Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
File: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft (raw, json)
Hash identifier: wfZNprxJ65Umu/GC7ejVHy5pHpccUnaVlwQL1qdk2tk=
Subject key identifier: EC:ED:8F:05:D8:72:4D:D0:B7:B3:C3:B7:7F:73:DC:AF:F2:FD:8E:9F
Authority key identifier: 9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA
Certificate issuer: /CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
Certificate serial: 019A72264EC131AF04206710C0402C3FA067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
Manifest number: 05AC
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl (hash: zbVXHFn45cJ7zs9Dh+9mx/MkRvQiVFtHeiLVXRL4IK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4e:c1:31:af:04:20:67:10:c0:40:2c:3f:a0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=eced8f05d8724dd0b7b3c3b77f73dcaff2fd8e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d3:fc:c5:f8:5a:0e:44:df:90:8f:c3:e8:3f:
66:10:bb:36:ed:48:34:aa:71:b7:f2:35:f6:c7:98:
89:23:f7:60:6c:76:b6:ed:1c:7a:63:f3:43:38:c5:
ef:4e:eb:85:dd:55:c0:58:34:0d:b6:57:1b:6a:67:
fd:fa:ba:90:c4:d1:ae:0f:ac:a3:4f:53:2e:1b:54:
0b:62:85:bc:27:0b:17:2f:11:ee:c5:6f:7e:1e:16:
6d:bd:5a:24:9b:c2:bb:a6:5f:9f:4b:b5:94:19:8c:
55:b4:b5:bf:18:22:a7:e3:66:8e:11:a4:33:8d:fd:
9d:57:20:1c:b6:e5:0f:07:84:f1:cc:16:1f:c8:d1:
ef:c3:fc:33:f9:47:7e:02:80:1b:d8:fd:0f:2a:fa:
8b:5d:87:fc:a7:6f:66:38:8b:e0:f6:06:b7:c6:0d:
65:d9:b2:e4:42:1a:eb:01:fb:07:79:eb:cb:7c:c6:
5c:ff:43:c5:29:07:33:08:54:48:41:19:70:75:7d:
ae:0a:70:c3:37:25:ff:06:8b:d4:4b:d2:b8:33:4b:
34:b8:15:ee:00:29:4e:d5:c7:de:73:ca:0e:34:c4:
0e:62:73:99:29:d5:34:6d:79:77:8e:48:a4:48:da:
d1:f0:14:78:2b:af:20:72:64:9b:46:06:15:86:41:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:ED:8F:05:D8:72:4D:D0:B7:B3:C3:B7:7F:73:DC:AF:F2:FD:8E:9F
X509v3 Authority Key Identifier:
keyid:9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:90:fe:34:c1:a7:a7:2e:15:16:40:aa:da:b5:73:3e:98:5c:
52:69:53:59:cd:a2:8f:95:0b:f8:ac:11:6a:71:60:de:df:82:
dd:73:0b:cd:b4:d7:33:42:df:00:39:2c:98:c0:93:6e:2f:e5:
20:f9:89:83:c2:a5:0c:be:6c:09:35:42:14:bd:b2:69:fa:d1:
82:df:a7:38:0a:3d:bb:07:63:d3:1e:d0:4a:56:a0:62:ef:9c:
d8:81:9d:0f:cb:36:ed:3d:32:68:a8:f3:e3:50:46:77:0a:05:
02:4b:5f:c6:ca:33:11:bb:6e:30:3b:12:25:9c:15:0e:b1:22:
64:bc:9b:4a:4f:4a:6a:79:8f:a5:d0:44:ef:5a:af:ef:8e:6f:
ea:83:45:8f:0d:b7:f6:0f:ce:69:60:90:e9:eb:83:4b:02:12:
08:50:04:a8:0e:c4:7e:e6:f9:d6:d4:b5:4e:38:ac:59:8c:44:
7e:d4:d4:83:ba:71:c3:09:ad:4d:93:0f:fe:b9:39:8c:93:1e:
7a:e2:a7:4f:b3:12:36:0c:c9:7e:07:01:97:87:ac:9c:41:da:
08:7c:f7:2a:55:36:7f:9e:a5:5e:be:22:ec:76:39:38:e0:5c:
4b:20:03:d7:cd:25:71:00:1c:cb:57:ea:fa:8b:66:e0:5a:eb:
d8:9c:d6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:14:05 2025 by rpki-client