Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
File: nE-xCAvPALb912uv2dUTPF4cPTI.mft (raw, json)
Hash identifier: UDlS3pnAO1IaUhqX6+qFbaFu7WUxJeMVhRi3kb9qSqQ=
Subject key identifier: 8E:BA:B8:FE:0C:D5:D4:F9:75:47:FD:7B:EC:10:CB:6F:A6:89:2C:C4
Authority key identifier: 9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
Certificate issuer: /CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Certificate serial: 0199FD344AE60DA9FC8782CFF2476E969078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
Manifest number: 06C9
Signing time: Sun 19 Oct 2025 16:01:26 +0000
Manifest this update: Sun 19 Oct 2025 16:01:26 +0000
Manifest next update: Mon 20 Oct 2025 16:01:26 +0000
Files and hashes: 1: nE-xCAvPALb912uv2dUTPF4cPTI.crl (hash: adGzX0LLTj6Jojvk07ZzFzEvt+owGub2KgXVl3JedE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4a:e6:0d:a9:fc:87:82:cf:f2:47:6e:96:90:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Validity
Not Before: Oct 19 16:01:26 2025 GMT
Not After : Oct 20 16:01:26 2025 GMT
Subject: CN=8ebab8fe0cd5d4f97547fd7bec10cb6fa6892cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:47:66:52:dc:9a:82:48:4d:fe:23:f3:c2:
7c:37:56:eb:fb:1b:f9:e6:51:c8:eb:9a:46:81:e9:
b9:53:12:dd:ef:61:22:9a:e6:18:52:26:96:90:e2:
21:37:5c:21:f0:93:d0:ad:a6:0f:38:a8:0f:d0:a8:
91:cc:83:f0:dc:d5:a7:2c:73:57:1b:ab:42:46:ce:
dd:31:f9:35:fe:1d:99:7a:15:0b:50:d0:1b:90:13:
16:ac:b2:a5:77:04:74:3b:90:63:2f:d5:b8:02:15:
43:e9:52:bd:ae:1a:fc:ba:fd:c3:ce:77:70:03:80:
fb:f8:f3:d5:35:c3:f9:bd:da:00:f6:92:ee:60:61:
b5:6b:38:1a:38:9e:a2:8a:d4:fe:0e:38:f2:1c:46:
e5:ad:8b:6f:41:48:9c:63:17:c2:ef:41:41:45:6c:
77:c6:42:84:71:48:fa:96:96:e2:47:55:7c:f3:45:
8d:cf:b1:84:09:ee:81:3a:22:10:6a:b1:30:cc:c6:
47:b8:ef:70:76:08:8c:c9:91:ae:75:e7:b4:6d:7f:
c6:7e:66:a1:e5:14:98:23:cf:d8:23:30:59:fe:e9:
15:82:81:47:ba:ea:07:6c:c4:8f:52:ea:b2:f1:d9:
97:d2:7e:47:f2:6c:06:06:42:97:7a:a9:d5:f6:cc:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BA:B8:FE:0C:D5:D4:F9:75:47:FD:7B:EC:10:CB:6F:A6:89:2C:C4
X509v3 Authority Key Identifier:
keyid:9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4d:d8:6c:50:b8:6c:b6:78:c5:ea:26:61:97:1b:79:76:83:
d0:6d:d9:a7:cf:ac:58:e4:df:10:d3:d6:48:0f:3a:83:5d:ee:
2e:d1:24:5c:bf:77:a9:0b:a9:76:bb:51:cd:9a:c4:ee:40:92:
7c:a2:cd:b1:5b:ab:be:5a:3d:3e:f7:75:44:fa:e8:a7:56:17:
37:51:93:89:30:9e:9f:d2:ae:69:64:d4:7f:0f:c7:1b:c3:06:
1c:92:03:bf:4d:8a:10:be:27:47:3c:63:5d:61:85:a9:17:fa:
c4:91:be:bc:3d:80:8e:8e:50:6f:1e:28:0b:fa:25:ea:c8:2b:
76:c5:7e:cc:21:47:aa:7e:41:6f:cc:22:a4:eb:5a:52:7b:36:
74:1f:2d:42:d8:d9:d3:8a:3c:cf:00:b7:8a:89:4d:9e:88:f9:
73:61:92:e8:1d:ef:54:a4:f7:85:d3:2b:bc:57:6e:3e:0c:8a:
e4:74:5d:97:ff:45:02:fc:8b:16:c0:d0:d3:53:08:d7:61:92:
2d:df:db:ff:e9:86:52:fa:c4:51:ef:09:6d:e9:e6:bc:49:5b:
5c:10:b1:4e:61:02:8e:79:a7:5d:fa:20:0e:7d:15:b7:7b:72:
96:74:c1:ba:c0:01:d4:76:8c:9c:80:fd:0e:53:c9:36:5f:a1:
29:e9:13:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:39:08 2025 by rpki-client