Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier: S33KPL4yXS0SEim6h9ZkvkMQc+ooReG5wWUyXEN/nv0=
Subject key identifier: A7:9C:1C:BB:74:A4:A9:1F:C9:BA:0F:28:FD:66:78:D4:D9:29:0C:2F
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial: 019A4D743C6275210358CAD9FE19E404EDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 06:00:54 +0000
Manifest this update: Tue 04 Nov 2025 06:00:54 +0000
Manifest next update: Wed 05 Nov 2025 06:00:54 +0000
Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: POKtPvTErcKpfvJOsiVASBWqr4TYaHJouKRHxFMbsSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:3c:62:75:21:03:58:ca:d9:fe:19:e4:04:ed:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Validity
Not Before: Nov 4 06:00:54 2025 GMT
Not After : Nov 5 06:00:54 2025 GMT
Subject: CN=a79c1cbb74a4a91fc9ba0f28fd6678d4d9290c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:48:74:8f:2f:6d:b8:2c:27:29:95:74:6e:
b4:61:31:26:b7:a7:c5:b1:95:1b:45:70:c6:6d:94:
a2:2e:ef:b9:f7:51:21:45:b3:9d:35:3b:ef:7f:91:
b3:67:f6:ee:15:d0:36:b6:6c:7e:61:b9:33:8a:64:
ac:af:32:f2:69:47:25:9d:3f:74:1f:2d:b0:a9:f7:
2f:ee:30:29:8f:23:ac:c0:3d:24:b9:b5:29:87:12:
52:e0:07:56:35:99:60:35:f2:16:83:59:c4:30:65:
89:e3:8d:0c:3b:c4:43:ba:69:a0:e9:2f:8a:2c:40:
f7:89:1b:f6:46:70:83:35:ec:7a:bc:4d:3c:19:f2:
7e:66:76:47:95:80:88:5e:aa:a4:88:51:14:6c:df:
22:78:44:af:cc:8a:5c:a1:0a:ed:b9:85:8d:fd:84:
fb:6b:26:8e:65:81:4b:c6:95:e4:a4:0a:98:95:a8:
84:46:4d:1a:17:eb:74:c5:8f:91:57:70:e6:85:72:
c3:7b:d6:e8:b2:77:eb:2b:8e:f4:03:05:d1:be:e0:
dc:f6:10:5e:e0:e6:0b:06:e9:49:b5:e0:de:ab:78:
98:87:bc:4c:70:98:4a:44:7e:02:e3:a3:a1:d7:ef:
52:2a:c7:86:49:a2:22:4c:88:fb:6a:e4:d0:10:a6:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:1C:BB:74:A4:A9:1F:C9:BA:0F:28:FD:66:78:D4:D9:29:0C:2F
X509v3 Authority Key Identifier:
keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:59:12:34:e7:30:97:7d:20:ae:3f:4b:96:73:3e:ed:40:77:
22:db:a5:b9:97:56:70:20:1b:7b:60:aa:e1:bf:07:05:d1:1b:
65:93:52:7a:52:49:45:b3:85:3d:f4:0e:c6:46:00:10:9c:ef:
76:c6:66:d1:1c:4a:cd:a4:d5:c4:8f:ae:ba:36:6f:36:84:76:
4e:f9:b5:99:f6:b7:fc:f8:ad:d1:46:7b:79:09:a0:36:23:bd:
ab:15:a2:c2:2a:da:c3:6f:57:2c:f3:5f:b3:53:3d:ab:84:6f:
6e:06:12:19:a9:7d:c9:99:7c:a8:d4:ed:42:a8:2b:2e:c9:1c:
62:8f:7a:88:ca:d8:b3:ea:fe:db:df:6e:08:5c:cb:a8:26:51:
7a:18:91:30:3d:59:d5:2e:7a:e8:5f:49:a3:af:03:1b:ae:6e:
14:29:b3:7c:dd:0d:0d:90:53:74:05:ae:5f:4e:8f:8e:25:fe:
f4:68:a6:ce:da:ad:0e:98:b0:9a:ad:4d:7a:1d:fb:41:86:e5:
86:5e:65:4c:f1:30:6b:56:59:df:dd:02:7e:21:fd:07:d4:c9:
ea:ec:fb:00:6a:ec:d0:e7:3a:63:5b:aa:1f:e3:71:c6:48:03:
3e:57:4d:12:a6:87:ce:02:bb:ae:9a:3a:bb:01:12:2c:70:0e:
fa:82:17:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:28 2025 by rpki-client