Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier: HtsOtc1r9tzVdN8dU8Ap6ZkFqx8c4Gv98nUMUtHBlow=
Subject key identifier: 30:08:15:F2:19:C5:7B:9B:68:34:FB:8F:54:79:75:6C:95:13:08:85
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial: 019A722659640B49ED7E6E1B95BCC67CBD02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 09:01:47 +0000
Manifest this update: Tue 11 Nov 2025 09:01:47 +0000
Manifest next update: Wed 12 Nov 2025 09:01:47 +0000
Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: Cay6INbwjxNjioV2TaLFGQuAMWuC2XLz5G2i2Q6HYS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:59:64:0b:49:ed:7e:6e:1b:95:bc:c6:7c:bd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Validity
Not Before: Nov 11 09:01:47 2025 GMT
Not After : Nov 12 09:01:47 2025 GMT
Subject: CN=300815f219c57b9b6834fb8f5479756c95130885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:ef:da:bc:92:c8:13:ac:5a:d9:3b:ec:71:
1a:fc:ab:96:75:9f:59:9c:7e:0c:f9:61:9c:1a:0c:
01:48:39:80:10:cb:84:69:82:11:f4:ef:b4:9e:a6:
82:37:fd:c5:35:1d:7a:87:48:a7:e3:cb:0a:e9:5e:
07:f2:a1:4b:9a:9b:03:5a:3e:6a:19:16:ac:8a:2f:
b0:92:e4:7c:5a:b6:08:3a:c6:ec:af:31:8d:1f:c9:
12:c8:f2:93:7c:31:ab:6c:d9:d1:00:ce:05:19:0d:
2e:bd:25:34:dc:24:bd:a5:00:b9:92:72:fc:6a:96:
31:40:05:6a:f1:e8:c1:e0:db:d8:22:96:54:88:cb:
f2:36:77:bf:99:79:e1:22:6d:de:41:c2:e4:69:33:
9d:6f:39:68:c3:32:9d:46:5e:6c:1f:e4:b9:54:19:
e8:a3:8c:64:ef:66:54:c1:55:7b:85:33:ca:01:fb:
eb:62:a4:07:fa:88:8a:d3:48:21:94:9e:16:e7:5a:
ab:6a:5b:6c:cb:83:c3:7d:12:3a:cb:a6:e8:8c:28:
cd:3d:c6:22:8e:10:c7:a6:b6:b1:78:4c:0a:bd:42:
b9:30:cb:b4:16:b9:56:9f:a9:8a:03:eb:b7:96:64:
01:35:7e:0b:e5:f3:34:08:43:7e:d6:b4:6f:6b:0f:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:08:15:F2:19:C5:7B:9B:68:34:FB:8F:54:79:75:6C:95:13:08:85
X509v3 Authority Key Identifier:
keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ff:26:4d:c5:dd:96:4c:97:55:20:09:ac:14:00:ce:bc:53:
95:a7:1b:74:e8:f7:6b:9c:21:07:3d:f0:c7:67:5c:28:d4:fd:
a4:ec:ea:29:93:94:6a:b2:bc:f4:a5:93:86:9f:77:44:1c:b3:
34:4e:68:7e:f3:16:2f:3e:e5:87:ee:dd:87:ba:08:a3:4a:1c:
85:db:2e:e5:c0:eb:52:b2:1d:d8:85:65:b0:9f:aa:e2:b2:9a:
70:be:46:3a:a6:be:b0:f7:67:c5:d8:ab:d2:74:3c:b0:a7:7d:
d8:b9:7a:b2:91:18:3a:fd:76:39:89:16:59:77:fd:fe:b9:f9:
89:14:97:1f:8e:1c:08:23:08:e0:d7:0c:df:71:50:27:bd:4d:
00:71:ba:c2:b9:51:51:45:30:d1:28:9c:17:56:1b:74:82:b8:
f0:da:9e:4a:78:db:af:2f:35:48:c7:d3:c0:ea:61:bd:a3:df:
37:70:0a:a9:30:2e:3c:6e:e8:13:1d:fd:6c:43:3f:5e:b1:d9:
12:e8:30:db:de:21:ab:0f:ec:27:97:23:0d:c7:53:34:19:5d:
86:d8:7e:1c:01:c7:e1:ba:7b:83:f6:87:a6:76:27:2b:0e:09:
f0:d9:29:94:7b:7b:95:a8:66:26:cf:5a:ff:8b:5e:69:b9:2f:
d7:ed:e6:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJllkC0ntfm4blbzGfL0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMmM1M2FiNjEyZGQ4M2NkMTE2YmIxM2M3NTBkN2UyYjBk
Njg5MDQwHhcNMjUxMTExMDkwMTQ3WhcNMjUxMTEyMDkwMTQ3WjAzMTEwLwYDVQQD
EygzMDA4MTVmMjE5YzU3YjliNjgzNGZiOGY1NDc5NzU2Yzk1MTMwODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEHv2rySyBOsWtk77HEa/KuWdZ9Z
nH4M+WGcGgwBSDmAEMuEaYIR9O+0nqaCN/3FNR16h0in48sK6V4H8qFLmpsDWj5q
GRasii+wkuR8WrYIOsbsrzGNH8kSyPKTfDGrbNnRAM4FGQ0uvSU03CS9pQC5knL8
apYxQAVq8ejB4NvYIpZUiMvyNne/mXnhIm3eQcLkaTOdbzlowzKdRl5sH+S5VBno
o4xk72ZUwVV7hTPKAfvrYqQH+oiK00ghlJ4W51qraltsy4PDfRI6y6bojCjNPcYi
jhDHpraxeEwKvUK5MMu0FrlWn6mKA+u3lmQBNX4L5fM0CEN+1rRvaw+K5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAIFfIZxXubaDT7j1R5dWyVEwiFMB8GA1UdIwQY
MBaAFJ4sU6thLdg80Ra7E8dQ1+Kw1okEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbml4VHEyRXQyRHpSRnJzVHgxRFg0ckRXaVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81ZTVmNDctZjYxNy00NTkzLTk3Y2Yt
OWE4MDI5NTlhMjQ4LzEvbml4VHEyRXQyRHpSRnJzVHgxRFg0ckRXaVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81ZTVmNDctZjYxNy00NTkzLTk3Y2YtOWE4MDI5NTlhMjQ4
LzEvbml4VHEyRXQyRHpSRnJzVHgxRFg0ckRXaVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArv8mTcXd
lkyXVSAJrBQAzrxTlacbdOj3a5whBz3wx2dcKNT9pOzqKZOUarK89KWThp93RByz
NE5ofvMWLz7lh+7dh7oIo0ochdsu5cDrUrId2IVlsJ+q4rKacL5GOqa+sPdnxdir
0nQ8sKd92Ll6spEYOv12OYkWWXf9/rn5iRSXH44cCCMI4NcM33FQJ71NAHG6wrlR
UUUw0SicF1YbdIK48NqeSnjbry81SMfTwOphvaPfN3AKqTAuPG7oEx39bEM/XrHZ
Eugw294hqw/sJ5cjDcdTNBldhth+HAHH4bp7g/aHpnYnKw4J8NkplHt7lahmJs9a
/4teabkv1+3mIg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:14 2025 by rpki-client