Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier: 13rKsVVfD11zSCLoaPbhBoVFvZ+m4Y0TNIL7hmhMdDY=
Subject key identifier: 65:55:96:66:A4:61:EE:E3:53:76:2D:79:FD:6F:DE:FF:B9:0D:F4:F9
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial: 019A4F62B949A609D1E79959F4F75373298E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number: 03FB
Signing time: Tue 04 Nov 2025 15:01:01 +0000
Manifest this update: Tue 04 Nov 2025 15:01:01 +0000
Manifest next update: Wed 05 Nov 2025 15:01:01 +0000
Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: /DBksRGG7dUNfloh0k3iifVvJbO7C6ja7J87tmL6GQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b9:49:a6:09:d1:e7:99:59:f4:f7:53:73:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Validity
Not Before: Nov 4 15:01:01 2025 GMT
Not After : Nov 5 15:01:01 2025 GMT
Subject: CN=65559666a461eee353762d79fd6fdeffb90df4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:77:ed:b3:94:34:65:62:f6:b4:50:db:a5:
aa:45:11:61:0e:43:43:94:74:e6:1c:3e:9c:64:00:
fc:73:cd:74:57:6a:2a:3f:d7:68:cc:11:9e:89:2d:
1e:ce:1d:32:2d:b3:35:85:22:7e:5b:f0:db:21:40:
da:88:a1:9e:57:8d:e9:77:fd:ca:2d:c6:9f:40:fb:
98:96:3b:73:a9:2b:d5:79:57:d2:00:1b:a5:d3:e7:
56:b2:5f:d4:de:08:80:38:38:26:53:83:45:9a:93:
35:39:91:d2:8f:d8:d3:71:cf:9e:92:6c:1a:f6:37:
8a:62:5b:ec:69:9f:6b:ed:bf:ea:f2:87:19:ee:a9:
6f:97:b1:08:7c:87:9f:5c:a0:92:b7:07:00:f5:d9:
db:05:2e:27:e6:03:64:66:e1:d6:c5:77:ba:c0:8a:
03:91:3c:58:29:4d:a8:e8:64:45:cd:c7:ec:75:91:
a1:68:8a:a3:8b:30:93:7a:ee:7e:96:54:e4:55:92:
e8:48:50:70:1a:42:b9:07:c1:ee:86:01:77:e2:60:
83:96:73:66:14:15:0d:80:02:d2:c6:76:c2:cf:db:
6e:a6:d0:9a:56:d8:96:b1:cf:50:48:c6:2c:73:34:
a8:9e:92:56:b8:4b:17:af:51:f5:63:3f:3a:bf:e5:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:55:96:66:A4:61:EE:E3:53:76:2D:79:FD:6F:DE:FF:B9:0D:F4:F9
X509v3 Authority Key Identifier:
keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:58:d3:f0:b5:1a:a8:c5:1b:5f:27:04:1a:6c:07:d8:1c:76:
67:bc:1d:ab:74:57:a3:26:c5:a0:bc:23:78:97:0d:29:aa:4f:
6d:10:1f:d8:ff:77:7f:c4:a9:bd:65:43:5a:84:88:79:bf:6b:
6e:e7:d8:5f:0e:e9:31:ca:87:70:01:39:f1:4d:34:74:03:de:
3f:da:65:d3:4d:44:40:fb:f5:e6:08:4a:a9:cd:d2:a2:3c:85:
1c:fa:c5:aa:b3:6d:ac:53:8f:ea:4b:ac:c3:54:cf:00:f3:49:
d1:dd:cf:f4:f6:2a:98:9d:9e:6a:7b:9e:3a:e6:d2:f0:73:8b:
d1:9c:f7:34:83:c0:19:0f:81:0e:f0:bf:3c:ca:85:9d:af:93:
bb:4d:0d:97:80:b6:b6:ab:69:70:11:bb:11:7b:60:85:e9:e0:
88:2e:ce:3b:77:a8:79:ca:0e:2b:b5:9e:a3:02:0f:89:40:0c:
e3:9c:c0:dd:44:2c:a7:a8:c7:f9:ff:1f:bb:6d:82:91:bc:74:
e4:d8:80:cb:18:a3:2a:fa:d4:07:e4:56:67:e1:a3:65:69:8c:
de:9d:ac:07:97:8c:ba:cb:21:b6:c7:15:c3:40:3d:b6:13:19:
b3:67:9c:28:7f:e3:5f:62:1d:cb:11:d4:25:3b:9a:89:51:b5:
0e:4a:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:57 2025 by rpki-client