnkgdsfTh3AC4uJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBoQ19sUnk1aWQtZVNCMng5T0hjQUxpNGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84ZjExYjMtODljNS00YjExLTljMDkt
M2EwN2Y5MjI0ZTIxLzEvbnBoQ19sUnk1aWQtZVNCMng5T0hjQUxpNGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS84ZjExYjMtODljNS00YjExLTljMDktM2EwN2Y5MjI0ZTIx
LzEvbnBoQ19sUnk1aWQtZVNCMng5T0hjQUxpNGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPZmVNwB
PE58C8Tfcb2wtNSsaP64bE9ygnyXiFcBixZmqVdLx1daOOU6kBd6CDiTjGgGehez
mOOmY4T7/4ZExHJmo9p47Q9v4uiVe09b9b6Uss7+idhFSU9T7suJVwIUneTqE4/f
3UH2HzdQbC7UxkSnQko3X/MvOD2323fVXoakddsXjr8I5GJ7WhACYSh8638eKUp9
QgWwKOipgbQJ8MxCZnOykgrx/JJ7WipDLGXJiuXMB98yoGG9RZw5WP7adC3hCwYI
OVOcA04O2pcbrqxrnXdEb2dujySooF/onoit8+UZxBWYI6kuV4rKdttzRmOplNzm
DhVSnPIkdhfOpQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:39 2025 by rpki-client