Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File: Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier: Sr7hrcFWGPob1+qm3dGvkJ6Vix55ENs0fLv9PM5UnX8=
Subject key identifier: 94:A9:59:0C:52:F3:6B:30:A9:94:A1:68:89:03:9E:E1:49:83:D9:8E
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer: /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial: 019A0035A871C3332D7F65F75A53C2B40FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 06:01:47 +0000
Manifest this update: Mon 20 Oct 2025 06:01:47 +0000
Manifest next update: Tue 21 Oct 2025 06:01:47 +0000
Files and hashes: 1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: UJUXrMXRSHrogkH8E8cxS19PmBCuBIYWmAxAV9lLbQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:a8:71:c3:33:2d:7f:65:f7:5a:53:c2:b4:0f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Validity
Not Before: Oct 20 06:01:47 2025 GMT
Not After : Oct 21 06:01:47 2025 GMT
Subject: CN=94a9590c52f36b30a994a16889039ee14983d98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:d3:d3:bb:36:0a:d2:e9:eb:28:3b:e2:ec:
1d:81:d8:80:67:93:45:7e:64:11:65:ce:72:2f:88:
d6:2b:c1:76:6e:c5:83:49:8a:4e:f2:e0:35:f4:7b:
26:60:b2:92:1b:bb:da:07:b4:60:81:e5:4f:64:76:
5b:8a:a5:ce:d2:f3:ac:c3:49:4a:63:92:d2:93:4f:
e3:a9:e0:33:2a:b9:ca:bd:1b:1e:63:ed:96:34:92:
d5:8c:74:78:aa:01:96:f5:e7:2a:f1:64:83:29:04:
5b:50:4a:69:40:84:bd:cd:f8:3b:0b:2d:20:a3:1c:
ff:4f:b0:43:35:1c:7d:16:70:cc:f1:08:b9:80:73:
64:b7:38:5b:63:3a:33:78:2f:a4:46:39:01:2d:7d:
9c:09:1d:f2:55:54:d2:50:70:b0:6f:d0:3a:2c:20:
23:e2:59:b9:0a:db:a6:b8:8d:85:da:bb:c8:97:34:
f9:5c:c6:5b:39:54:c1:b1:fb:c8:83:bb:15:df:fa:
8d:f7:44:81:d8:b7:20:4e:16:de:3d:8f:3d:b7:3d:
1c:80:49:71:6f:8d:5e:a2:26:0b:bc:e8:4b:71:bf:
02:de:28:64:d4:d6:58:03:c9:d8:d3:ac:2c:ed:1a:
df:e4:4b:71:3e:57:a4:a7:00:d9:d8:96:1f:84:1a:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A9:59:0C:52:F3:6B:30:A9:94:A1:68:89:03:9E:E1:49:83:D9:8E
X509v3 Authority Key Identifier:
keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e4:5a:bb:90:aa:af:2b:e5:62:e0:c3:c0:4e:09:a2:df:8f:
29:f4:af:ab:67:6c:71:5e:77:ce:a9:aa:f4:64:99:9f:4e:14:
e3:ac:5e:e2:fe:72:bb:b9:a7:e4:51:df:3e:51:94:18:81:17:
a8:fe:99:8e:8d:33:40:1d:e5:8a:df:86:4b:de:67:59:d0:aa:
94:83:93:bd:f7:49:47:b7:fc:56:70:0b:e3:68:67:94:53:5f:
d3:48:58:be:dc:04:ed:f3:74:ae:76:c2:b7:ca:03:c2:e7:2a:
23:1c:2b:28:42:8b:45:bb:c6:08:d7:4c:8f:10:05:0a:80:2a:
08:13:4a:c3:5a:94:69:22:16:cd:a3:12:f5:07:ff:00:26:b8:
ee:cd:5e:6d:c8:5a:a5:d9:3c:36:65:10:f7:1d:e3:91:f3:33:
7d:4f:5a:11:87:d1:79:4f:f3:55:4b:56:9b:a7:08:c3:d0:c4:
cb:2d:d8:8c:dc:f7:d8:ac:60:73:34:5f:26:85:64:0f:a3:cc:
66:41:05:90:a7:1f:10:b8:f5:ce:b7:d5:67:54:13:77:31:57:
a7:1c:60:c2:c4:c0:af:17:4e:1e:a2:8d:86:3f:70:88:d0:1b:
5d:cb:df:67:a8:15:47:04:3c:88:89:89:cc:fc:52:be:3d:fb:
2c:95:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:40 2025 by rpki-client