Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
File: nEbB13YgBThO2FJs-hx0llZPUNM.mft (raw, json)
Hash identifier: hxy2XIwUUJVMUPFxaTMsTkxn9R/sHHVDZtO7UfiZ+XQ=
Subject key identifier: 33:91:71:48:39:5A:56:3F:31:6C:1E:B0:E0:B2:47:2A:93:E9:51:CB
Authority key identifier: 9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
Certificate issuer: /CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Certificate serial: 019A70A5628A496E6CD3B21B4061930299F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
Manifest number: 05B7
Signing time: Tue 11 Nov 2025 02:01:18 +0000
Manifest this update: Tue 11 Nov 2025 02:01:18 +0000
Manifest next update: Wed 12 Nov 2025 02:01:18 +0000
Files and hashes: 1: nEbB13YgBThO2FJs-hx0llZPUNM.crl (hash: v4YRYEEnIMy4iBNlxWFAx6pCsqNW6sGVMJA54ZOx/vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:62:8a:49:6e:6c:d3:b2:1b:40:61:93:02:99:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Validity
Not Before: Nov 11 02:01:18 2025 GMT
Not After : Nov 12 02:01:18 2025 GMT
Subject: CN=33917148395a563f316c1eb0e0b2472a93e951cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:ae:95:dd:1a:80:8a:f6:d5:98:e4:be:02:
aa:a4:79:ea:5c:e5:d7:47:c1:9f:0a:8b:f8:33:aa:
1c:5f:37:ed:f4:af:6e:08:98:be:2c:e2:1d:97:fb:
cd:b4:a1:84:ce:12:dc:09:da:5c:e1:32:7b:ee:9a:
c8:8d:6a:c3:ae:22:80:1e:72:ab:52:9c:68:87:62:
e4:93:62:ea:48:3e:89:a0:a6:ab:fe:61:2f:91:06:
c3:07:f5:9a:d5:69:5e:8a:69:06:60:e6:e6:68:12:
7f:ce:ba:1c:ac:08:87:59:f9:7b:92:52:4c:d4:1f:
6d:ba:28:5d:0b:80:cb:a7:e8:aa:fb:69:90:ff:fc:
dc:a6:23:6e:fe:55:26:89:fc:14:4e:84:4e:61:d9:
bc:f0:db:2f:d1:91:a0:d8:69:08:7b:c7:02:af:ba:
76:85:03:ed:28:c5:0a:c0:d2:d6:b6:ee:62:c3:c2:
13:cb:6a:0c:c8:e3:86:f8:3c:59:6e:9d:4e:94:0c:
2a:31:6b:a1:43:76:f0:9e:ac:b2:c6:b2:db:21:36:
cd:e4:bc:49:67:2f:1c:56:27:f2:a5:a3:5c:3c:1f:
ab:ce:3e:77:ec:fd:de:23:68:f3:fe:d7:00:6e:70:
cc:b5:68:24:0d:0b:21:40:4b:6b:83:9c:6b:da:de:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:91:71:48:39:5A:56:3F:31:6C:1E:B0:E0:B2:47:2A:93:E9:51:CB
X509v3 Authority Key Identifier:
keyid:9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:00:20:29:57:a9:8d:f8:cd:e6:5e:d5:16:ba:18:7e:5b:67:
26:e8:24:b3:4e:3b:a1:51:11:1c:99:08:0b:72:cd:11:02:9e:
6d:f7:5b:78:68:42:60:3d:af:ce:80:b0:67:d4:0d:c4:fc:4a:
5c:46:18:45:06:d5:57:4f:47:fa:2b:e0:a8:d7:b4:e2:86:2b:
f2:d1:d6:dd:98:16:67:cd:ef:c2:dd:23:57:0d:44:9d:96:98:
c9:ae:d0:10:57:cd:43:2e:e2:05:44:18:63:ee:d5:37:ea:3e:
ec:8e:0a:d2:3e:0c:9b:e8:6b:4e:8d:58:ac:f2:df:a9:7e:2f:
71:6d:4f:7b:6a:31:a2:54:57:69:d0:82:c1:16:17:d1:ae:4b:
23:eb:f0:b9:7f:44:84:f2:67:e8:e9:e9:1a:b5:0a:23:59:a6:
3f:6a:19:64:23:c7:00:88:53:4f:d8:e0:a3:53:bd:73:02:31:
93:2b:05:7a:91:9b:02:b3:7a:78:66:71:1c:9c:07:f1:2c:01:
f6:09:55:3c:71:13:11:b0:7e:84:1c:ba:aa:61:90:f1:bd:a7:
fe:15:6b:67:44:c9:7e:bd:da:68:24:b0:b9:ce:a1:08:17:8e:
66:5a:01:d4:23:66:1a:fd:c7:25:a8:4a:15:6c:2a:53:64:f3:
d5:a1:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:39 2025 by rpki-client