Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
File: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft (raw, json)
Hash identifier: t/15YUCs2wKT5Pj7eSuw+1KgsfwPFJVaoEjqql/rlAk=
Subject key identifier: 86:29:DB:B7:0A:3B:87:63:D6:E7:59:A9:C3:93:71:69:A0:BC:AD:39
Authority key identifier: 9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA
Certificate issuer: /CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
Certificate serial: 0199225597E0520D0E9139434767ACE6E357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
Manifest number: 04FE
Signing time: Sun 07 Sep 2025 04:00:58 +0000
Manifest this update: Sun 07 Sep 2025 04:00:58 +0000
Manifest next update: Mon 08 Sep 2025 04:00:58 +0000
Files and hashes: 1: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl (hash: I4IuWHsGkoZHfOUEbFuZxI7dg/FtNYpv+nWtTj3jSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:97:e0:52:0d:0e:91:39:43:47:67:ac:e6:e3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
Validity
Not Before: Sep 7 04:00:58 2025 GMT
Not After : Sep 8 04:00:58 2025 GMT
Subject: CN=8629dbb70a3b8763d6e759a9c3937169a0bcad39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:e7:3f:0e:b9:87:af:4c:c5:b7:00:77:69:
c0:e8:be:4b:fa:e0:96:75:98:db:e3:f3:56:d0:43:
01:77:da:c6:27:82:30:34:34:d5:0e:eb:e2:96:f1:
28:10:81:e9:da:b4:3b:46:51:5c:24:a3:56:dc:62:
58:aa:7c:39:a2:5c:fc:58:00:19:b2:8b:3f:c0:8d:
d3:5c:97:1a:79:1d:16:30:46:94:d4:0f:68:f3:b7:
91:32:78:00:e0:a0:6b:72:f1:2e:aa:ab:b3:4b:c7:
55:06:53:0f:de:8d:c6:b4:25:f6:40:04:ac:df:06:
05:32:60:8b:49:db:ae:5c:50:d2:de:81:76:2a:28:
09:57:b4:65:a0:2a:a8:cf:fc:46:94:f3:9a:0b:2d:
b4:9e:4e:01:29:a5:89:1d:eb:d9:1a:1e:05:0f:ce:
1f:e3:d6:7c:70:32:a5:aa:54:52:f3:e6:15:50:41:
55:5d:9a:0f:0b:18:14:b5:9b:db:12:28:08:8c:f8:
40:af:dc:57:06:5b:73:0a:0e:e8:0a:a4:af:d1:12:
31:35:99:8d:95:8a:ff:74:c6:55:6f:16:3c:fd:07:
1a:df:5f:81:5c:77:20:a5:c3:77:00:dc:d6:69:46:
7f:bf:ab:6a:15:1f:4e:df:0c:01:ed:ce:f5:23:9c:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:29:DB:B7:0A:3B:87:63:D6:E7:59:A9:C3:93:71:69:A0:BC:AD:39
X509v3 Authority Key Identifier:
keyid:9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1a:b9:90:64:e1:b3:68:33:f0:b5:b5:b6:68:f7:68:20:96:
9f:c4:f7:f0:42:9e:57:3c:98:8e:42:c7:f1:ce:b3:23:6e:5d:
25:5c:3d:97:90:1e:6a:05:26:95:6e:9a:11:6c:b2:94:43:a4:
3e:ab:0c:dc:76:fb:bb:49:59:50:af:92:ba:e3:47:e8:41:bd:
80:e5:3f:ce:f4:ae:d6:87:0b:71:5b:a4:c7:7a:a4:5b:ad:08:
f8:f5:1b:27:9a:98:3c:1c:9e:c1:a4:ce:8c:6f:5b:e1:91:86:
65:2b:ce:f2:f5:15:23:eb:15:b6:8c:47:ba:e1:6b:1c:d3:47:
3a:a6:a8:ba:df:72:ec:c2:a7:3c:d2:ce:94:09:11:eb:d1:a2:
b2:3b:06:0b:51:f9:00:c2:93:c1:9b:fd:03:08:72:35:80:ae:
86:3e:5b:8c:df:c8:1d:e2:37:99:2a:df:c2:52:8e:3b:08:05:
1f:4d:bb:6e:4c:50:38:91:28:92:ac:90:22:ae:32:9e:64:a7:
bd:e3:08:30:45:7f:ea:c3:cd:71:4a:21:fb:bf:1b:c0:3d:b0:
62:9e:ea:c7:65:ff:67:46:47:76:5d:6d:98:c8:2d:81:9c:7f:
9b:df:f2:f0:d7:96:27:ad:55:20:a2:e4:e9:40:77:75:54:67:
7f:e3:3d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:10:25 2025 by rpki-client