Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File: nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier: IuuxIBCOB39en3QKx/RCryNMvDqaRBfzlh95uCX7CSE=
Subject key identifier: 57:36:82:CB:A5:30:36:BF:03:D3:CB:E4:58:85:41:41:77:88:A0:04
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer: /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial: 0199FBEC4065A144AD8589ABFFC61EF0D5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number: 0D0B
Signing time: Sun 19 Oct 2025 10:03:08 +0000
Manifest this update: Sun 19 Oct 2025 10:03:08 +0000
Manifest next update: Mon 20 Oct 2025 10:03:08 +0000
Files and hashes: 1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: g0R4WIHyYJHOnh8/g9pDt1itt4Q0O/9yz3Uq1iZHqTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:40:65:a1:44:ad:85:89:ab:ff:c6:1e:f0:d5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Validity
Not Before: Oct 19 10:03:08 2025 GMT
Not After : Oct 20 10:03:08 2025 GMT
Subject: CN=573682cba53036bf03d3cbe4588541417788a004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:00:4e:7c:23:d3:39:23:8b:0d:35:21:f1:
19:c7:3a:f1:3c:d5:e6:65:3d:ac:82:01:71:de:08:
5d:2c:83:a8:53:8b:1c:7e:78:ec:6f:74:26:93:65:
74:d8:59:c2:7f:57:86:7d:22:31:28:07:97:10:75:
c3:6d:2b:66:fb:bf:4c:f9:50:ab:1e:ca:c3:76:87:
e7:e6:d3:08:a3:c4:21:67:43:ef:d0:fc:11:3e:dc:
ec:c5:7e:c6:45:05:cf:73:d1:17:7b:96:95:1b:92:
60:e4:10:2b:27:eb:9b:ae:70:da:c2:44:b0:2c:f8:
39:7d:e9:e1:0c:1c:f8:b1:39:3f:2b:14:44:be:26:
96:70:f7:f0:9f:05:8a:0a:78:16:8a:0b:e6:4c:fe:
6e:fe:07:1c:d2:6d:c3:3c:8d:95:cc:a9:e7:65:9f:
c8:91:03:81:00:16:11:c3:2a:ca:72:c1:22:8d:ac:
0b:46:84:f2:d5:0b:de:b3:57:e7:bb:4d:58:10:63:
65:fd:d6:8b:b6:3f:f9:77:c0:ce:75:62:e8:42:b3:
f0:42:95:b2:cf:31:76:83:11:03:1d:3b:42:1f:c3:
9d:dd:c8:fc:37:27:fd:ce:84:93:ee:6d:c1:a2:56:
92:ec:23:91:9c:31:3f:89:29:df:2a:6e:19:1f:ad:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:36:82:CB:A5:30:36:BF:03:D3:CB:E4:58:85:41:41:77:88:A0:04
X509v3 Authority Key Identifier:
keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:14:77:4a:17:19:10:91:59:3f:6f:84:55:f1:8b:c2:42:75:
94:5d:3d:51:e7:a1:6d:32:c5:ec:d1:9a:bf:eb:f4:58:64:54:
31:5c:db:54:2d:79:02:d5:79:de:12:dd:02:2b:1e:f1:b7:2b:
95:41:e9:99:d3:5c:6a:ac:c6:fb:ce:a0:16:87:25:c1:70:38:
01:1d:4b:2e:5b:43:20:32:51:aa:a2:a4:ee:4e:90:ea:ae:05:
50:2a:c9:b5:d9:58:5a:4a:eb:68:fe:cf:ec:06:3f:5d:86:ab:
32:24:7b:5f:cc:e1:3c:3e:50:65:89:d9:84:c2:cf:fb:5d:7c:
70:0b:c3:65:82:6a:25:fd:f5:51:58:ec:19:fc:88:7b:dc:f3:
8b:55:aa:02:c2:04:94:38:01:f0:d9:51:3f:6d:2a:2c:13:23:
66:7c:08:61:72:88:2e:99:fd:b8:3a:16:ac:30:af:ba:58:ac:
7c:77:ec:71:c7:67:c5:bd:d3:e9:ea:45:24:c1:de:a0:1f:a2:
50:e1:80:61:06:41:74:52:f6:39:78:ea:9e:ff:22:0b:ce:33:
da:6c:35:5f:3b:07:6d:2d:bf:94:2e:ce:72:3e:f8:93:7f:f7:
f0:7b:51:cd:da:b2:b0:ad:64:51:cb:76:d1:e3:6a:9c:10:9b:
e3:db:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:57 2025 by rpki-client