Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
File: NhIf0uc0bus8H451uTyE-VhB9EY.mft (raw, json)
Hash identifier: QiRiTfzrbMpF0CMAWouEB3MTIw4KEFXhF13SL/zF0QA=
Subject key identifier: 83:CE:C3:FD:C4:BE:EF:74:CD:66:72:75:A8:C6:8A:39:5D:9D:C4:1F
Authority key identifier: 36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
Certificate issuer: /CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Certificate serial: 0199FCFD3658A69D988DBF72ED205FF8447B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
Manifest number: 03F9
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: NhIf0uc0bus8H451uTyE-VhB9EY.crl (hash: FysNtsQQ8dvZcmeVAbRv4XFJXDKTx4ZIsCoOqRfNn2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:36:58:a6:9d:98:8d:bf:72:ed:20:5f:f8:44:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=83cec3fdc4beef74cd667275a8c68a395d9dc41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:bc:5a:85:1c:94:2d:45:78:19:15:5f:8d:
f4:df:58:ed:f4:59:88:c7:e8:a8:9b:ab:4d:26:86:
24:19:f1:12:11:d5:7f:c0:9c:b6:2d:53:28:15:9b:
bb:f8:29:83:f1:1d:33:1e:7b:ca:b7:c2:de:d3:66:
6a:f0:f7:3f:15:4d:40:5e:fa:f8:3a:ae:11:37:66:
b4:84:a7:54:50:85:1f:d4:16:d8:68:f5:e1:e1:4c:
3c:8a:e9:1c:5b:fe:5b:1f:f0:69:4a:67:e8:c6:57:
5a:02:29:bf:52:8f:c6:f2:7c:d5:64:97:a8:db:44:
45:b4:50:71:7b:a2:ea:52:01:00:3d:8a:bc:ff:9d:
15:0f:b0:c2:e6:c6:e9:0f:a2:db:d0:27:88:e5:ba:
28:7a:31:c5:12:44:74:dc:cf:4f:5e:c3:5d:a2:6b:
93:99:af:9b:08:fa:0a:ac:3c:f0:f2:19:c5:a1:bc:
b5:82:72:c7:59:97:ea:47:47:4f:25:1d:6c:55:6c:
29:23:74:7f:e1:fc:9a:e8:40:43:ef:72:b2:b3:6e:
5d:49:87:ce:f8:2c:13:d2:7e:6d:72:3d:7f:8d:8f:
3b:89:7f:28:44:27:3e:d0:3c:98:41:ff:de:9b:d4:
08:a1:a7:b4:31:a8:f4:1e:2a:2c:90:01:11:1f:0c:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:C3:FD:C4:BE:EF:74:CD:66:72:75:A8:C6:8A:39:5D:9D:C4:1F
X509v3 Authority Key Identifier:
keyid:36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:63:e0:29:77:06:89:68:c8:40:8f:61:8e:5e:a4:39:91:60:
8f:c8:06:7e:52:90:84:45:63:48:26:4d:08:79:e7:63:d4:ca:
3e:eb:82:0b:f0:1a:cd:5a:7e:ff:65:33:75:d3:0e:38:76:37:
db:55:6d:5f:b9:6e:26:b1:ca:33:cd:dd:bb:ca:91:f3:ca:9e:
9e:73:cd:27:be:29:e5:aa:ee:28:ee:0c:bc:60:1a:d4:92:15:
03:e1:d0:ef:e7:8b:d2:b2:93:90:ad:7e:49:eb:e8:07:55:ca:
ee:1a:e1:3b:6f:75:43:4c:b9:a9:9a:34:55:e5:72:86:64:ad:
74:32:3e:4e:57:2d:cb:0b:58:f9:c8:6f:30:33:9d:3b:37:d1:
58:d9:e0:9c:b7:b2:50:27:42:04:04:41:f3:43:06:72:70:3d:
a1:b4:ca:48:c0:b9:72:d1:05:ff:23:35:4e:88:6f:ff:9d:83:
1e:93:a1:ed:25:0c:55:62:82:22:05:67:4b:2b:69:8c:7a:7f:
34:e0:87:f3:39:e9:6f:ea:82:7c:f6:90:d1:47:ab:87:b3:ef:
09:e7:65:a1:e5:cc:df:11:e0:0a:16:dd:9b:34:77:49:c6:84:
02:1d:58:be:17:6e:07:bd:d6:55:b1:04:22:8c:52:98:19:5f:
d8:54:a3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:50:12 2025 by rpki-client