Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json)
Hash identifier: suKafBLWq0S3/XsVVILYrwVXS2AotN9QIjuGcVAcIBI=
Subject key identifier: A8:72:66:FE:00:DF:CB:0C:CE:B3:9C:42:EB:65:FA:80:77:49:C5:7A
Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Certificate serial: 019A7112A3E972253F8D8AA48E4B9C33868C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
Manifest number: 0748
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: fMjjFnMPLAb//sEX1AUUV7JzBApFDSfNmiOl2C/DF5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a3:e9:72:25:3f:8d:8a:a4:8e:4b:9c:33:86:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=a87266fe00dfcb0cceb39c42eb65fa807749c57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:09:1e:61:fa:86:5b:fe:15:33:23:70:50:
b1:34:80:3a:ff:68:df:aa:6c:33:37:f7:99:f0:d3:
fb:d2:16:c3:af:45:09:79:01:80:0f:59:59:6e:00:
b9:7e:23:9a:96:f5:ad:e8:63:1d:dc:0d:51:e0:90:
9a:bc:c4:90:84:18:1c:bc:f6:ff:5e:45:a4:9d:c2:
d3:0d:eb:32:9f:d4:b2:a8:8d:dc:6b:49:64:1d:47:
4d:a3:f9:71:16:3a:c6:9c:a1:d5:b6:d2:0e:48:61:
fa:e4:e0:f1:98:23:9f:f5:9c:32:c4:ce:6c:e1:b2:
75:e9:d6:95:fa:20:b8:49:1e:fd:0e:7f:b0:af:28:
d0:7e:91:2a:ae:be:1b:2e:c2:d6:ec:71:24:c0:88:
41:be:c0:56:c5:fe:19:5b:2e:43:f9:84:2f:fe:f1:
72:95:2d:46:af:ad:b7:78:f5:cb:fb:ea:26:29:db:
b7:2b:ff:36:63:f6:92:12:5b:50:f5:7d:c8:c0:d6:
e5:da:95:65:0c:a9:bb:c4:f2:ad:8b:86:f7:da:b9:
ad:8d:04:aa:33:5b:e3:38:4a:d5:98:c6:55:67:c3:
3b:98:8d:5b:77:85:66:2c:06:09:08:28:ba:76:7f:
6f:e1:e4:8f:b6:75:5a:df:e6:9b:c8:ba:e5:5c:d6:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:72:66:FE:00:DF:CB:0C:CE:B3:9C:42:EB:65:FA:80:77:49:C5:7A
X509v3 Authority Key Identifier:
keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f6:85:07:ef:d1:b2:ef:c0:82:81:1c:16:c5:56:fb:ae:a0:
d3:a3:c6:44:ac:3e:a7:16:8d:26:c1:4a:1e:9b:28:9a:be:88:
7c:15:74:51:91:f7:96:f3:94:62:1d:0d:b9:08:2a:91:3e:6d:
f5:1c:1f:43:00:53:fa:09:89:9b:27:66:98:3e:17:51:5e:e9:
b2:b2:f0:11:b9:94:64:d9:3a:03:7a:97:8c:7c:76:76:34:1a:
5b:94:ff:b3:51:a7:7e:d7:95:95:b8:8b:9f:a2:d3:d0:3f:b7:
81:47:62:17:39:63:56:c3:9a:fb:3e:f8:eb:48:5c:d2:38:73:
82:26:dc:aa:a0:c7:50:ba:8a:6b:a5:4b:95:55:ad:d6:85:0c:
d9:b5:b6:c7:1b:57:34:6d:8f:6b:cd:30:17:1a:b4:37:a2:38:
96:f1:16:96:03:d5:f5:92:7f:89:cb:9e:4a:aa:f4:1c:9f:43:
56:c9:a3:00:de:70:46:ea:a1:15:44:3b:a2:49:e3:0f:3e:ee:
36:97:98:36:c8:22:6b:51:3a:c1:6e:4b:bf:02:89:e1:d3:41:
3b:05:9e:3a:97:1d:36:97:e7:f7:a4:c2:cd:d7:67:72:98:94:
bb:8f:be:f1:57:d6:5c:3a:b5:99:41:ad:b2:be:6b:2b:d2:85:
75:72:f0:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEqPpciU/jYqkjkucM4aMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNlOTFkNWIwNWI0NWYwN2QzODUyNGY0ZjFlMmUzOTJi
OGE4M2EwHhcNMjUxMTExMDQwMDM4WhcNMjUxMTEyMDQwMDM4WjAzMTEwLwYDVQQD
EyhhODcyNjZmZTAwZGZjYjBjY2ViMzljNDJlYjY1ZmE4MDc3NDljNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVYJHmH6hlv+FTMjcFCxNIA6/2jf
qmwzN/eZ8NP70hbDr0UJeQGAD1lZbgC5fiOalvWt6GMd3A1R4JCavMSQhBgcvPb/
XkWkncLTDesyn9SyqI3ca0lkHUdNo/lxFjrGnKHVttIOSGH65ODxmCOf9ZwyxM5s
4bJ16daV+iC4SR79Dn+wryjQfpEqrr4bLsLW7HEkwIhBvsBWxf4ZWy5D+YQv/vFy
lS1Gr623ePXL++omKdu3K/82Y/aSEltQ9X3IwNbl2pVlDKm7xPKti4b32rmtjQSq
M1vjOErVmMZVZ8M7mI1bd4VmLAYJCCi6dn9v4eSPtnVa3+abyLrlXNa8fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhyZv4A38sMzrOcQutl+oB3ScV6MB8GA1UdIwQY
MBaAFJ0j6R1bBbRfB9OFJPTx4uOSuKg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83NTQ1ODctYzNmZS00N2IwLTkwNzAt
MzdhOWRkMDJiMmM0LzEvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83NTQ1ODctYzNmZS00N2IwLTkwNzAtMzdhOWRkMDJiMmM0
LzEvblNQcEhWc0Z0RjhIMDRVazlQSGk0NUs0cURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPaFB+/R
su/AgoEcFsVW+66g06PGRKw+pxaNJsFKHpsomr6IfBV0UZH3lvOUYh0NuQgqkT5t
9RwfQwBT+gmJmydmmD4XUV7psrLwEbmUZNk6A3qXjHx2djQaW5T/s1GnfteVlbiL
n6LT0D+3gUdiFzljVsOa+z7460hc0jhzgibcqqDHULqKa6VLlVWt1oUM2bW2xxtX
NG2Pa80wFxq0N6I4lvEWlgPV9ZJ/icueSqr0HJ9DVsmjAN5wRuqhFUQ7oknjDz7u
NpeYNsgia1E6wW5LvwKJ4dNBOwWeOpcdNpfn96TCzddncpiUu4++8VfWXDq1mUGt
sr5rK9KFdXLwQA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:19 2025 by rpki-client