Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
File: nvnDHh7MuhkCs_YiWT3pcspxi1w.mft (raw, json)
Hash identifier: m5IhzUlQXZNv911MrLBbsMI4A9vERrUeEdc3iLKDuCE=
Subject key identifier: 87:6F:81:86:A4:53:76:4F:E7:D5:A2:90:FA:FE:7D:24:4E:59:F1:53
Authority key identifier: 9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C
Certificate issuer: /CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
Certificate serial: 0199FCC655B54C6C7E925DA83E8724248E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
Manifest number: 0E3A
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: nvnDHh7MuhkCs_YiWT3pcspxi1w.crl (hash: Oox5K7f5wdDeXRsCbgjRiB+PP84HSXqSAiEolKoYmNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:55:b5:4c:6c:7e:92:5d:a8:3e:87:24:24:8e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=876f8186a453764fe7d5a290fafe7d244e59f153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:24:45:ea:0f:df:10:b1:b5:b7:28:f4:0e:
a7:c1:f2:56:ba:cd:5d:01:83:7b:b8:74:07:38:cf:
af:fb:07:66:1c:e7:a2:65:3d:f9:52:c1:93:aa:5c:
30:fe:cc:d6:39:00:1b:c2:32:98:a3:f0:36:a1:87:
ca:02:ad:49:ad:78:1e:9b:f4:f5:49:43:78:bf:9f:
af:b9:4c:a0:c4:82:94:bf:de:fc:b0:ec:86:a1:9c:
89:35:5b:36:47:0a:8d:22:3c:ef:98:e8:7b:34:ae:
2a:80:9c:80:29:31:be:9b:6f:e1:8a:0f:78:58:e1:
a2:9a:f3:b6:35:68:4d:c4:3b:e3:8f:61:c4:e4:b2:
1e:e0:53:51:3a:e3:7f:cc:c8:6e:4f:c8:41:cc:dc:
33:d0:df:e1:ab:e5:59:81:68:a6:0d:11:3c:38:a9:
15:54:fe:4f:1a:05:1e:e2:51:bd:3c:ad:a6:69:22:
0b:e3:71:13:a0:4b:e9:50:b7:5e:92:c4:55:d5:52:
88:7a:a1:90:f4:4a:45:ba:77:cf:fe:a7:11:5d:0c:
12:2b:ad:8f:64:65:8a:96:c3:02:ed:c1:6b:10:8a:
df:8b:e3:5f:36:7e:cf:b7:b9:28:5b:88:e9:f8:b6:
1d:bc:75:6d:a1:ec:39:39:45:9b:fa:62:84:80:aa:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6F:81:86:A4:53:76:4F:E7:D5:A2:90:FA:FE:7D:24:4E:59:F1:53
X509v3 Authority Key Identifier:
keyid:9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:61:0c:1f:b1:ed:23:e7:a9:05:b6:62:ed:10:52:5c:9d:ef:
4e:4a:1b:c1:eb:89:d4:ff:41:75:03:a8:c4:5c:bd:07:f8:19:
93:62:db:0f:e7:77:13:ae:68:d2:8e:01:13:31:45:a3:bf:68:
bb:b5:a7:97:10:f7:e5:dd:31:83:09:d7:f6:d0:e5:33:8b:d1:
48:51:82:dc:9e:25:b6:3a:b4:d6:fd:9e:6b:51:95:c6:9d:22:
f0:95:eb:bd:3d:72:aa:51:a5:cb:c1:b5:b4:00:05:70:cf:9c:
22:21:4d:3b:6f:66:06:02:08:33:67:cc:65:85:0f:3f:db:09:
1a:19:34:2d:5a:78:a3:51:1b:20:7d:48:41:54:fb:ac:b7:d8:
b0:17:aa:37:9d:ea:1e:a9:46:26:d8:92:71:34:b1:a7:01:4b:
f6:74:33:44:e9:ce:c8:aa:c4:8f:2f:00:4e:94:39:26:66:0b:
b0:fa:91:e1:f4:ac:a4:ed:8a:6d:df:8f:3b:4d:56:87:5e:94:
ac:fc:77:c7:5e:5b:57:c9:2a:32:9c:3f:9a:10:4f:b6:96:27:
6b:55:6b:e1:d8:24:88:6f:b8:0e:20:ff:ad:e2:62:ce:1e:73:
2e:76:b8:68:0b:80:85:a3:1c:24:ba:71:74:1b:a0:65:9e:f2:
26:dc:a5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:39 2025 by rpki-client