Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier: sXkqStF8N1kkoQkT54xhM1IAKn1YTXoKnps1ZuSBAdA=
Subject key identifier: E8:EA:92:F7:13:3C:1B:5B:85:F4:BA:C2:B5:92:A7:13:F4:1E:7A:FC
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial: 0199221F55BAEE2D16B7C1B7989EFD674C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 03:01:42 +0000
Manifest this update: Sun 07 Sep 2025 03:01:42 +0000
Manifest next update: Mon 08 Sep 2025 03:01:42 +0000
Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: dFp1yOVi0IVHkaobWnlCEadNTmDg0gpjGr5qEQL2sII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:55:ba:ee:2d:16:b7:c1:b7:98:9e:fd:67:4c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Validity
Not Before: Sep 7 03:01:42 2025 GMT
Not After : Sep 8 03:01:42 2025 GMT
Subject: CN=e8ea92f7133c1b5b85f4bac2b592a713f41e7afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:6f:45:63:49:a5:b8:85:2a:65:a9:3e:ee:
4a:ab:5d:22:90:10:3f:5a:40:fe:77:95:46:f6:fb:
20:e2:0e:df:4c:77:02:1b:76:8f:f8:dc:5e:e4:c9:
17:ae:80:78:2d:2a:fd:6a:b9:f6:a1:19:4b:75:93:
df:83:4f:3b:10:75:56:09:09:59:0d:84:e7:7d:88:
09:d2:b2:f6:33:cf:ee:04:45:34:db:10:09:87:ab:
4c:96:b4:9c:4c:48:70:16:bf:ad:dd:a9:29:40:fb:
85:af:77:ab:16:f3:8d:37:70:7a:33:8a:20:c9:34:
9b:e9:bc:39:39:a5:2b:d2:03:57:65:f7:ab:5b:10:
e4:ae:b3:36:84:85:39:37:8a:4c:d6:6f:c3:f9:b8:
8f:db:45:33:5c:e4:d8:40:af:3e:9b:db:27:8a:66:
25:27:e0:64:20:79:7a:d1:c9:7a:5c:30:eb:7e:c4:
4a:3e:54:49:a7:b7:3c:af:1f:4c:d3:98:67:6d:72:
b9:1e:30:68:e0:06:f4:c0:6c:63:1a:44:c2:aa:f0:
a6:82:91:62:90:af:62:4d:7d:ee:3b:8c:6a:16:99:
54:1a:cf:f2:21:3f:7f:4e:94:dc:4b:ed:b6:94:dc:
b5:6e:2e:f4:8b:7d:f6:0f:a5:12:21:a2:0a:79:7a:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EA:92:F7:13:3C:1B:5B:85:F4:BA:C2:B5:92:A7:13:F4:1E:7A:FC
X509v3 Authority Key Identifier:
keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:48:ba:f5:c4:c3:50:58:ef:bc:db:01:ba:c5:8c:60:0d:39:
23:34:d1:5c:e7:f8:28:51:4e:c7:83:cd:fd:e5:c8:7a:a3:30:
5d:25:73:2a:f5:1d:8c:7e:e2:45:72:43:b8:0a:f0:c2:8a:13:
38:ef:2e:85:0c:34:1c:6e:79:2a:65:b4:44:23:3d:b3:a4:25:
49:f9:47:5e:c3:be:f8:26:6f:41:75:e8:f4:5b:81:e1:1a:32:
05:6a:58:f9:bd:59:4c:d7:f6:a0:84:d8:50:45:b2:42:9b:50:
7e:19:1a:5d:b4:82:e0:6f:bb:6c:ae:75:f6:b7:e3:5f:40:52:
9c:a3:0d:b7:50:e8:2c:9c:1a:33:e7:f0:5c:3f:01:03:fa:2e:
f1:73:10:47:15:ec:08:2c:4a:d7:a9:3c:d4:14:a4:11:3f:5e:
8d:84:33:70:f2:20:e1:47:6b:70:be:ea:02:9f:ae:ab:88:1c:
7d:5b:ca:6f:05:4f:0c:c9:ee:da:8e:d1:6e:c1:3a:7d:25:a4:
6c:6d:9e:b7:80:c9:e7:6e:3e:30:e7:77:ec:ec:04:f4:0e:3a:
12:ff:17:db:6e:00:c2:67:8e:f2:7f:c0:c3:cb:8f:11:d9:a8:
8d:67:60:8c:e5:6b:e8:25:b9:5d:85:85:b6:86:a6:8d:4b:fa:
00:d4:2d:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiH1W67i0Wt8G3mJ79Z0yCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjMyMjk0NGIwNDhiNzA1N2U0NWVkMmNiMzQxYjU2MGUw
YWM2YzMwHhcNMjUwOTA3MDMwMTQyWhcNMjUwOTA4MDMwMTQyWjAzMTEwLwYDVQQD
EyhlOGVhOTJmNzEzM2MxYjViODVmNGJhYzJiNTkyYTcxM2Y0MWU3YWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cBvRWNJpbiFKmWpPu5Kq10ikBA/
WkD+d5VG9vsg4g7fTHcCG3aP+Nxe5MkXroB4LSr9arn2oRlLdZPfg087EHVWCQlZ
DYTnfYgJ0rL2M8/uBEU02xAJh6tMlrScTEhwFr+t3akpQPuFr3erFvONN3B6M4og
yTSb6bw5OaUr0gNXZferWxDkrrM2hIU5N4pM1m/D+biP20UzXOTYQK8+m9snimYl
J+BkIHl60cl6XDDrfsRKPlRJp7c8rx9M05hnbXK5HjBo4Ab0wGxjGkTCqvCmgpFi
kK9iTX3uO4xqFplUGs/yIT9/TpTcS+22lNy1bi70i332D6USIaIKeXpJ9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjqkvcTPBtbhfS6wrWSpxP0Hnr8MB8GA1UdIwQY
MBaAFJzzIpRLBItwV+Re0ss0G1YOCsbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzkt
YjNjNWMwOTMzZDk3LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzktYjNjNWMwOTMzZDk3
LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0i69cTD
UFjvvNsBusWMYA05IzTRXOf4KFFOx4PN/eXIeqMwXSVzKvUdjH7iRXJDuArwwooT
OO8uhQw0HG55KmW0RCM9s6QlSflHXsO++CZvQXXo9FuB4RoyBWpY+b1ZTNf2oITY
UEWyQptQfhkaXbSC4G+7bK519rfjX0BSnKMNt1DoLJwaM+fwXD8BA/ou8XMQRxXs
CCxK16k81BSkET9ejYQzcPIg4UdrcL7qAp+uq4gcfVvKbwVPDMnu2o7RbsE6fSWk
bG2et4DJ524+MOd37OwE9A46Ev8X224AwmeO8n/Aw8uPEdmojWdgjOVr6CW5XYWF
toamjUv6ANQtZg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:47 2025 by rpki-client