Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
File: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft (raw, json)
Hash identifier: TsJC+8FFG1DJjYWB7054ismXw2PFYrXbynigQRzXLeQ=
Subject key identifier: 1E:D6:4B:9B:2C:AD:86:FD:DE:83:25:E8:11:CC:C2:21:B2:70:85:4A
Authority key identifier: 9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
Certificate issuer: /CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Certificate serial: 019A50749FF5D4C9BE9677B995D9DF28B2F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 20:00:11 +0000
Manifest this update: Tue 04 Nov 2025 20:00:11 +0000
Manifest next update: Wed 05 Nov 2025 20:00:11 +0000
Files and hashes: 1: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl (hash: 2uia133apHfIlxXmJdPrN3qjtmrprmaQF2rEFHfsTFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:9f:f5:d4:c9:be:96:77:b9:95:d9:df:28:b2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Validity
Not Before: Nov 4 20:00:11 2025 GMT
Not After : Nov 5 20:00:11 2025 GMT
Subject: CN=1ed64b9b2cad86fdde8325e811ccc221b270854a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:2f:97:69:ac:03:f7:9a:de:d8:44:5f:d4:
d2:8c:b5:57:e4:fc:ed:63:87:76:86:ae:22:a8:18:
22:b7:25:5b:f8:88:58:dd:ae:08:09:cb:f4:84:8f:
73:5f:6b:87:83:4b:81:36:44:37:35:80:1f:f5:ae:
25:24:ba:4e:a5:64:20:71:bb:7d:ca:65:2f:bd:22:
c2:8a:f5:13:49:ca:34:44:23:0b:17:64:8f:b0:ed:
38:c3:6c:43:54:26:07:1d:f1:31:f6:1c:93:5e:e5:
82:a3:ff:ed:a9:15:f3:ab:6c:2a:a5:0e:95:b7:37:
23:3a:a3:ee:f5:5e:fa:54:c6:78:67:ac:a2:43:1a:
83:d5:95:09:8a:9f:6d:0c:0d:5a:b7:c6:6b:45:17:
1a:74:a3:c2:72:5b:75:53:b7:9c:1f:f5:8a:dd:ae:
78:be:d6:90:3a:9c:03:43:d7:90:fb:03:bc:a0:56:
21:8d:8d:b8:77:a4:32:d4:ab:d4:84:c2:b4:73:a2:
6d:d5:fb:da:ce:97:2f:c7:0e:d1:45:cd:0b:07:b8:
64:54:df:26:c1:90:21:c9:61:8b:df:53:53:70:1f:
39:65:ca:e1:1f:f6:c3:58:3a:2b:60:03:b1:43:65:
f3:f2:2e:a6:e5:da:21:59:be:b9:0e:0a:65:19:f9:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D6:4B:9B:2C:AD:86:FD:DE:83:25:E8:11:CC:C2:21:B2:70:85:4A
X509v3 Authority Key Identifier:
keyid:9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f4:b5:96:0c:4e:91:58:d4:27:8b:20:e5:03:74:e5:a4:6a:
e7:56:00:8f:87:22:55:52:18:fa:2b:85:74:19:86:87:49:82:
9e:0a:48:61:34:77:90:d6:f1:a1:db:dd:63:b7:e7:b8:f2:bb:
7e:ce:05:54:3b:27:09:0d:e1:c4:a2:07:51:13:b8:88:7d:54:
c1:b5:28:79:28:60:a1:20:da:6d:a2:54:86:1a:38:a7:33:ff:
ee:c5:2f:c8:2e:4b:66:70:99:02:12:6c:4b:de:fe:c7:33:e8:
00:43:41:e4:42:47:b9:66:60:ac:00:7b:ed:d9:3e:59:48:60:
89:fe:f2:2f:22:7a:1b:58:19:0c:a4:23:66:2f:e2:de:46:62:
d4:0e:1d:92:ec:98:dc:5a:3f:18:a4:96:a7:b7:a4:0f:e5:53:
63:48:fe:5c:c3:e0:15:5d:9a:42:62:b1:90:07:ac:3c:90:f5:
a6:64:60:e9:31:82:cc:c7:f8:99:f4:37:29:3a:8e:3b:23:8d:
38:6e:67:b3:04:52:1a:96:ca:a0:8c:12:25:63:bb:cd:77:21:
7b:a9:29:52:1f:91:48:3f:14:8d:3a:47:ce:ee:b2:7a:c1:1d:
8a:86:d0:9f:9e:15:75:ec:51:0f:f8:fd:36:a9:a2:6b:ff:b5:
ae:bd:53:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:34 2025 by rpki-client