Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File: Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier: 8sDsX9JdmAQcjbPnzLJAFNvNJsWslNhdXG7UpxKg2Fw=
Subject key identifier: A5:4A:70:41:D1:7A:2A:77:1A:4A:B3:8A:4E:F4:12:D6:58:32:53:B8
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer: /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial: 019A7225BCB988DAD7435240C5C306EF8393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:07 +0000
Manifest this update: Tue 11 Nov 2025 09:01:07 +0000
Manifest next update: Wed 12 Nov 2025 09:01:07 +0000
Files and hashes: 1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: zYVw2Ks2cEQh8muB3S4adwXWeA3RMz9KWtUERrzvBE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bc:b9:88:da:d7:43:52:40:c5:c3:06:ef:83:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Validity
Not Before: Nov 11 09:01:07 2025 GMT
Not After : Nov 12 09:01:07 2025 GMT
Subject: CN=a54a7041d17a2a771a4ab38a4ef412d6583253b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:c1:b4:68:fe:2f:1c:00:2f:81:75:eb:7d:
33:f3:1a:66:bc:82:39:11:12:c0:f6:36:1a:08:06:
36:c3:53:a5:3e:0e:67:53:6a:e5:11:59:3a:71:d3:
39:a2:52:4f:b2:43:7d:d4:e0:b8:1c:e0:00:b6:f1:
0d:5c:c2:33:71:84:18:55:70:e8:65:41:ff:0f:02:
1c:7e:83:77:3f:44:93:e3:79:8d:7a:24:dd:7d:1a:
e0:fb:32:0b:1a:6a:cb:bc:37:44:06:6f:c5:76:f0:
69:6f:e7:e3:c3:f5:21:f3:4f:13:90:c1:da:48:a1:
14:3f:ac:1c:12:8f:a1:1b:9b:e4:7f:55:6c:69:9d:
9e:4f:03:78:63:dd:46:4f:ae:66:34:09:31:3d:3f:
da:c8:f0:71:8e:e5:62:c4:3d:bb:d8:b2:d2:81:9a:
69:79:86:8b:ae:36:e3:c4:e5:52:03:af:9c:42:37:
26:9a:0d:0e:30:04:45:dc:15:61:96:e0:94:e9:f3:
ca:8e:bb:5f:1c:97:ce:1b:50:cb:04:19:0c:90:dd:
1a:f1:a9:6f:60:e9:de:30:33:a0:54:48:2c:44:4d:
cb:56:3c:a4:9d:1d:05:ab:0f:6e:dc:03:5d:14:cd:
52:46:16:12:39:17:7c:65:f0:40:bc:80:c7:68:e2:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4A:70:41:D1:7A:2A:77:1A:4A:B3:8A:4E:F4:12:D6:58:32:53:B8
X509v3 Authority Key Identifier:
keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7b:8c:f1:8b:80:63:54:33:e7:99:88:a3:bc:c0:f4:5e:b8:
85:77:28:bf:01:e7:fe:38:a7:35:07:96:27:c3:1e:63:34:8b:
cc:51:84:9e:cc:09:27:60:fc:cd:44:e0:5a:35:2b:e0:e5:b9:
b1:1a:8b:06:2d:f2:f0:1c:53:b5:f1:3d:5b:1e:23:37:7f:d1:
95:99:4f:fe:dc:44:34:d9:5d:87:2c:bc:4c:8f:44:a7:d9:ac:
1e:21:e6:38:66:25:04:96:58:64:a2:f3:71:b4:96:1e:10:2e:
98:52:ca:c9:ae:c8:52:ed:47:fc:ad:b6:8f:0c:35:5e:4f:0b:
7a:92:cf:7a:61:de:14:91:2e:2b:8b:84:2e:76:68:18:10:23:
78:13:10:77:58:99:3a:24:dd:be:10:da:07:07:07:64:22:d6:
c9:3c:e4:3c:4c:d3:7f:bc:5f:ec:e6:5d:83:bc:80:04:22:8f:
ec:e5:40:23:b0:7a:21:30:50:73:45:80:1a:b9:b5:d3:8e:02:
76:58:05:60:f2:1c:ab:e1:81:03:de:3b:16:0d:95:20:b2:d4:
d5:ae:85:36:02:06:7e:ff:7c:6d:0d:da:eb:35:4f:98:45:21:
8c:fc:cc:91:a7:7d:06:f6:18:d2:a1:f4:c5:21:28:da:c7:fc:
b0:0c:0d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:15 2025 by rpki-client