Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
File: nRNTyAuINe6erTfvfp9kIQp3O_s.mft (raw, json)
Hash identifier: hA46L7XrVPaQfBKDSjiORll9t0x7itctPc2o+iVOSBg=
Subject key identifier: 81:3F:58:20:58:9B:83:C2:F2:59:90:24:A0:41:CE:EE:0D:3C:B1:79
Authority key identifier: 9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB
Certificate issuer: /CN=9d1353c80b8835ee9ead37ef7e9f64210a773bfb
Certificate serial: 019A7112F97D57E85EF009EEA3E7F678EA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
Manifest number: 26
Signing time: Tue 11 Nov 2025 04:00:59 +0000
Manifest this update: Tue 11 Nov 2025 04:00:59 +0000
Manifest next update: Wed 12 Nov 2025 04:00:59 +0000
Files and hashes: 1: nRNTyAuINe6erTfvfp9kIQp3O_s.crl (hash: nUvfO6J3yxVVq39lE3L7sraWjxkge9cj4LGxRna5O08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f9:7d:57:e8:5e:f0:09:ee:a3:e7:f6:78:ea:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1353c80b8835ee9ead37ef7e9f64210a773bfb
Validity
Not Before: Nov 11 04:00:59 2025 GMT
Not After : Nov 12 04:00:59 2025 GMT
Subject: CN=813f5820589b83c2f2599024a041ceee0d3cb179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:5b:11:cf:b7:ef:69:f7:93:5e:28:9c:4e:
76:c1:c1:ba:b3:22:9e:bb:89:3b:07:22:e8:5c:35:
6e:18:47:9e:6d:2c:0d:f8:89:e6:74:19:1a:2a:0b:
62:c5:47:ab:f4:ae:40:8c:34:86:2a:6a:f3:7e:e5:
0d:16:2b:ce:bf:57:15:66:23:8d:4d:96:16:ee:15:
8c:73:60:16:7b:6b:35:8a:57:0d:df:5b:f3:97:99:
77:14:84:2a:a4:b9:9b:09:18:af:af:01:ba:97:c4:
72:38:29:8b:ae:28:5f:d3:26:d6:88:10:0d:9d:7f:
b8:47:a4:84:6a:e7:8b:9c:0d:fd:b5:38:bb:1e:1c:
5c:62:90:8c:01:bb:d0:4a:9e:cc:2c:fa:c3:0c:f2:
78:3a:51:67:16:eb:af:40:2b:a6:98:5b:dd:be:04:
cc:47:62:33:81:cb:40:84:9e:fa:5c:e3:75:19:02:
51:56:6b:4b:7b:3e:ee:2a:fc:16:9e:1e:10:ce:fc:
de:22:06:c7:39:0f:eb:c6:76:40:38:0e:4e:7c:e6:
fc:84:70:ef:91:67:c2:0f:95:69:8e:ac:30:69:31:
15:bc:27:68:90:80:e0:1d:a0:dd:b8:09:55:e7:b6:
05:86:a3:6e:8c:66:df:31:20:e5:01:80:bb:35:99:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3F:58:20:58:9B:83:C2:F2:59:90:24:A0:41:CE:EE:0D:3C:B1:79
X509v3 Authority Key Identifier:
keyid:9D:13:53:C8:0B:88:35:EE:9E:AD:37:EF:7E:9F:64:21:0A:77:3B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRNTyAuINe6erTfvfp9kIQp3O_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/25a625-649c-4a11-b7eb-a43d99fe11e1/1/nRNTyAuINe6erTfvfp9kIQp3O_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f2:23:38:09:ed:6d:45:11:90:ab:f7:66:3c:95:33:97:f6:
23:e7:0c:cd:27:8f:ad:f4:8e:57:66:51:07:c8:d0:c9:3a:f9:
a8:d9:16:1a:e5:05:61:87:3f:cf:0c:33:00:33:d5:7b:11:a6:
ae:ba:2a:8a:6c:54:a8:c1:89:65:13:da:a7:35:8f:27:92:a5:
7d:98:26:b1:b0:a6:d4:50:a4:23:5c:05:a9:b0:97:2a:0a:43:
7a:ca:55:63:da:3d:27:f5:e5:14:24:cc:cd:6f:ac:ed:17:0c:
e9:3d:42:55:0b:8f:75:de:e1:38:fe:13:c3:09:f5:5c:8f:73:
33:85:1e:ce:84:02:d4:cb:67:cb:d5:01:00:a1:fb:ea:b1:ed:
03:8f:9b:78:a4:ae:49:a7:84:93:6a:0b:ce:af:0c:07:5d:5a:
85:68:f3:80:ff:10:e6:71:26:b9:1c:c0:1b:b9:a1:7c:b9:a9:
40:8b:dc:4a:23:14:50:3d:d8:09:82:32:71:11:f9:69:a9:39:
fc:71:f9:4f:38:d0:28:d7:e9:32:ed:e8:bb:81:48:65:2e:6c:
9a:5e:cf:ec:a2:eb:30:7b:4b:fc:db:fd:c2:f5:a7:b3:bf:a5:
ae:71:21:3f:1d:84:98:ab:c4:b8:14:e9:fd:68:05:a7:d3:15:
7a:b6:8a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:39 2025 by rpki-client