Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: t1RGnA+5mtrE8Z/wGZW9oEx0QRKHHHZvlrxnGdkAfuU=
Subject key identifier: 3F:1A:F0:E3:A6:53:8C:C3:D6:B6:CF:90:4C:E2:17:52:5E:36:58:B9
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 019A73012C9C591335F6B71C3FBEA1782992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 116A
Signing time: Tue 11 Nov 2025 13:00:47 +0000
Manifest this update: Tue 11 Nov 2025 13:00:47 +0000
Manifest next update: Wed 12 Nov 2025 13:00:47 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: JIBfoUxQkXmUljpqS2M9qdSz/OnWYB3HowC1H7Gtv00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:2c:9c:59:13:35:f6:b7:1c:3f:be:a1:78:29:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: Nov 11 13:00:47 2025 GMT
Not After : Nov 12 13:00:47 2025 GMT
Subject: CN=3f1af0e3a6538cc3d6b6cf904ce217525e3658b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:c8:8b:ef:5d:0d:13:45:81:c5:ff:19:56:
64:b8:18:3f:71:db:6b:29:a7:3e:5d:d0:ca:6d:43:
58:1d:04:ed:20:cc:58:5a:0f:6b:1b:f8:5c:3c:11:
62:7e:88:ed:98:b2:ba:91:4e:58:dc:65:a0:62:a6:
d4:cb:6f:a0:1d:70:28:39:c9:27:05:15:f8:bf:66:
ec:c8:35:42:d1:89:8f:f2:15:21:11:18:c0:7b:a7:
85:2a:0a:08:d2:31:47:4a:6c:42:85:53:ee:59:72:
b3:0c:b5:be:83:7d:5b:7d:26:fa:29:63:27:97:33:
69:64:ab:5d:2f:dd:42:01:a4:63:64:78:55:84:00:
8e:5e:ec:b6:2e:fc:26:69:2d:ba:31:3b:39:25:ff:
24:47:b5:c7:49:9c:fb:4e:24:34:4d:e4:df:f4:af:
3e:ae:34:bf:6c:59:09:04:66:6f:94:9c:de:7a:6e:
4e:12:90:49:a8:f9:05:3c:95:df:4b:18:e4:9c:05:
48:c5:f5:f3:6a:04:8d:26:ed:c3:dd:9d:64:8b:b5:
4e:e8:ce:7f:c6:8e:7d:05:f1:e2:83:e3:f6:ca:e9:
75:16:d6:78:08:00:9d:e2:a5:38:e9:48:66:59:28:
ed:ea:07:52:4d:f0:49:69:94:43:1b:7d:0c:c5:4c:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1A:F0:E3:A6:53:8C:C3:D6:B6:CF:90:4C:E2:17:52:5E:36:58:B9
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f0:5f:7a:83:aa:ab:3a:52:eb:f1:66:95:20:9a:85:c5:b4:
05:f0:ba:41:9d:83:c9:d7:68:80:d9:11:50:b8:45:3d:25:89:
18:2e:ef:43:fe:b9:f4:95:ff:fb:84:62:1b:a0:2e:2b:68:51:
07:cc:b8:66:58:3a:bc:7d:20:f8:db:bb:37:27:76:48:96:4e:
2e:f0:dd:46:32:33:ed:a6:34:5a:8b:a3:27:8f:ae:25:79:1b:
19:d3:e0:e6:43:d9:f3:64:a3:e8:b1:d1:39:45:11:c4:60:e5:
6f:b5:be:d0:2d:93:4f:c0:e4:76:93:db:2f:da:84:69:b7:1c:
14:fa:ed:c2:16:d2:5e:ae:ae:64:0e:70:bc:c2:0a:3f:49:4b:
4d:96:41:ca:dc:aa:00:b3:7f:0b:07:3c:db:a9:36:4a:7a:eb:
24:af:5d:9c:80:7e:e4:8b:00:b7:67:9f:b3:5e:39:72:cd:9d:
63:66:ef:f3:d7:d2:89:8f:4e:2f:79:25:51:c4:f2:bc:84:38:
5c:e4:c2:65:29:e8:05:ba:61:9a:51:fb:ae:4f:5b:e2:bb:77:
26:25:85:08:9d:d5:97:4e:18:47:75:de:54:5b:5a:1c:d8:3e:
ea:83:eb:8d:7f:67:12:07:8a:b0:32:ba:63:c3:98:8c:00:fb:
85:1d:8b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:08 2025 by rpki-client