Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier: A4urAETR3ATxHGuEUSwJ9DA+8QjG8Sfmht4Dj5Qp3nc=
Subject key identifier: 5F:80:FC:00:F0:F7:D1:5C:29:8E:43:4D:8E:35:D9:F2:91:DD:C8:0D
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial: 019897135CBDD71B1BB3B224BC0CC059187D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number: 1625
Signing time: Mon 11 Aug 2025 03:01:25 +0000
Manifest this update: Mon 11 Aug 2025 03:01:25 +0000
Manifest next update: Tue 12 Aug 2025 03:01:25 +0000
Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: 8lsispx+MSy69lKPm4ilRZqMy7Ji+Nlp1gB3VQTxFp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:5c:bd:d7:1b:1b:b3:b2:24:bc:0c:c0:59:18:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Validity
Not Before: Aug 11 03:01:25 2025 GMT
Not After : Aug 12 03:01:25 2025 GMT
Subject: CN=5f80fc00f0f7d15c298e434d8e35d9f291ddc80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:82:c5:e2:80:9c:b6:6c:06:fa:59:2d:aa:
52:d4:38:6c:79:c0:c6:66:ed:6e:74:ce:ea:6b:93:
ee:45:49:e5:fd:1c:a3:24:01:2d:87:75:67:bb:43:
df:e2:4d:c6:97:52:c6:57:52:40:17:9c:df:2c:12:
dd:f3:fd:65:0f:7e:c1:91:33:e5:e9:7c:5e:a3:27:
3b:aa:04:41:9f:e8:cc:d2:a2:e2:5d:cf:eb:b6:b1:
88:d9:57:2f:57:ad:dd:96:88:b1:6e:c2:3e:7e:08:
ba:24:fc:04:47:1c:be:73:72:b4:23:d7:6b:0b:11:
a5:eb:e4:e3:ce:ac:13:c0:f2:24:6f:90:7d:9b:00:
20:71:24:58:b1:97:88:7b:80:17:04:45:dd:93:87:
2b:71:6a:f8:3e:0d:3a:8b:8c:8d:45:4c:b6:9c:a3:
b4:ab:40:86:c1:92:6c:7e:bd:7b:c5:08:52:09:9e:
c0:8d:ec:40:05:cd:d2:f9:c0:82:91:40:ee:c6:d4:
46:4b:79:98:b4:36:aa:dc:e0:03:30:9a:35:72:8c:
ab:8c:1c:e0:1d:00:3d:eb:38:2f:75:ed:39:2d:4e:
1d:5f:cc:d4:9c:91:99:de:b5:aa:0c:38:25:3d:32:
c2:3f:2d:df:5b:53:7a:e7:9a:b6:6d:a1:9c:fb:7a:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:80:FC:00:F0:F7:D1:5C:29:8E:43:4D:8E:35:D9:F2:91:DD:C8:0D
X509v3 Authority Key Identifier:
keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a8:ba:2f:91:4a:8c:e0:87:19:fd:68:cf:a4:83:b7:17:40:
c9:1d:83:91:c0:60:63:98:90:d3:8f:b8:fd:b5:54:6d:a6:7a:
e9:13:51:24:af:46:1c:50:47:e1:2e:e1:3b:57:33:c8:98:6e:
66:82:02:9f:df:1a:ff:62:e2:60:b1:d0:13:ef:b3:db:b9:42:
83:70:47:ef:2c:3f:17:4a:9b:7c:87:50:5a:52:fa:2a:a1:a4:
5e:3b:5d:84:ac:69:79:56:45:71:3c:38:f8:5d:08:c9:ff:36:
91:fe:82:17:a0:55:6f:57:59:cb:1d:04:b8:9d:9e:bc:ad:15:
a0:8d:5e:ac:41:bd:72:e9:b2:b6:7d:d3:ee:b0:dc:e5:bb:cb:
fe:f2:7f:26:a9:d0:6e:fe:88:4a:95:87:6a:87:da:11:3f:be:
be:44:f7:3f:8c:ac:e2:77:11:c9:f5:04:62:93:3a:5d:77:be:
d8:e4:39:6f:5d:85:30:58:c5:c9:2a:9c:26:6a:ff:11:9b:a2:
82:5c:f2:79:56:7e:c7:70:3f:80:0a:78:6d:d7:9e:de:c0:2a:
60:61:77:e6:13:3a:81:71:6c:e4:b0:f4:e0:24:43:38:07:3e:
ac:52:0d:2e:4b:03:ec:e7:16:70:42:38:ab:b0:5a:0c:b1:35:
0a:8c:2f:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXE1y91xsbs7IkvAzAWRh9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjMyMjk0NGIwNDhiNzA1N2U0NWVkMmNiMzQxYjU2MGUw
YWM2YzMwHhcNMjUwODExMDMwMTI1WhcNMjUwODEyMDMwMTI1WjAzMTEwLwYDVQQD
Eyg1ZjgwZmMwMGYwZjdkMTVjMjk4ZTQzNGQ4ZTM1ZDlmMjkxZGRjODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOCCxeKAnLZsBvpZLapS1DhsecDG
Zu1udM7qa5PuRUnl/RyjJAEth3Vnu0Pf4k3Gl1LGV1JAF5zfLBLd8/1lD37BkTPl
6Xxeoyc7qgRBn+jM0qLiXc/rtrGI2VcvV63dloixbsI+fgi6JPwERxy+c3K0I9dr
CxGl6+TjzqwTwPIkb5B9mwAgcSRYsZeIe4AXBEXdk4crcWr4Pg06i4yNRUy2nKO0
q0CGwZJsfr17xQhSCZ7AjexABc3S+cCCkUDuxtRGS3mYtDaq3OADMJo1coyrjBzg
HQA96zgvde05LU4dX8zUnJGZ3rWqDDglPTLCPy3fW1N655q2baGc+3rzLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+A/ADw99FcKY5DTY412fKR3cgNMB8GA1UdIwQY
MBaAFJzzIpRLBItwV+Re0ss0G1YOCsbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzkt
YjNjNWMwOTMzZDk3LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mYWQwNmMtZjM2OC00NmFiLWFlNzktYjNjNWMwOTMzZDk3
LzEvblBNaWxFc0VpM0JYNUY3U3l6UWJWZzRLeHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqi6L5FK
jOCHGf1oz6SDtxdAyR2DkcBgY5iQ04+4/bVUbaZ66RNRJK9GHFBH4S7hO1czyJhu
ZoICn98a/2LiYLHQE++z27lCg3BH7yw/F0qbfIdQWlL6KqGkXjtdhKxpeVZFcTw4
+F0Iyf82kf6CF6BVb1dZyx0EuJ2evK0VoI1erEG9cumytn3T7rDc5bvL/vJ/JqnQ
bv6ISpWHaofaET++vkT3P4ys4ncRyfUEYpM6XXe+2OQ5b12FMFjFySqcJmr/EZui
glzyeVZ+x3A/gAp4bdee3sAqYGF35hM6gXFs5LD04CRDOAc+rFINLksD7OcWcEI4
q7BaDLE1CowvqA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:15 2025 by rpki-client