Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier: jcCQmKVerg/BDrL9HjZAKOFiH+IiLUJpMcHYZQcpcsI=
Subject key identifier: D8:71:08:00:2F:98:64:F8:B4:4C:AA:70:39:47:3A:B4:0C:90:3D:48
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial: 019A72267C64EDA90142062C8CEF91178830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:56 +0000
Manifest this update: Tue 11 Nov 2025 09:01:56 +0000
Manifest next update: Wed 12 Nov 2025 09:01:56 +0000
Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: b3tWuqaFMPy30XAhgqxLkfR3n1aePFGJDJ1MKfVL9O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7c:64:ed:a9:01:42:06:2c:8c:ef:91:17:88:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Validity
Not Before: Nov 11 09:01:56 2025 GMT
Not After : Nov 12 09:01:56 2025 GMT
Subject: CN=d87108002f9864f8b44caa7039473ab40c903d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fd:39:47:45:51:01:8c:db:89:b4:fe:50:21:
ac:65:d7:57:97:f2:bb:94:2f:6e:4d:50:ad:c2:02:
8f:bc:fe:7b:58:e5:2e:c9:e0:7a:ce:15:20:18:be:
24:85:0c:ac:b5:24:60:ea:a5:f6:41:03:bb:82:ce:
5e:fa:3f:ce:0e:5b:9f:f6:20:b9:e6:38:5a:e6:d6:
26:1d:68:18:ea:07:72:53:f5:d1:58:72:3a:5b:b0:
81:a1:63:8d:50:fd:2e:a5:01:a7:0c:0c:a1:9c:28:
a2:8d:39:a2:2d:61:a7:cb:96:e2:bd:40:d7:ee:3d:
70:8a:2c:25:ac:86:10:f8:3d:c4:fd:42:d8:7d:d7:
2c:cc:61:ce:f3:47:3e:a9:eb:52:67:9c:cb:f2:88:
c0:a0:74:63:92:35:b9:c6:31:73:b0:4b:02:48:9b:
f9:58:a7:12:85:29:cd:fd:09:92:ec:c7:46:f7:74:
85:51:9a:d0:6c:9d:fd:0f:a9:b5:cf:4f:1a:6b:0c:
69:37:7b:a4:49:65:de:0b:ce:4a:0a:96:44:43:93:
79:f0:40:9b:2d:9c:38:d4:44:37:ae:9b:f4:35:a0:
bc:a1:71:a7:f4:e9:cd:e6:00:1a:98:2d:49:ff:f9:
cb:ff:6e:25:93:8f:6f:a1:0f:3b:0e:cd:f9:4b:ca:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:71:08:00:2F:98:64:F8:B4:4C:AA:70:39:47:3A:B4:0C:90:3D:48
X509v3 Authority Key Identifier:
keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fa:11:b3:f9:52:d7:28:f8:be:9a:1b:7e:28:33:4d:56:b2:
45:7c:1c:ac:3a:0c:73:1a:0d:fb:0a:92:23:1e:8d:32:0a:9d:
b4:c5:df:14:88:89:9c:d0:ae:b5:dc:ca:aa:69:71:6a:3d:8a:
fa:b0:ca:d2:3f:19:e1:74:9f:01:c4:bc:f7:3a:09:d9:8d:1d:
94:8c:0a:f9:54:6f:78:7b:d1:0a:42:58:87:de:7e:a6:94:b0:
74:be:98:ca:14:76:22:d6:fb:7a:4e:af:66:61:b4:fc:1d:7c:
7e:e9:cc:db:aa:66:7a:3c:45:56:2d:b3:4b:ce:21:7a:16:62:
d7:db:d3:a5:f6:07:71:14:e1:0b:ee:0e:5c:1b:c0:f1:b1:ac:
d2:ce:30:70:55:18:cf:4c:6a:94:4e:d2:49:2a:05:44:ad:96:
96:44:b3:10:2b:5c:54:2f:cb:16:de:9a:b8:fa:da:fa:9f:d8:
1a:24:75:28:7d:ef:da:a5:79:08:64:82:22:11:fd:42:dd:d4:
e6:d8:64:77:e4:db:b1:8a:d6:c3:de:65:d5:82:de:bb:30:b0:
69:c0:68:9e:a4:21:4b:bd:54:3d:d2:1f:70:a8:47:25:5c:d1:
27:25:29:6e:ed:7e:38:45:f2:4c:44:d3:dc:df:53:81:74:05:
80:e0:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:45 2025 by rpki-client