Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
File: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft (raw, json)
Hash identifier: B/bhHHJZjdn5QLKasY96bybfSLsyz5rY2W0gU8es970=
Subject key identifier: 84:3C:2E:FB:7A:82:C3:98:17:09:B8:66:62:17:38:E3:E3:9A:29:C3
Authority key identifier: 9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
Certificate issuer: /CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Certificate serial: 019A73380E6A218EAF973D624E348717BC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 14:00:44 +0000
Manifest this update: Tue 11 Nov 2025 14:00:44 +0000
Manifest next update: Wed 12 Nov 2025 14:00:44 +0000
Files and hashes: 1: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl (hash: Tuf/kZGIOR78kr47btfkHrNxrYwdP9U0rPOCPMgkNwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:0e:6a:21:8e:af:97:3d:62:4e:34:87:17:bc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Validity
Not Before: Nov 11 14:00:44 2025 GMT
Not After : Nov 12 14:00:44 2025 GMT
Subject: CN=843c2efb7a82c3981709b866621738e3e39a29c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:c3:0c:62:42:4b:dc:5c:4a:0c:ac:08:56:
16:5c:82:35:ba:f8:97:8b:17:f7:91:4c:75:20:dd:
6b:bc:25:21:76:e2:c1:37:7b:50:c0:7b:c0:16:85:
62:78:98:30:c2:46:ee:25:a0:36:99:2e:88:57:91:
61:f5:04:82:32:f5:29:cc:b8:48:0e:51:4f:3b:07:
57:7a:f0:b2:55:32:df:d2:98:47:76:8f:ac:e5:26:
f4:61:24:42:f6:8d:d5:e3:4e:04:c8:b4:f2:e3:75:
2d:c9:0a:98:60:cd:96:35:a0:06:b2:66:9d:e8:43:
4c:a3:87:38:f9:d1:8c:86:e4:2f:1c:a4:95:a8:38:
a6:fd:12:36:e9:cb:d8:2d:b7:f7:61:92:0e:66:75:
8c:14:f4:6a:71:8a:34:42:82:da:e8:fb:cb:1d:c9:
6a:87:9a:81:4b:f2:0a:d4:0e:b6:95:75:4f:b9:af:
09:91:8b:53:84:29:c7:2b:71:2e:21:69:10:e6:e6:
a6:5e:1a:d0:10:8f:71:29:da:ee:56:83:4c:4d:f2:
ea:39:27:6d:85:24:2b:2d:91:26:bf:f0:8a:0d:1d:
ef:2b:90:71:3c:06:7f:42:a5:3a:98:c1:d3:a8:fc:
52:2a:d4:34:cb:8f:7b:a5:bc:e3:cf:a5:21:1d:4e:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3C:2E:FB:7A:82:C3:98:17:09:B8:66:62:17:38:E3:E3:9A:29:C3
X509v3 Authority Key Identifier:
keyid:9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:a8:01:cd:f0:b5:9a:0d:32:40:8d:4b:e2:d8:cb:75:28:
80:22:9c:d5:53:33:a1:9c:a7:07:d1:5d:ea:d9:af:71:0f:44:
9e:7c:9d:ff:ed:4c:44:ca:48:39:f2:a9:68:ce:a0:1c:c0:8f:
d5:5c:82:8c:32:a6:ea:fe:f1:f1:24:92:ae:28:a0:7c:0e:ea:
3f:21:32:51:b9:32:34:70:2a:51:ca:c2:a2:13:ac:fd:2d:ab:
bd:1b:46:de:03:4c:9e:bb:69:97:5d:31:46:a6:2d:fb:e4:22:
23:0c:a5:39:c0:1d:4f:f7:79:5b:5c:17:19:50:8a:ce:be:66:
be:d4:4c:fe:3c:5a:9a:69:a0:97:8b:f6:bd:56:73:06:38:6b:
19:01:78:79:82:2a:7d:33:cf:47:51:d9:0e:c6:2e:76:74:1a:
57:3f:71:d6:b5:5a:71:0e:a4:ed:3b:80:d1:15:82:8a:77:6f:
66:95:3b:b0:06:b7:ad:95:c5:26:4c:93:68:f5:b9:ee:10:f5:
50:95:74:4d:8d:9a:31:9c:f3:b7:7f:48:14:82:c9:1c:55:4b:
38:3e:b3:0d:ff:6c:9a:0e:f3:51:5f:fc:e1:a0:9b:d2:4f:f2:
1f:88:4f:90:7a:f4:45:80:17:e3:70:18:5c:28:81:55:ef:4a:
19:3f:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:08:40 2025 by rpki-client