Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
File: nPmIlqiK6PNUCut37KHxqUu9aXg.mft (raw, json)
Hash identifier: VXBushiMYe8z5cCcG1+JXAxK0bgqplziu0VSN7a3Coo=
Subject key identifier: DC:65:60:16:D5:F1:37:80:9E:2B:96:1E:F4:E0:9D:1F:69:DE:8E:76
Authority key identifier: 9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
Certificate issuer: /CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Certificate serial: 019A71B7D1ED00D7EDE0B0CB0E3240724653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
Manifest number: 08B5
Signing time: Tue 11 Nov 2025 07:01:03 +0000
Manifest this update: Tue 11 Nov 2025 07:01:03 +0000
Manifest next update: Wed 12 Nov 2025 07:01:03 +0000
Files and hashes: 1: nPmIlqiK6PNUCut37KHxqUu9aXg.crl (hash: ey7014Em8pw3iKPLh551LhKXYbmmEzWWAUULVyCm4hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d1:ed:00:d7:ed:e0:b0:cb:0e:32:40:72:46:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Validity
Not Before: Nov 11 07:01:03 2025 GMT
Not After : Nov 12 07:01:03 2025 GMT
Subject: CN=dc656016d5f137809e2b961ef4e09d1f69de8e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:27:58:d6:a0:5a:8a:7f:bd:99:8d:ce:4d:98:
d9:5f:25:f2:10:ae:8a:1e:b5:8a:76:a9:2f:c4:34:
96:d6:35:50:7f:01:7c:53:f3:33:4f:03:cf:52:4e:
ff:34:29:3e:4f:87:95:bd:c7:52:9a:7f:3e:25:10:
b0:c9:94:bc:6d:ce:a8:0f:73:d1:27:4c:ae:9a:fb:
c6:8f:68:c5:11:c5:c0:02:37:f6:83:28:16:c9:ed:
dd:d4:32:fe:3e:97:26:80:4b:18:d3:b5:ca:c6:f6:
a5:ae:9f:44:14:fd:3f:fc:3e:1d:2e:2b:f8:46:f8:
13:a1:43:48:77:f6:90:e0:76:e4:19:d9:27:7d:99:
39:b4:fa:0a:1c:e6:f2:3f:d0:c5:4d:e3:08:57:1b:
91:9d:67:e8:bc:58:d5:4b:41:a6:99:a5:3e:db:01:
9b:67:6c:e4:8f:d0:9c:e9:cd:b7:2c:7c:c8:df:42:
2e:dc:d3:bf:ea:66:16:0f:19:df:e3:bf:d3:45:0f:
ca:24:73:ec:f7:61:44:f9:e4:8c:73:89:79:e4:d7:
1b:70:92:1e:95:c9:41:d8:24:0e:9a:0e:23:0d:c9:
02:25:1e:de:3c:bf:a3:33:1e:30:ac:80:52:ef:a7:
bf:71:4f:e1:7d:10:d2:58:9b:4f:d1:fe:0e:a6:a4:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:65:60:16:D5:F1:37:80:9E:2B:96:1E:F4:E0:9D:1F:69:DE:8E:76
X509v3 Authority Key Identifier:
keyid:9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e1:61:d2:56:cc:af:ec:da:5a:08:bd:d9:ff:e0:d2:6a:8c:
f2:24:fc:37:4c:9a:e2:d3:81:8c:e9:1d:0c:82:ac:91:08:ba:
f9:2e:23:0b:43:f8:5e:00:d5:42:d8:4a:56:fb:cd:8b:f9:76:
b0:11:87:64:1d:91:fb:6f:40:c0:9e:cc:89:51:d2:fc:5e:da:
05:e2:05:87:4a:f0:18:db:e9:2e:aa:00:b6:e8:82:e2:3e:d8:
3d:5d:ff:90:75:68:e4:3b:e0:ff:f9:8d:d9:60:0e:b6:11:90:
52:29:c3:ba:8a:32:17:86:89:46:52:7c:9d:a9:ac:3c:75:a9:
d0:a8:61:04:5e:21:b4:df:e2:73:ef:c9:70:da:5d:ea:75:f0:
bc:46:79:98:86:a0:f5:a3:6a:12:38:0e:e2:55:81:38:8a:bd:
f3:f7:0e:9c:a8:6b:57:ca:7a:90:c2:0a:9d:fb:18:9c:d6:eb:
b6:e0:f7:fa:f7:33:b5:ca:ff:20:ad:cf:d5:94:ff:ff:90:ea:
1e:8a:28:96:7f:c7:98:9c:6e:34:73:d7:71:29:a6:a9:23:d0:
bc:5c:60:ed:85:50:89:db:1a:1f:ac:cb:5b:e4:07:9b:d1:bc:
06:73:98:81:e9:e0:9b:df:d5:18:27:ac:00:ea:9c:56:b3:dd:
a3:c3:52:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:23 2025 by rpki-client