Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
File: nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft (raw, json)
Hash identifier: IQdJVkLnTrAQfAzXmADRKTBbWStbtqSSRnJcwcUivHI=
Subject key identifier: 8A:3B:BC:22:18:84:D6:60:99:10:4F:F6:A2:FE:70:BF:97:74:1A:14
Authority key identifier: 9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
Certificate issuer: /CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Certificate serial: 019921B1C589DCDABA0FB81C338DDD659AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
Manifest number: 1601
Signing time: Sun 07 Sep 2025 01:02:02 +0000
Manifest this update: Sun 07 Sep 2025 01:02:02 +0000
Manifest next update: Mon 08 Sep 2025 01:02:02 +0000
Files and hashes: 1: nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl (hash: Xy+dt/Jvd4dtoGfzpkLP5/IGPUU5joR+OIG2OBe/4B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:c5:89:dc:da:ba:0f:b8:1c:33:8d:dd:65:9a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Validity
Not Before: Sep 7 01:02:02 2025 GMT
Not After : Sep 8 01:02:02 2025 GMT
Subject: CN=8a3bbc221884d66099104ff6a2fe70bf97741a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:3a:6d:e0:7c:0d:9a:ad:18:e4:a4:4a:e4:
ee:b3:24:d8:df:8a:e6:55:ed:e3:15:6e:85:bb:37:
a0:a6:ab:f5:83:f0:a9:ce:48:1e:0b:6b:49:ac:d1:
43:85:85:69:8b:86:fb:a7:ef:a9:ea:22:1b:01:61:
12:d6:2c:0b:cf:0c:c2:89:d6:05:6f:6f:35:8a:aa:
ed:5d:f3:5d:d6:5d:d5:d0:ac:91:1a:78:4c:5a:eb:
f5:81:cd:5e:81:52:26:b2:be:d8:d4:9d:78:0f:9b:
d7:91:bb:03:f5:19:cf:66:89:1c:9a:e0:9b:3e:c4:
cf:bc:fe:32:d6:e1:c8:42:98:3e:f9:82:9e:19:a0:
0f:5e:2a:49:60:47:d5:9d:73:9a:b6:f2:8b:20:06:
6c:b8:fa:66:ea:7c:8e:91:62:f0:14:9c:d8:15:03:
e6:19:8d:ae:05:3e:d0:79:50:91:5a:4d:b6:14:1c:
44:c4:93:76:24:80:fb:f3:98:2e:84:78:d7:00:39:
2d:cf:39:96:36:3a:fd:38:36:93:8f:a1:15:04:95:
69:40:a5:0b:b6:52:21:62:e0:7f:fe:95:71:55:12:
a5:ce:73:73:78:90:3b:dd:3e:a1:9e:a3:63:9b:8e:
86:2d:be:6d:fe:62:27:56:c7:7c:fb:84:a4:bf:1a:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3B:BC:22:18:84:D6:60:99:10:4F:F6:A2:FE:70:BF:97:74:1A:14
X509v3 Authority Key Identifier:
keyid:9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1b:5a:5d:96:41:4e:ae:b2:53:8a:d5:c3:f9:4d:88:9f:69:
9e:7b:00:5b:ab:4d:58:8d:55:73:ca:f3:de:49:01:14:cd:ec:
8d:a2:b0:f2:9d:70:89:1a:d4:54:49:86:54:8c:d4:13:87:48:
1c:26:5a:89:4c:36:00:bb:a6:27:30:25:46:27:72:27:fb:ed:
e3:f1:9f:2f:cf:c4:cd:3a:44:e4:42:07:2b:fd:a3:a4:36:a5:
15:0e:dc:67:7f:6b:4b:36:04:1b:d9:b4:6d:92:a8:64:54:0b:
19:05:2b:26:83:f8:4d:3b:45:c8:4a:11:94:f5:ac:2d:65:ea:
71:76:0a:61:51:56:35:72:ea:f5:49:49:53:f2:51:c1:b9:47:
ae:2a:9c:16:3b:61:10:fe:c1:23:42:bf:3c:52:c1:86:04:93:
70:ce:de:0c:ab:ba:07:a7:ad:b5:00:53:d6:bd:a9:b0:31:a3:
f4:07:b9:38:6d:d9:68:2d:2e:92:e1:58:fc:36:d1:11:dd:92:
9f:cd:32:43:29:a6:c4:91:bd:68:f9:d2:9b:8b:13:3d:86:c1:
7b:d3:b6:1b:8a:18:fe:a9:38:43:c2:48:1e:7a:08:01:09:a3:
3e:ea:49:9a:3b:ae:c2:25:27:09:40:fd:a3:38:3e:77:b0:11:
a3:31:6f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhscWJ3Nq6D7gcM43dZZqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjlkM2I0ZDlkZmUxNjVmNDkwYWVhMDcyNzBiNzBmYThl
M2ViMGUwHhcNMjUwOTA3MDEwMjAyWhcNMjUwOTA4MDEwMjAyWjAzMTEwLwYDVQQD
Eyg4YTNiYmMyMjE4ODRkNjYwOTkxMDRmZjZhMmZlNzBiZjk3NzQxYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjs6beB8DZqtGOSkSuTusyTY34rm
Ve3jFW6Fuzegpqv1g/CpzkgeC2tJrNFDhYVpi4b7p++p6iIbAWES1iwLzwzCidYF
b281iqrtXfNd1l3V0KyRGnhMWuv1gc1egVImsr7Y1J14D5vXkbsD9RnPZokcmuCb
PsTPvP4y1uHIQpg++YKeGaAPXipJYEfVnXOatvKLIAZsuPpm6nyOkWLwFJzYFQPm
GY2uBT7QeVCRWk22FBxExJN2JID785guhHjXADktzzmWNjr9ODaTj6EVBJVpQKUL
tlIhYuB//pVxVRKlznNzeJA73T6hnqNjm46GLb5t/mInVsd8+4SkvxqEuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIo7vCIYhNZgmRBP9qL+cL+XdBoUMB8GA1UdIwQY
MBaAFJ0p07TZ3+Fl9JCuoHJwtw+o4+sOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNuVHRObmY0V1gwa0s2Z2NuQzNENmpqNnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NWFkNmEtMjIzNy00MzFkLWI3ZmYt
ZGU3ZDc0MjZjNGM1LzEvblNuVHRObmY0V1gwa0s2Z2NuQzNENmpqNnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85NWFkNmEtMjIzNy00MzFkLWI3ZmYtZGU3ZDc0MjZjNGM1
LzEvblNuVHRObmY0V1gwa0s2Z2NuQzNENmpqNnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxtaXZZB
Tq6yU4rVw/lNiJ9pnnsAW6tNWI1Vc8rz3kkBFM3sjaKw8p1wiRrUVEmGVIzUE4dI
HCZaiUw2ALumJzAlRidyJ/vt4/GfL8/EzTpE5EIHK/2jpDalFQ7cZ39rSzYEG9m0
bZKoZFQLGQUrJoP4TTtFyEoRlPWsLWXqcXYKYVFWNXLq9UlJU/JRwblHriqcFjth
EP7BI0K/PFLBhgSTcM7eDKu6B6ettQBT1r2psDGj9Ae5OG3ZaC0ukuFY/DbREd2S
n80yQymmxJG9aPnSm4sTPYbBe9O2G4oY/qk4Q8JIHnoIAQmjPupJmjuuwiUnCUD9
ozg+d7ARozFvaw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:26 2025 by rpki-client