Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
File: nSBC44DWR2UTrMCPtU-8xzYm7D0.mft (raw, json)
Hash identifier: MIDmMnpwHggmqhIGr97TWQdr8CXfEIKbzUEkEbq0E3I=
Subject key identifier: F1:11:26:9E:B7:6F:85:D7:6E:34:16:81:6A:23:16:B1:C5:09:0E:BB
Authority key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
Certificate issuer: /CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Certificate serial: 0199FD348E9D20C25F24CB167AFDDA0CBA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
Manifest number: 0211
Signing time: Sun 19 Oct 2025 16:01:44 +0000
Manifest this update: Sun 19 Oct 2025 16:01:44 +0000
Manifest next update: Mon 20 Oct 2025 16:01:44 +0000
Files and hashes: 1: nSBC44DWR2UTrMCPtU-8xzYm7D0.crl (hash: 0xghc4VH3RX2vArecTGgO6dIqEDIZnY1C+Xq9Thpqlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8e:9d:20:c2:5f:24:cb:16:7a:fd:da:0c:ba:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Validity
Not Before: Oct 19 16:01:44 2025 GMT
Not After : Oct 20 16:01:44 2025 GMT
Subject: CN=f111269eb76f85d76e3416816a2316b1c5090ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:9f:ba:0a:a0:86:12:06:77:f9:b3:28:50:
81:cb:9b:90:55:46:66:c7:51:13:79:69:a5:cf:83:
c3:45:a8:60:3f:b3:70:61:5b:c1:89:e0:32:a0:4d:
a3:d0:10:75:c5:d5:95:d1:bf:72:9b:f8:72:7c:6a:
6f:68:ae:08:c8:c3:a6:78:b9:d5:8e:8e:6d:ba:b2:
91:73:ac:84:67:94:f7:ba:79:f2:8f:03:8b:6b:58:
15:79:88:42:53:6c:a4:95:85:ea:1c:3d:2f:e4:de:
01:02:65:9e:d8:bf:8b:38:d4:f1:26:b2:ac:f6:a6:
9a:4b:9f:f9:8b:68:5b:34:6c:3a:9e:7a:18:6f:4a:
c3:e2:ff:86:45:a5:38:3a:6c:5a:85:80:e4:a3:07:
8a:41:04:9c:c3:83:b3:62:66:e8:4e:4a:35:c0:33:
00:b4:e1:c2:68:d7:10:1f:53:82:e7:3c:a2:f6:3d:
0f:bc:11:99:a6:dd:28:85:59:7f:b5:49:35:af:eb:
84:de:85:9f:16:bb:a2:25:0d:54:c4:9b:bf:77:45:
84:df:1d:7c:b0:90:ab:d6:29:c6:17:11:6a:07:63:
e0:6d:8f:e6:94:e4:d7:f4:a7:24:c5:7a:65:13:5e:
40:87:83:63:17:65:7c:9a:2e:12:f1:2f:ab:9a:48:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:11:26:9E:B7:6F:85:D7:6E:34:16:81:6A:23:16:B1:C5:09:0E:BB
X509v3 Authority Key Identifier:
keyid:9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9a:06:dc:22:b4:03:64:cf:ac:25:f3:bd:d0:66:3b:01:b1:
c3:2b:9a:31:c1:08:3d:d8:08:6d:86:c6:5a:25:dd:a7:d0:a0:
31:41:d1:d7:12:3c:23:f0:f0:4d:cb:d1:4c:17:2c:79:96:fd:
b7:56:a7:34:d5:d5:30:d3:2b:06:cc:10:3e:f3:94:fb:12:2d:
ac:38:a1:7f:0b:60:ad:bd:38:1b:ec:fa:3a:f4:39:19:cb:02:
83:d9:5d:b6:79:9b:54:80:69:03:f0:52:88:06:85:9f:18:8b:
f1:b0:50:3f:c5:1b:2a:31:80:bc:3d:cb:16:4f:bb:97:76:ce:
98:85:1c:63:66:c7:55:16:42:c1:1d:c4:0a:f8:f7:d1:2c:72:
7a:a9:a7:dd:55:72:bf:6c:a9:b4:cf:19:c0:b7:79:ba:29:a6:
ae:05:4b:84:48:51:9e:48:1a:86:df:61:ea:8d:c3:f0:eb:68:
b9:d0:cf:ef:45:ed:7c:ce:b2:94:9d:89:1c:77:29:56:ef:f6:
d0:3e:6d:f1:60:16:09:8f:e7:4c:e5:22:4b:7a:2c:d4:6a:77:
c6:88:1b:ed:63:2e:27:53:dc:17:aa:19:75:e8:0b:41:78:45:
c6:3b:87:7f:e3:df:95:77:02:d3:cd:6b:66:29:6a:5e:3e:48:
eb:52:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:25 2025 by rpki-client