Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
File: nzeBglGggdHMfzAVMg62NSZwm5E.mft (raw, json)
Hash identifier: b4emV1h99tdVM2FPa6JLlomZgCNxf6NnNvOiGEsn0Ug=
Subject key identifier: 46:98:D1:46:64:72:8D:43:4F:8A:E3:18:97:CA:C7:17:C1:F5:E7:BC
Authority key identifier: 9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
Certificate issuer: /CN=9f37818251a081d1cc7f3015320eb63526709b91
Certificate serial: 019A4EF51632B3F77F9BEF373EC4C7D68C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
Manifest number: 0776
Signing time: Tue 04 Nov 2025 13:01:16 +0000
Manifest this update: Tue 04 Nov 2025 13:01:16 +0000
Manifest next update: Wed 05 Nov 2025 13:01:16 +0000
Files and hashes: 1: nzeBglGggdHMfzAVMg62NSZwm5E.crl (hash: BFy/HU6+CDUqUcIQm1Ig+GPqnw2C27bTDeQkPukj86E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:16:32:b3:f7:7f:9b:ef:37:3e:c4:c7:d6:8c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f37818251a081d1cc7f3015320eb63526709b91
Validity
Not Before: Nov 4 13:01:16 2025 GMT
Not After : Nov 5 13:01:16 2025 GMT
Subject: CN=4698d14664728d434f8ae31897cac717c1f5e7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d9:37:e6:26:83:e3:46:b4:d8:f7:61:af:eb:
da:88:a4:16:bc:e7:f2:9e:ca:70:b1:47:b6:77:7d:
49:6f:c1:09:85:6d:d8:53:42:8b:87:f8:dc:16:fd:
57:5f:ba:05:49:b8:64:a4:be:39:82:c1:ae:65:6b:
67:54:95:27:99:56:1d:6f:dc:c1:76:af:42:a7:56:
7c:f8:b2:63:49:1b:03:d2:11:12:a8:57:8f:9a:54:
17:6f:f0:6a:2a:be:8b:6c:6f:5f:72:a4:24:53:9f:
8c:09:ca:f0:c4:a8:01:ef:4b:99:e1:67:72:a4:b2:
0a:da:c8:d2:81:80:0a:bb:c3:ae:08:b1:16:ab:9e:
58:3a:d0:3b:bc:12:00:ef:77:52:0e:57:b9:fa:15:
32:e9:a3:24:48:a6:df:c0:79:ff:63:1e:22:cf:6b:
1c:f5:d9:af:9b:be:36:87:3e:7e:dd:1c:0e:90:ad:
57:fc:c0:60:9e:bc:7c:5e:1d:7f:5f:1e:7e:66:68:
47:45:09:e8:ee:1d:d8:85:7d:57:73:2f:96:19:0f:
8b:d2:e5:b2:60:52:c3:b1:db:99:99:51:a7:33:52:
bf:cf:71:f7:42:81:e0:92:e5:75:30:0d:99:b7:ab:
dd:bd:59:ab:69:ab:6b:31:00:a3:e8:1c:1c:33:47:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:98:D1:46:64:72:8D:43:4F:8A:E3:18:97:CA:C7:17:C1:F5:E7:BC
X509v3 Authority Key Identifier:
keyid:9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:16:d1:72:2d:3b:91:c1:a7:37:80:cc:67:15:4a:c5:26:d9:
aa:eb:7f:f8:c4:5c:2d:0b:ce:f6:d9:8d:59:d2:d4:55:4e:b9:
d7:ca:8c:4c:27:de:eb:e4:a8:8f:69:de:8b:34:a3:2a:a2:09:
4f:87:f8:1d:25:a4:5c:f7:8a:e3:4c:ab:09:4c:f4:ed:8e:8b:
76:be:1c:b9:6b:19:75:4e:50:7d:10:26:42:c3:0f:94:17:dd:
f4:9f:e3:5e:89:01:f9:34:d5:e1:13:6c:df:30:12:ce:8f:63:
c5:92:2d:cd:9d:6a:23:87:2c:9d:b7:c3:4b:95:ca:e6:db:75:
96:1a:d8:7c:fd:0f:b3:da:2d:c2:ab:ab:70:e1:78:c0:92:a6:
18:f0:f8:65:f5:1b:80:41:5c:68:3e:65:45:ff:cb:b8:a5:ba:
45:78:80:6d:5b:d5:08:8b:45:20:05:d2:3f:0c:6f:18:a6:03:
a8:d9:58:81:2e:b1:2e:44:9e:9a:f4:f5:6d:46:ca:c5:b7:80:
54:c1:d5:65:fb:a7:eb:5a:d9:1d:fe:a2:e9:46:ca:60:e9:ee:
08:69:30:8f:5e:f7:7e:a4:24:41:e0:1f:7c:ff:c5:de:96:a4:
87:e5:31:b6:0e:0f:80:57:b6:5b:a3:c4:8e:13:61:f1:8b:2b:
0f:a5:dc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:34 2025 by rpki-client