Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: 9uYcZeeohZ6SZ4sDtjiklyjFTY/ZZGoY1MVrk7vVyB0=
Subject key identifier: BB:BB:3A:7D:20:21:31:0D:B4:30:00:C7:8B:35:1F:2B:57:6B:14:EC
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 019A4C613503BB198B930947779C95416322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 1156
Signing time: Tue 04 Nov 2025 01:00:30 +0000
Manifest this update: Tue 04 Nov 2025 01:00:30 +0000
Manifest next update: Wed 05 Nov 2025 01:00:30 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: EY89ruhCoizjeqDrWG9fvuGaxdy+LDkBg1grSDq6s0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:35:03:bb:19:8b:93:09:47:77:9c:95:41:63:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: Nov 4 01:00:30 2025 GMT
Not After : Nov 5 01:00:30 2025 GMT
Subject: CN=bbbb3a7d2021310db43000c78b351f2b576b14ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:b6:3f:8f:f0:db:d5:00:0c:2f:09:3d:36:
52:fd:5a:86:cc:ab:f1:b3:84:19:3a:27:8c:a8:05:
7f:34:0f:a4:0d:54:29:e2:ff:be:ba:28:bc:a1:66:
70:48:d1:94:c7:99:d1:08:b4:db:07:eb:dc:e9:1e:
89:4f:d7:8d:32:04:fc:55:ac:55:02:af:2f:63:52:
6b:69:f6:47:a7:86:bf:6a:64:a3:6b:df:d1:e5:a5:
69:79:26:7a:86:d0:45:db:2e:a8:17:d5:17:03:5d:
0c:5e:1f:50:6f:58:17:bf:12:19:79:21:5a:91:d4:
56:8d:60:d3:0c:5e:b9:5c:09:3d:41:69:f8:eb:3c:
12:87:c6:e9:a8:9a:67:c1:97:28:ab:c4:22:53:07:
d2:83:e5:db:5a:67:7f:e8:c5:e0:f1:4e:50:24:9d:
b3:9d:58:d7:c6:7b:65:4b:47:16:b1:e8:80:9a:89:
db:55:31:b9:86:5c:96:74:8f:b4:a4:cf:fc:ca:bf:
78:f3:a5:5e:e8:8a:ad:10:b9:e8:25:08:9d:06:f7:
6e:5d:de:cf:c8:bd:10:12:f6:26:f5:49:77:8f:39:
92:a1:02:59:1a:48:e9:c4:bc:a4:3d:b4:00:df:21:
2b:e5:b0:0e:d7:a0:a8:ab:bc:2b:2a:24:ab:07:8f:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BB:3A:7D:20:21:31:0D:B4:30:00:C7:8B:35:1F:2B:57:6B:14:EC
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e8:07:96:1d:aa:13:16:c2:99:7f:47:cf:09:e5:1e:5b:68:
17:03:a7:74:1d:3b:90:6d:a1:7a:4a:45:66:82:cf:f9:de:1b:
c9:e9:ac:48:e0:0e:8d:88:b6:66:aa:b3:f7:f3:00:fe:8c:80:
bd:19:37:7c:a8:11:52:cd:89:f7:2e:1c:f3:18:f8:e3:09:f9:
9c:9c:f1:58:50:95:90:6d:54:bd:6f:ca:98:34:5d:39:b5:46:
cc:bb:56:29:10:1f:3b:9e:76:23:d7:bd:9d:79:3a:f5:c2:6b:
94:bb:16:d4:b5:e0:12:e1:0e:14:71:9d:84:ff:01:2b:e4:ca:
7e:06:3b:15:77:5b:59:5c:e5:6c:ff:81:22:7d:17:24:57:20:
e6:5c:ab:96:e9:49:7a:e9:5a:38:d4:ab:bd:bb:71:cd:29:34:
89:9c:f0:f3:5d:f1:60:97:4b:81:85:f9:a4:98:70:cb:99:e4:
3c:4f:55:81:68:20:78:a7:10:4b:88:c5:6b:e2:d6:6b:3a:4e:
67:02:71:27:b1:f9:2c:e5:1d:a1:27:08:cd:a7:5c:55:da:8d:
a9:68:7a:dd:b6:56:0e:90:6f:cf:f6:92:7c:bc:bc:7d:4e:9a:
29:7a:3e:47:3f:dc:fb:bf:e6:47:7d:82:9e:28:a2:a1:11:5e:
1e:1a:48:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:20 2025 by rpki-client