Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier: 0XCN8V0TaoJ6jG+SUV4IQDzReY77aVsPo+LUxg4jDzE=
Subject key identifier: E8:82:28:E3:53:64:97:6D:2A:BE:13:57:FF:D6:43:8C:08:45:51:D9
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial: 019A72258521DD618EC096CE4DBFA42EFF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 09:00:52 +0000
Manifest this update: Tue 11 Nov 2025 09:00:52 +0000
Manifest next update: Wed 12 Nov 2025 09:00:52 +0000
Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: lCEIagmaWy1DT6WnZGsAWhGOLgn+8PQaK/Iau1BSKYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:85:21:dd:61:8e:c0:96:ce:4d:bf:a4:2e:ff:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Validity
Not Before: Nov 11 09:00:52 2025 GMT
Not After : Nov 12 09:00:52 2025 GMT
Subject: CN=e88228e35364976d2abe1357ffd6438c084551d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:5d:e1:44:81:1c:70:b6:03:2a:ff:1f:bc:
b3:d3:67:dd:7c:bd:bf:cc:a8:cf:a8:9f:e3:49:ff:
6e:5c:5d:0e:aa:69:e6:fa:5b:4f:db:38:ef:17:aa:
dc:90:37:04:f3:d9:36:5c:a0:be:75:ca:78:c4:9e:
66:e6:c1:5c:f1:38:01:fb:0e:0b:48:e1:ea:25:7f:
fb:69:d7:e0:2a:58:74:35:53:70:1b:9a:27:2f:b9:
3d:04:e5:81:a4:af:8c:a8:96:fa:3c:6d:fa:56:ef:
4b:28:94:c5:a4:b5:0a:44:48:df:5e:b1:96:13:6f:
64:a8:b3:cc:24:ed:3d:84:67:5e:90:cd:95:d2:10:
77:d0:f3:ab:bd:b5:9c:95:d8:cb:42:36:ea:38:c5:
59:ae:01:5a:20:99:99:5f:55:01:4e:12:ff:c8:b3:
55:6c:2f:bd:68:c1:65:48:02:ed:55:d7:22:9e:2e:
65:82:22:b0:7c:2f:5f:5b:73:74:2f:a5:11:b8:b4:
3f:5b:00:90:ee:a5:61:d6:fe:0b:2a:9e:a3:b8:6a:
57:87:29:71:62:33:79:64:70:2b:b4:5e:5a:b1:a8:
f8:7f:19:f7:8d:d9:d0:96:22:6a:fc:47:b5:39:61:
81:a8:af:ec:5c:07:be:c5:13:71:45:7d:3f:e1:5c:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:82:28:E3:53:64:97:6D:2A:BE:13:57:FF:D6:43:8C:08:45:51:D9
X509v3 Authority Key Identifier:
keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8f:65:8b:6e:6c:03:ed:37:ba:b0:c0:0f:90:8c:fa:e9:18:
a5:d9:6e:e0:29:d8:ba:6c:42:dd:4a:18:9f:34:a5:0b:1c:b4:
ca:45:7c:81:53:8f:4a:e1:1b:12:0e:2a:47:fa:0f:de:cb:9f:
85:10:61:ab:a5:cf:b1:8b:e2:96:86:74:bd:79:1f:9d:dc:4c:
d9:94:98:17:a6:78:36:21:b1:7d:f5:11:81:49:a8:94:97:75:
74:f7:69:23:9e:2a:c9:d2:ac:04:a6:49:2a:e2:2b:72:c4:f9:
d7:99:51:82:6e:cf:33:0f:d1:db:4a:ec:9f:65:35:5f:ae:36:
94:3d:b4:3f:9b:55:56:a5:d9:60:9a:30:9f:f1:dc:be:db:79:
67:34:99:fa:7f:4a:53:df:b5:b9:25:b6:96:22:3e:99:eb:45:
c3:6f:f0:0d:99:81:5a:6d:43:fa:c7:f0:40:c2:d6:a3:41:75:
db:c7:cb:7d:71:63:92:59:f0:77:4b:bc:7a:fe:b3:7a:24:f0:
f3:55:9f:62:bc:bb:d3:a9:99:a6:17:c2:02:3f:e9:a6:a7:25:
ad:50:2b:ab:4e:dc:9b:84:32:0d:17:49:20:ac:84:58:bf:b6:
d6:b6:20:99:ff:fd:66:21:5c:2e:c7:c0:d9:65:00:a5:4d:f0:
95:0c:2a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:45 2025 by rpki-client