Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
File: nBBfWIvTBDjjPxwtKWdUxz341Ss.mft (raw, json)
Hash identifier: RNz/MbiaxfzegOnIurXVtzAIY5wLLuuYY9Ek0h1leDU=
Subject key identifier: 3F:54:D7:9D:28:91:A7:C6:B9:1C:8A:ED:A4:B2:2E:E1:9F:CF:0D:C5
Authority key identifier: 9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
Certificate issuer: /CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Certificate serial: 0199FDD94AB96A8E9682350EDC00ABA9AFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:01:40 +0000
Manifest this update: Sun 19 Oct 2025 19:01:40 +0000
Manifest next update: Mon 20 Oct 2025 19:01:40 +0000
Files and hashes: 1: nBBfWIvTBDjjPxwtKWdUxz341Ss.crl (hash: Xhsy1/R+G+Lp4xSJ85GwnmRQxkYtOlpysg7ZytiW6gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:4a:b9:6a:8e:96:82:35:0e:dc:00:ab:a9:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Validity
Not Before: Oct 19 19:01:40 2025 GMT
Not After : Oct 20 19:01:40 2025 GMT
Subject: CN=3f54d79d2891a7c6b91c8aeda4b22ee19fcf0dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:86:fc:3c:fd:41:4d:35:02:cd:24:e2:fb:
24:8b:a4:b4:b6:dd:1f:6d:86:0d:12:b6:8e:72:ea:
8b:44:e1:7b:e6:91:cd:a1:c9:ad:69:13:82:8d:b4:
ee:9c:ef:92:80:36:70:a1:99:f3:2d:86:73:16:ab:
3f:ec:05:a7:71:90:cf:c7:f2:ea:f6:3e:62:9d:3c:
da:75:ae:66:25:86:36:d6:14:5d:76:77:f0:e0:27:
75:af:0b:09:3d:53:0c:7e:03:12:c0:5e:8a:b3:49:
e1:a2:a2:f3:ec:f8:18:20:23:bd:07:6a:0c:79:3c:
a2:19:f5:ac:ed:01:7e:3d:6e:a2:4d:fe:af:37:6b:
ec:e0:02:d2:de:1f:1e:e3:a6:15:df:36:bf:da:4b:
27:e9:3e:92:42:41:0a:8d:f7:76:92:f7:c9:90:e1:
a4:99:f3:2b:58:e0:06:d9:6a:fb:5a:03:f5:c8:3a:
9c:6b:44:2d:53:e3:49:59:e7:5a:06:18:65:d6:f1:
89:d3:93:73:24:09:8c:45:3c:f6:9c:f2:48:fa:6a:
8f:12:aa:a2:1d:b0:91:5a:ff:86:89:e1:5b:bc:66:
88:94:3c:cf:46:40:df:1d:8a:09:09:33:bd:0c:b0:
54:9c:c6:58:ab:72:9b:e0:5e:44:ef:94:aa:68:3a:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:54:D7:9D:28:91:A7:C6:B9:1C:8A:ED:A4:B2:2E:E1:9F:CF:0D:C5
X509v3 Authority Key Identifier:
keyid:9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3d:1e:9a:f7:50:ff:f1:ce:eb:b8:67:cc:17:48:b2:b6:15:
13:91:d8:2c:f6:ef:c4:61:f0:a8:83:14:f7:c0:d0:eb:54:9c:
cc:d0:ad:3f:90:31:e1:1e:40:98:d8:9c:b0:39:cc:07:79:4c:
c9:18:a6:f8:46:2e:d9:3f:d0:0a:2c:af:91:9d:40:c7:90:2f:
02:10:97:ed:dd:59:40:d2:f8:1c:1f:91:7b:83:9e:69:b8:cf:
1f:64:0c:06:7f:d5:b4:36:69:8b:4c:da:3a:0a:b8:de:08:14:
43:51:75:bf:5d:1a:db:be:e9:64:7a:af:26:75:48:7c:5a:10:
65:4b:b8:f1:5d:95:3c:d1:99:3b:51:c8:6a:79:e7:71:d8:b6:
b7:05:1c:b1:57:58:12:36:e8:88:9e:9a:a7:26:0d:fb:64:12:
01:be:8f:83:f5:0c:66:bd:38:ed:5b:70:5e:9a:8a:05:92:f4:
93:d6:0a:de:ea:76:cd:59:23:eb:54:5b:e6:8e:36:65:e2:09:
2a:54:34:e9:a3:09:36:c1:33:dd:eb:36:b7:85:06:47:3d:bd:
df:fb:60:30:60:81:44:5d:c3:2a:a4:f6:0c:4b:00:d1:24:12:
75:8b:22:f9:5c:f7:88:1e:38:60:f9:ac:e0:73:c1:86:cb:e9:
2d:29:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:11 2025 by rpki-client