Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
File: nphC_lRy5id-eSB2x9OHcALi4lE.mft (raw, json)
Hash identifier: w18yaTYG00jzRdnZtm75bpmVaRCX2lW9SHfE0z/iosI=
Subject key identifier: 76:40:0B:77:2F:1F:DE:92:F9:88:3E:E4:83:A0:9A:C6:39:42:91:6A
Authority key identifier: 9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
Certificate issuer: /CN=9e9842fe5472e6277e792076c7d3877002e2e251
Certificate serial: 0199FE7DAE748CDD26C4ADED7E606B56835F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
Manifest number: 01E2
Signing time: Sun 19 Oct 2025 22:01:13 +0000
Manifest this update: Sun 19 Oct 2025 22:01:13 +0000
Manifest next update: Mon 20 Oct 2025 22:01:13 +0000
Files and hashes: 1: nphC_lRy5id-eSB2x9OHcALi4lE.crl (hash: /U9GcDc2DIc8RDcDtcdmkmzbqRlc96/vTDMK2KHdupc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:ae:74:8c:dd:26:c4:ad:ed:7e:60:6b:56:83:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9842fe5472e6277e792076c7d3877002e2e251
Validity
Not Before: Oct 19 22:01:13 2025 GMT
Not After : Oct 20 22:01:13 2025 GMT
Subject: CN=76400b772f1fde92f9883ee483a09ac63942916a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:ac:38:bc:29:3a:17:06:d8:ee:49:ce:79:
5c:54:c5:1c:d4:31:c7:e7:2e:df:be:7b:a7:79:2e:
fe:1d:4d:a6:b4:28:7f:b2:6f:63:f4:4a:6b:e3:c9:
a8:37:0b:0a:be:b2:bc:3c:a2:74:91:65:f2:3e:0f:
13:d5:88:2d:93:c5:8a:61:30:15:58:78:a5:34:bd:
7f:e0:8a:4d:a4:df:9d:5d:4c:d4:64:9c:69:83:eb:
42:3f:3f:3c:97:5f:ad:36:7b:32:5e:1d:69:8c:fe:
dc:50:73:76:db:d2:b1:aa:4e:68:2e:21:6f:68:ce:
6c:02:4d:ac:ab:ea:26:e3:9b:57:78:a4:dd:6b:ac:
f8:10:fd:33:b9:a2:6c:21:bb:6d:6b:fe:a2:cd:e6:
3b:f8:39:57:79:64:4f:df:60:c3:39:60:58:eb:09:
c5:fe:54:0c:0f:45:c8:77:f4:6d:38:a1:c6:69:4d:
61:f2:3f:57:45:0e:c9:52:42:4f:1d:c8:9e:db:c1:
a9:28:3f:84:4c:b2:4a:ff:b1:a3:5a:64:5d:8d:50:
8d:b4:57:0e:77:2b:1d:5d:bb:1e:dc:cb:a8:eb:34:
98:1d:08:a3:34:83:d4:47:16:5b:2d:38:a0:de:72:
0d:4a:12:94:f9:06:f8:cf:77:59:82:4e:db:d4:ac:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:40:0B:77:2F:1F:DE:92:F9:88:3E:E4:83:A0:9A:C6:39:42:91:6A
X509v3 Authority Key Identifier:
keyid:9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:66:fb:e4:d6:31:4e:15:53:02:21:60:74:9f:82:41:45:44:
21:17:38:b6:db:8f:e7:8b:4b:77:28:eb:4f:20:40:e7:99:a6:
f1:72:1c:29:54:38:ba:43:27:1f:bb:e9:25:35:b4:f6:2b:e2:
51:4c:c1:b5:23:27:fa:aa:97:2f:9f:10:0d:39:db:b2:ca:59:
79:01:2c:24:d4:8d:9b:96:ce:26:7b:c6:52:05:ad:39:60:3d:
00:14:6c:d9:e2:19:97:af:82:1a:aa:3d:23:4a:ae:d0:49:6e:
04:ba:24:be:b1:d7:5b:3b:e3:dc:86:e1:88:a3:19:54:14:5b:
3e:ad:ee:0e:68:3e:eb:91:f7:d7:f9:9a:12:00:2d:e7:9d:9f:
82:25:ef:e6:30:4a:6e:a9:c6:e7:68:ac:af:b4:a9:ed:1d:b8:
0c:55:c4:3f:9a:f0:16:5a:f5:e8:53:46:29:50:51:5c:17:90:
32:d6:5d:53:cc:91:22:88:0e:89:53:4e:e0:de:13:9d:91:bc:
55:e1:67:79:cb:76:5c:8e:64:63:30:c0:d9:df:eb:a8:8a:44:
3d:ef:05:da:a5:0b:84:c7:4d:05:86:e6:44:dd:0d:7e:22:41:
a6:06:9a:9d:fb:99:84:93:0e:97:7a:7e:17:de:e7:6d:b0:f5:
34:e9:e2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:39:54 2025 by rpki-client