Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
File: nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft (raw, json)
Hash identifier: xXxIHKymhe7G6qeFQq/6PVcQDr8W0RQ25CfImc0Dkao=
Subject key identifier: 97:4D:D7:96:45:94:B1:47:6E:22:E5:1E:00:34:CF:CC:80:72:6C:03
Authority key identifier: 9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
Certificate issuer: /CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Certificate serial: 0199FBEBCF1C3C54CCE645EA7CF5D16B0C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl (hash: AbiVglAneao7ir732ApHlC2lyhuD20POHAQicLWrOsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cf:1c:3c:54:cc:e6:45:ea:7c:f5:d1:6b:0c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d29d3b4d9dfe165f490aea07270b70fa8e3eb0e
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=974dd7964594b1476e22e51e0034cfcc80726c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:18:27:6b:4c:f0:d7:6b:7d:cf:99:60:ee:99:
5d:6f:32:1a:c0:1f:58:c6:12:8b:02:97:e1:e0:5e:
0c:f4:49:a5:ce:bb:20:82:73:fb:d7:4f:df:ef:01:
11:52:88:3f:a8:d1:ad:59:13:58:3a:22:c5:3a:12:
71:35:de:f6:50:60:19:52:20:63:06:45:b9:32:fd:
86:7d:44:d6:fd:4c:4a:02:9a:bb:d5:9c:a3:39:c1:
c5:da:44:d2:9d:87:f6:c0:49:a3:14:5f:66:7a:1e:
3b:0f:e4:35:d7:8e:14:94:92:01:9e:d3:eb:02:6c:
c0:c5:ce:71:5c:3e:3f:5f:9d:48:ab:36:b0:46:17:
a0:03:6a:15:31:bb:4e:35:a2:55:15:14:9c:c9:12:
a8:49:b5:fc:51:a8:8f:b3:9f:a8:9f:28:0c:0f:93:
91:ae:c5:bc:58:27:3b:8a:4a:09:47:92:16:18:a8:
bb:9a:ee:d9:cc:8b:90:52:88:b2:2e:34:fa:82:45:
72:13:72:56:2d:b3:d4:a4:90:91:71:05:f8:d7:4e:
af:3c:0c:e6:0d:2d:c9:f1:27:d0:45:a4:89:49:dd:
e0:c4:80:fe:79:d3:f2:a6:bd:be:74:b1:31:b4:f0:
6c:0a:66:c3:03:15:9b:33:c7:f3:21:b2:31:f0:05:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4D:D7:96:45:94:B1:47:6E:22:E5:1E:00:34:CF:CC:80:72:6C:03
X509v3 Authority Key Identifier:
keyid:9D:29:D3:B4:D9:DF:E1:65:F4:90:AE:A0:72:70:B7:0F:A8:E3:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSnTtNnf4WX0kK6gcnC3D6jj6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95ad6a-2237-431d-b7ff-de7d7426c4c5/1/nSnTtNnf4WX0kK6gcnC3D6jj6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:54:91:92:c7:45:26:fc:ad:e2:7b:66:ff:2b:bc:ca:ce:66:
ba:a0:9c:64:65:34:ec:c8:8e:5d:d5:e6:aa:92:10:b3:c8:ba:
10:fa:6e:ad:23:c3:81:ad:b8:a2:26:c3:cb:c7:93:eb:b7:e5:
7d:f1:c4:12:28:94:ba:35:15:bb:aa:92:21:7b:1f:67:23:d4:
26:f6:f6:63:0f:1b:c8:1d:01:e9:6c:50:49:1f:f8:af:ea:84:
d3:7c:2b:56:80:17:bd:9b:27:e1:5f:a4:fb:43:55:a3:56:e6:
ae:c2:8d:ac:fe:40:ed:77:d4:ce:c9:bf:3a:5b:cf:e7:4f:40:
02:1b:cb:dd:af:e5:ad:01:b0:03:b6:f6:4f:aa:35:3b:52:81:
e6:49:fb:60:66:1b:c1:88:44:e6:b6:dc:92:1f:f6:7d:fb:36:
b6:d3:58:9c:58:84:2b:e0:62:ee:52:e6:b7:7d:79:0b:77:12:
23:b5:e5:69:39:e6:cb:a9:c9:5d:5e:a2:8f:05:81:c8:46:06:
87:b3:a0:f5:56:62:0b:1e:37:3d:32:36:22:8e:3c:60:87:4c:
9c:a3:87:b0:4a:11:c6:5e:86:ec:41:4d:97:71:30:0a:ab:a3:
2f:d2:b7:71:c6:7e:4c:f8:5c:07:ae:4f:28:10:23:05:56:5c:
a9:c3:ec:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:55 2025 by rpki-client