Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File: nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier: +EoZvOreC8yH6i+T8Y/Z7lGW1ldCpbF82MTRR6Bibec=
Subject key identifier: 54:2C:07:DB:04:3E:FF:86:9F:17:0F:3D:A3:87:0D:57:1D:43:E7:3E
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer: /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial: 019A71B822049D221E7A7B4445C3305E0B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number: 0D48
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: SaMQeibQtp/ii5TjVrSbZ7naTcLHecXzy5aJimMRPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:22:04:9d:22:1e:7a:7b:44:45:c3:30:5e:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=542c07db043eff869f170f3da3870d571d43e73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:ba:b7:c9:65:78:6d:0c:fb:33:fa:42:02:
09:2f:c2:25:c3:dd:ec:b4:37:aa:63:7a:5a:57:c3:
96:d5:35:29:a1:c4:3b:cb:4e:8a:c3:72:c4:b8:28:
bc:fb:77:f7:ae:37:03:7a:ab:19:7e:9d:4b:33:bf:
5c:bc:71:9a:18:3c:f1:3c:e6:8b:32:85:7b:c1:35:
9e:26:33:28:3e:e2:6f:1e:e0:b1:3c:2c:c0:2e:63:
47:ef:29:c2:68:43:a5:95:b4:08:bc:b2:9b:f9:96:
47:b3:c7:80:96:66:55:e3:4c:ff:1b:de:88:71:99:
28:eb:4c:f6:82:f9:b0:e8:c5:df:bf:75:57:7b:ea:
3f:39:a0:04:18:aa:74:d1:ea:0b:2a:13:57:1a:aa:
52:df:0f:a4:e3:57:d3:db:2c:99:10:3a:cf:42:fd:
05:c9:9c:ca:15:de:53:11:8c:a8:69:b8:f4:f3:59:
3c:00:0a:87:e3:73:a3:d3:ae:8f:39:7a:5e:4f:f2:
05:e2:40:7c:42:22:ca:a6:b2:7b:3d:f1:98:b4:b1:
13:ea:59:3a:61:c1:b7:e2:9a:e5:dc:bf:7b:0e:c2:
c5:4b:7e:2f:da:5a:ff:95:7d:c9:f4:64:3a:63:f5:
03:1e:97:ae:30:1c:ae:2d:86:7a:d3:20:d4:6b:c6:
d7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2C:07:DB:04:3E:FF:86:9F:17:0F:3D:A3:87:0D:57:1D:43:E7:3E
X509v3 Authority Key Identifier:
keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3c:71:2a:ac:42:eb:d9:0e:7d:9e:71:53:a1:32:c6:b2:e0:
68:53:ad:66:bb:1c:66:97:0f:0f:a1:d5:a4:38:16:3e:78:71:
84:c9:52:3d:1c:fa:11:48:bc:e8:99:23:d3:33:0b:6a:9b:4a:
b3:2a:a8:b5:55:85:4a:a7:00:d7:9d:93:1f:90:f8:9f:63:e9:
1f:7d:05:f6:c5:32:8d:a1:39:53:80:2d:78:34:39:41:4e:3f:
be:9d:d0:28:cb:53:0a:e6:46:87:6a:83:dd:4a:49:c4:98:54:
16:89:40:86:47:77:70:4f:86:00:8d:88:87:9a:2f:48:09:3e:
cf:5b:ea:a6:e7:c3:d4:20:df:12:dd:68:9b:a6:1b:96:ab:02:
c2:72:21:87:d6:71:d2:c2:b9:47:69:cb:6b:0e:d6:54:fc:43:
1f:a6:b9:4d:92:c9:50:cb:e1:f5:02:c9:5b:20:8c:c9:c2:4d:
75:e0:f4:27:d6:b4:aa:ae:51:f0:9e:6c:d2:a3:52:75:47:da:
44:3b:e1:10:30:8b:7b:60:3e:f5:9e:42:91:8e:96:94:31:21:
22:c0:71:f6:2e:4d:9e:9b:2b:f0:fb:8a:fe:10:eb:8d:88:88:
48:bb:bc:7b:48:3b:2d:7c:57:7c:93:ce:dc:25:f0:39:54:b3:
1a:df:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:42 2025 by rpki-client