Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
File: n98bEcryuCRFMXghJa6TOudpn3Y.mft (raw, json)
Hash identifier: Xqd37rTmuAw+LCoYV+baAfLSa68bD8U6y8sc9uJFQSY=
Subject key identifier: 31:A6:FE:F4:72:DA:D9:08:AC:24:27:20:17:4A:88:E2:81:E4:D5:F3
Authority key identifier: 9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
Certificate issuer: /CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Certificate serial: 019A1F88719EBDF33199253179239738740E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
Manifest number: 16C2
Signing time: Sun 26 Oct 2025 08:00:26 +0000
Manifest this update: Sun 26 Oct 2025 08:00:26 +0000
Manifest next update: Mon 27 Oct 2025 08:00:26 +0000
Files and hashes: 1: n98bEcryuCRFMXghJa6TOudpn3Y.crl (hash: fNTltnieZWtnCovjjR872Vfm99KnrLbUOvvxm2+Jw9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:71:9e:bd:f3:31:99:25:31:79:23:97:38:74:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Validity
Not Before: Oct 26 08:00:26 2025 GMT
Not After : Oct 27 08:00:26 2025 GMT
Subject: CN=31a6fef472dad908ac242720174a88e281e4d5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:0f:1a:b0:f2:e6:fb:d0:15:fe:dc:73:4a:
89:67:0a:0d:87:52:53:7b:b9:b4:26:b1:89:f0:12:
62:9e:f0:75:80:10:c7:91:bb:79:94:2a:14:17:fd:
e5:c6:c1:5e:67:31:1e:64:dd:3d:40:94:4f:d9:26:
b9:c2:44:f6:bd:46:82:59:b0:51:d9:6c:7e:a4:7f:
25:9f:43:ce:d0:0e:09:53:27:a4:cd:6c:b4:91:ab:
64:08:22:68:b3:cd:e1:66:91:77:e1:e7:ec:8e:2a:
58:0f:d6:55:9b:54:f8:60:35:e2:7a:3b:22:e3:16:
0c:9e:29:2d:9f:e1:6b:f0:29:fb:ff:f1:e8:6c:ea:
f8:0c:b3:e5:ec:90:70:26:cb:50:42:fb:92:de:82:
a2:51:4b:c2:c9:c3:bd:07:f1:bb:a7:07:d0:86:64:
e5:ce:1e:37:5f:8a:f2:ba:b5:3f:01:87:7d:34:86:
65:1a:77:2d:11:f8:4a:d6:4c:e3:28:5c:29:5c:e1:
cd:0a:3a:38:e2:6f:ed:44:30:d9:de:81:3f:a6:67:
7c:eb:c0:3d:78:b7:68:47:6a:6d:3f:d1:1e:97:aa:
11:99:d2:1a:40:d2:25:9c:ec:aa:7b:ac:4e:3f:8a:
82:04:d2:bf:19:a4:41:28:e9:01:63:05:4d:6d:35:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A6:FE:F4:72:DA:D9:08:AC:24:27:20:17:4A:88:E2:81:E4:D5:F3
X509v3 Authority Key Identifier:
keyid:9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f8:63:43:54:e2:6e:74:c9:61:fd:fa:cb:75:8a:e5:2f:53:
76:c0:8e:cf:4e:21:9f:33:c8:14:a2:0c:e4:0e:46:86:9d:9f:
ca:25:ed:dd:5a:83:fb:8e:34:be:fa:41:bb:a6:c9:eb:15:d9:
a5:9c:35:c9:88:03:8b:65:c7:e0:f3:07:68:68:93:98:27:c6:
26:1f:27:b7:84:6e:06:a4:4f:98:c5:33:d3:f7:fe:56:77:45:
1b:6e:e7:fa:2c:f2:79:5c:a7:88:75:bd:8d:4b:43:49:e4:bb:
a6:e9:35:38:71:f1:af:0c:8d:c7:f9:34:59:2e:ec:f7:f2:61:
fc:ee:d4:96:0a:9e:df:30:b9:ea:70:2a:19:ae:95:bb:e0:ce:
d5:eb:71:e1:28:cf:21:a9:bf:0e:ae:81:0d:43:53:3a:5c:e4:
8d:22:00:78:a5:73:12:ed:e9:cd:29:38:2d:41:18:da:30:c0:
a9:1e:a4:0d:15:02:0e:60:c2:c1:d8:f5:45:4f:9e:70:15:ef:
0a:bc:5e:23:f4:92:5c:8a:da:2f:1f:35:e8:88:79:c0:74:99:
34:c5:47:53:45:71:07:92:ba:32:59:aa:3b:97:33:db:15:2c:
6e:f7:4d:8a:13:c9:ad:3b:75:8b:02:92:bd:28:60:90:6f:44:
7c:c5:51:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:38:45 2025 by rpki-client