Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json)
Hash identifier: 8uL7IEhyd8CU2IIKEPoMHV37xbBXZZ3pfl6gf76dad4=
Subject key identifier: F1:88:C1:9B:2A:F4:3A:8E:E3:FD:FE:A6:6B:94:0F:34:BC:8A:7F:F8
Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c
Certificate serial: 019A70DC2CF664335CC38AF92D0C55D338F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
Manifest number: 044D
Signing time: Tue 11 Nov 2025 03:01:08 +0000
Manifest this update: Tue 11 Nov 2025 03:01:08 +0000
Manifest next update: Wed 12 Nov 2025 03:01:08 +0000
Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: L4D93QKBkvY4hHPp7S+4bt7K6wBFWzlTUJe6u6p+5eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:2c:f6:64:33:5c:c3:8a:f9:2d:0c:55:d3:38:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c
Validity
Not Before: Nov 11 03:01:08 2025 GMT
Not After : Nov 12 03:01:08 2025 GMT
Subject: CN=f188c19b2af43a8ee3fdfea66b940f34bc8a7ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:6f:91:40:08:db:71:9f:37:dd:be:cd:30:
a1:9d:dc:44:c4:12:23:65:5e:99:b8:df:5d:b3:74:
ce:f3:63:b1:5a:0f:75:5d:60:04:46:bf:78:92:05:
f4:89:2d:fc:ca:93:f7:d7:6f:6c:31:91:ac:7c:b7:
1d:08:a1:9a:ac:f1:b7:b5:ca:67:22:13:6f:56:e2:
e9:e5:42:cb:44:27:f2:40:d0:d1:85:40:7e:9f:60:
a9:92:82:74:df:4b:0a:de:47:af:a4:f9:0b:4d:aa:
e8:30:4e:13:d5:68:9d:13:63:f0:be:9d:2a:d3:b0:
8b:56:02:31:b1:52:8c:6f:27:9f:bb:4a:2f:c1:f9:
8a:64:f7:5d:57:68:bd:bc:85:47:bd:4e:22:de:79:
37:f6:19:0b:ea:5b:c6:23:f2:25:9a:bf:45:8c:73:
ac:df:63:de:20:84:08:68:8b:6a:d0:f9:8f:d9:50:
f2:63:cf:57:39:fa:3a:12:af:87:10:46:ab:ba:04:
0d:3f:04:b9:a5:83:44:bd:46:e3:eb:67:38:c5:04:
fc:97:ca:8d:b3:e8:f7:e8:4c:25:30:00:21:6e:93:
fc:3b:46:6d:99:eb:f2:07:dc:89:ef:7e:f5:47:f9:
91:f4:bf:cc:2f:96:1e:56:f9:39:8e:a7:49:13:34:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:88:C1:9B:2A:F4:3A:8E:E3:FD:FE:A6:6B:94:0F:34:BC:8A:7F:F8
X509v3 Authority Key Identifier:
keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f7:22:3a:fc:7f:0f:af:51:dd:69:46:ab:73:13:22:c1:70:
bf:7d:44:4e:14:b8:5b:87:dc:4b:c9:28:3f:09:2b:4d:2e:be:
36:25:b3:16:7a:86:a7:86:c3:4b:6f:30:cd:71:af:d7:f1:4d:
2e:ff:7f:e9:4a:63:e0:71:41:c9:ff:3f:4e:f5:de:7d:78:5b:
ac:a5:4e:11:e2:71:99:1d:65:01:86:94:04:50:2e:4f:3f:24:
cf:4f:31:8c:56:ed:29:35:ff:7f:89:d4:78:0f:56:01:9f:97:
53:ac:bf:33:68:d2:de:ff:62:fb:94:3d:b3:b5:b7:7d:c2:c9:
93:8e:5f:9c:98:97:a7:7f:66:12:35:3c:05:f7:b9:d9:f2:67:
34:aa:24:04:16:9b:ae:d6:b6:ff:cb:68:13:53:73:e7:12:fb:
9d:60:f6:4b:a6:55:1f:46:02:54:86:18:5e:82:d7:17:d8:0e:
f5:d9:e1:ac:80:33:8f:32:2b:39:16:05:9d:52:e5:58:c7:0a:
9f:03:00:e2:d2:c2:81:3f:9f:18:9d:ac:40:93:bd:76:0f:36:
e2:e2:c0:2f:ca:05:86:d0:bd:85:25:4f:57:3a:51:88:df:4b:
24:0a:1f:92:9c:27:ae:d4:16:dc:d2:ad:f2:97:07:c7:2c:88:
2f:ec:06:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:13 2025 by rpki-client