Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
File: nPmIlqiK6PNUCut37KHxqUu9aXg.mft (raw, json)
Hash identifier: oITURale/8BYR2szULbBXA0jci2iTijCRXqKIWyfUWA=
Subject key identifier: 33:A1:59:65:E9:07:8E:92:24:C4:96:74:43:50:37:D4:E7:E0:7F:BF
Authority key identifier: 9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
Certificate issuer: /CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Certificate serial: 0199FBEA8D51CD79351284FA31E6E4053D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
Manifest number: 0878
Signing time: Sun 19 Oct 2025 10:01:16 +0000
Manifest this update: Sun 19 Oct 2025 10:01:16 +0000
Manifest next update: Mon 20 Oct 2025 10:01:16 +0000
Files and hashes: 1: nPmIlqiK6PNUCut37KHxqUu9aXg.crl (hash: xQqisLTJQhrc4ZBAhi4TryscZXUPlW17ZEZF6XTW+T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8d:51:cd:79:35:12:84:fa:31:e6:e4:05:3d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Validity
Not Before: Oct 19 10:01:16 2025 GMT
Not After : Oct 20 10:01:16 2025 GMT
Subject: CN=33a15965e9078e9224c49674435037d4e7e07fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:2b:16:9d:f9:62:fa:83:4d:e6:40:c3:4b:
5a:a4:29:18:3b:b2:a5:52:8e:43:74:f8:9a:e6:6a:
2b:8f:18:55:cf:0d:91:78:d5:f1:53:a3:0d:50:7b:
15:f9:0a:2c:6c:01:69:ea:4f:23:65:a7:31:cb:8e:
a7:53:e7:39:2d:55:3e:30:20:92:c3:bd:1e:ef:06:
ce:8c:df:4e:5d:02:3d:51:f6:17:dd:64:b2:50:91:
c3:2e:8b:cd:8f:ec:7a:24:d2:7a:de:88:a0:5e:04:
ee:ba:fc:a4:c8:8f:6d:5a:bb:77:d1:f7:50:13:92:
b9:8c:2e:a9:0d:bc:66:a1:b2:10:b5:e7:46:9c:f9:
5a:f6:61:e7:8c:6f:26:40:ca:f7:55:a0:bc:78:5c:
bc:54:bd:d9:2f:8c:a4:15:e9:64:32:23:42:be:4d:
6c:9e:92:f5:28:cc:53:3c:61:19:ac:c2:7e:fe:1b:
3f:86:03:4d:ef:cd:89:ce:05:4d:43:b6:9f:17:ef:
48:3e:e4:cf:16:19:06:3e:29:38:2c:be:91:e5:d9:
74:1a:c9:eb:25:0c:6f:f8:ab:ab:8b:71:6c:c3:0f:
3b:db:8f:84:70:33:cd:98:eb:b8:fb:80:a9:37:b9:
4f:50:ac:c1:56:43:89:4a:1b:c0:7d:5c:3d:65:8d:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A1:59:65:E9:07:8E:92:24:C4:96:74:43:50:37:D4:E7:E0:7F:BF
X509v3 Authority Key Identifier:
keyid:9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:75:f9:0c:73:da:87:34:b8:99:4f:88:3d:cf:97:98:46:2b:
13:17:26:50:d9:81:fa:62:dd:23:a5:d9:63:89:29:25:51:e4:
42:8a:bf:ba:8f:69:35:d7:f7:74:b8:91:49:3a:f7:61:bc:53:
60:30:44:81:95:02:07:c2:3c:38:55:53:ee:4b:fd:be:67:79:
ff:1e:39:14:6c:17:b6:4f:57:42:38:31:ba:78:ea:2e:ee:22:
b5:3e:05:1f:2a:d2:22:af:50:79:50:c8:7d:97:62:72:13:70:
4f:e9:a8:51:7c:61:ac:df:12:7d:f6:54:b4:82:68:a1:93:2b:
e1:d6:c2:13:0c:09:8d:e0:67:2d:6a:d4:ea:74:35:11:47:c0:
37:4b:0d:43:a8:68:36:4a:8c:8a:f4:22:40:f0:e6:cb:94:73:
de:11:fd:86:24:89:40:65:56:38:d2:51:56:15:1f:a2:e7:0e:
8d:02:44:1b:35:a7:cd:ca:76:d8:5e:66:f1:84:96:c1:ed:fa:
4d:2b:43:57:de:ee:0d:4f:30:16:07:6f:69:71:53:b6:dc:5c:
3e:09:f7:22:5a:18:a5:13:1d:64:a5:f7:29:c4:d3:89:cc:56:
02:35:59:71:b9:77:8d:08:31:08:a4:43:c5:9a:fb:09:e6:8e:
52:fe:19:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:58 2025 by rpki-client