Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier: Hdq+pQCMDcaCtzkj0hma0OxNGQCP0Cjnee5tgn0WF98=
Subject key identifier: 0D:18:DC:83:16:5B:19:EB:89:2C:8A:44:00:FF:19:EB:A3:25:EE:48
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial: 01992367C8F9B3C2FA1A38DC89BC365BD509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number: 8D
Signing time: Sun 07 Sep 2025 09:00:28 +0000
Manifest this update: Sun 07 Sep 2025 09:00:28 +0000
Manifest next update: Mon 08 Sep 2025 09:00:28 +0000
Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: AkSRKy2AYOHU55kSICPpkfa+x+UDk2XSijqfaJkukAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:c8:f9:b3:c2:fa:1a:38:dc:89:bc:36:5b:d5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Validity
Not Before: Sep 7 09:00:28 2025 GMT
Not After : Sep 8 09:00:28 2025 GMT
Subject: CN=0d18dc83165b19eb892c8a4400ff19eba325ee48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f4:73:14:55:25:f8:ff:2a:4e:5b:e5:92:6d:
c7:79:17:b8:2c:2e:7b:9e:93:0a:b7:1f:34:19:63:
5a:1b:8d:3b:c0:52:d3:1f:5b:2c:9b:03:4e:38:38:
fa:e4:2f:e8:9f:62:33:c6:04:84:43:56:b8:c3:27:
db:25:39:a2:53:c6:f5:71:ed:58:15:1c:4a:2e:df:
6c:ed:0c:20:4a:41:ef:f3:26:d7:5c:69:78:07:99:
8e:38:8c:45:6a:b1:46:f8:fd:ab:80:40:c9:40:21:
73:b2:b8:06:8d:5a:a1:e1:93:97:9c:8c:ea:f3:e4:
22:69:4d:f3:80:39:ab:f1:db:ab:e2:19:74:27:b6:
0b:4f:92:d6:20:bb:c3:82:c6:52:88:cf:da:03:fb:
ff:42:85:9e:c2:28:17:53:fd:79:52:7d:89:69:61:
09:54:a1:61:85:40:c4:35:f9:bb:9b:72:d3:44:fd:
d8:8e:26:64:4b:c9:aa:b6:09:85:1f:68:84:07:b6:
25:15:a3:1c:0c:52:ac:95:4c:89:78:bd:83:1b:4a:
37:9f:c0:0e:2d:5d:92:0c:df:e8:3f:78:66:66:73:
6d:42:b1:52:3b:af:17:a0:77:2e:c5:7c:90:0a:49:
25:9a:df:ad:0d:e6:50:5e:c2:a9:c2:c9:cc:09:50:
cd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:18:DC:83:16:5B:19:EB:89:2C:8A:44:00:FF:19:EB:A3:25:EE:48
X509v3 Authority Key Identifier:
keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:22:5d:b9:c1:7b:d3:11:ae:8c:49:21:97:b0:92:19:f7:de:
18:ab:23:06:ed:f9:f5:97:91:19:12:7c:bf:29:e6:2b:37:e5:
5d:25:f4:dd:0c:2e:7f:5a:ad:96:b5:3c:2e:fe:40:d4:0f:3a:
dc:43:5c:8b:6d:2b:fe:98:6b:a5:96:f4:74:b5:7b:2e:1b:c9:
66:7e:61:fb:37:66:2e:d0:c6:1e:70:e3:a0:8e:a9:50:16:e1:
92:f1:fd:ce:ba:34:31:42:16:e8:a4:0a:a8:99:04:c9:c0:3d:
9d:78:fa:7f:57:6d:8e:30:44:aa:eb:7e:87:64:07:07:0d:ed:
65:8f:7a:3e:6d:83:f3:a2:35:11:e2:7d:1c:81:3c:ac:8a:87:
67:09:f7:1d:06:9d:e2:f4:ef:64:32:7c:1a:9f:b6:e2:d6:a3:
f1:81:8c:e5:d9:38:0f:c9:3e:cb:a5:cb:9e:17:d1:0a:20:6f:
99:5f:7a:5a:d9:dd:28:41:80:e0:46:9b:29:03:bc:23:14:04:
07:32:74:4b:1f:ef:ea:59:7c:c5:37:bf:cc:1b:3f:bf:a2:64:
d6:24:3a:c6:8a:61:a1:16:72:59:5a:1b:f4:fc:91:a9:20:a0:
f4:5f:c1:03:b9:05:f9:d2:ee:18:cf:67:2b:da:c6:6c:b5:86:
1d:9d:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:39 2025 by rpki-client