Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json)
Hash identifier: N/7DfhEKpcSEq4pidC4DenZMF6/yFx0Ff+0HZPEyibU=
Subject key identifier: A0:F9:70:C6:39:6B:16:88:CE:1F:A7:D5:78:D7:8E:E3:D8:F3:C7:40
Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Certificate serial: 0199FB460DB92125A5A47106D99A7B42F8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
Manifest number: 070B
Signing time: Sun 19 Oct 2025 07:01:36 +0000
Manifest this update: Sun 19 Oct 2025 07:01:36 +0000
Manifest next update: Mon 20 Oct 2025 07:01:36 +0000
Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: 8GE1s46WWBZ73+Gf2ZwmKo7A+2e9fBG6HM1bNz0sfEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0d:b9:21:25:a5:a4:71:06:d9:9a:7b:42:f8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Validity
Not Before: Oct 19 07:01:36 2025 GMT
Not After : Oct 20 07:01:36 2025 GMT
Subject: CN=a0f970c6396b1688ce1fa7d578d78ee3d8f3c740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:cb:c7:62:f3:4c:b4:b4:78:e8:a0:bd:32:
2b:4d:9a:6e:54:77:f0:57:66:5d:12:f1:c7:a6:b1:
bf:ef:33:95:87:ff:b9:8c:e2:87:5e:0c:cc:7d:3d:
1b:bf:92:22:2b:48:25:d7:2e:61:28:d8:49:92:2b:
2b:0b:7b:91:dd:da:c1:cf:8d:03:ba:05:ca:4b:f7:
27:58:8f:dd:78:aa:95:bd:f4:f4:b5:75:8c:41:a9:
05:bf:e3:bb:83:88:4c:f8:fe:b6:18:f7:4b:a4:35:
74:98:b3:7c:58:9b:b5:3e:df:04:b7:25:7f:94:5e:
c6:34:b4:7f:23:85:b3:80:33:22:af:45:69:68:52:
1b:2f:3e:99:72:ec:ee:d6:81:88:d8:6b:83:8e:39:
7d:c0:dc:c9:47:ad:84:87:11:82:fc:77:32:11:df:
83:8b:d2:5c:d7:75:70:a9:87:b7:10:38:eb:8d:fa:
55:13:57:2e:c3:3b:2b:2e:c9:48:ef:98:5c:e5:d2:
08:41:f3:e2:c5:72:6d:ce:d3:7f:64:25:43:77:5f:
9a:34:24:9c:a7:5a:0a:2c:1f:f8:68:48:53:90:fc:
92:5c:38:dd:5a:85:83:29:29:dd:47:35:87:01:12:
a8:b0:89:b3:53:6a:33:8d:47:b4:39:0b:75:9f:3a:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F9:70:C6:39:6B:16:88:CE:1F:A7:D5:78:D7:8E:E3:D8:F3:C7:40
X509v3 Authority Key Identifier:
keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9b:e8:19:a4:1f:d6:6f:40:fb:ce:25:00:f9:2a:bd:cb:a4:
9a:69:b1:df:35:f8:31:9d:bb:b6:8e:e8:76:ec:73:e8:db:f0:
34:f3:da:4c:d9:53:7b:77:03:a0:eb:27:43:89:ca:cd:af:48:
f9:59:8b:97:c1:45:50:7e:aa:08:5b:13:31:10:2d:05:fa:e7:
47:bd:be:31:a9:e1:b8:f3:77:5a:06:2a:35:f4:f2:d7:46:03:
c0:56:43:bb:91:55:33:fd:da:ce:33:70:4a:b6:af:2b:5c:11:
6e:14:e6:5a:62:b1:8c:11:dd:cd:8d:89:e0:31:e3:02:88:52:
bc:fa:5c:5b:a1:03:47:c1:21:3c:04:25:ec:28:e8:a6:54:77:
67:c3:e2:36:0e:ed:40:df:1c:f3:6d:1a:6a:a5:e0:b0:05:c4:
72:a6:1c:9c:87:dc:95:46:3f:b0:62:9e:76:94:88:da:20:17:
81:1f:c3:cd:97:c7:4f:ed:72:d0:76:97:77:ab:7b:a0:f7:7b:
24:ad:05:c1:ae:21:79:bc:3b:58:b7:75:01:8d:ae:f0:20:7f:
14:2b:a4:37:d5:e9:d6:d3:8e:95:3a:99:f9:d4:aa:44:38:6a:
3e:6c:1e:85:82:1d:49:2e:a4:36:f9:42:ec:5b:0c:b7:64:f0:
36:9d:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:20 2025 by rpki-client