Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
File: nEbB13YgBThO2FJs-hx0llZPUNM.mft (raw, json)
Hash identifier: qeo2YDeuMqYq4odK/aOVS5ErEeakpPHP+ZXBNVH5XdA=
Subject key identifier: 94:F7:41:4D:97:30:64:FA:8A:AC:FA:68:F4:D0:E0:72:CA:83:1D:FF
Authority key identifier: 9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
Certificate issuer: /CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Certificate serial: 0199FAD7FA00A62432A2FD052D6CE8EE921B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
Manifest number: 057A
Signing time: Sun 19 Oct 2025 05:01:22 +0000
Manifest this update: Sun 19 Oct 2025 05:01:22 +0000
Manifest next update: Mon 20 Oct 2025 05:01:22 +0000
Files and hashes: 1: nEbB13YgBThO2FJs-hx0llZPUNM.crl (hash: b96Mj/306Mx0x6uofdPyFGrAYREaIi+Fa5sqtzMGFV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:fa:00:a6:24:32:a2:fd:05:2d:6c:e8:ee:92:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Validity
Not Before: Oct 19 05:01:22 2025 GMT
Not After : Oct 20 05:01:22 2025 GMT
Subject: CN=94f7414d973064fa8aacfa68f4d0e072ca831dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:c2:3f:45:47:96:5e:51:6a:92:72:1d:02:
55:f4:12:e7:c4:03:a2:9c:1d:df:7f:d5:01:a8:26:
c0:a7:e3:f9:5e:24:ba:46:fc:71:ed:64:b7:1e:4c:
00:fa:18:af:c2:67:d9:5c:e0:82:0f:09:2c:98:ec:
14:20:7e:e3:b6:1a:d4:82:00:34:03:d1:71:b3:78:
71:5c:09:39:1c:68:b6:34:9f:8f:01:56:bc:2c:cc:
7a:25:77:f7:3e:df:f5:28:1d:d4:c6:68:e0:1b:3e:
18:18:86:75:5d:6e:aa:88:de:1e:fe:74:c6:32:df:
80:b3:cf:1c:74:55:fb:a9:cf:08:0b:3b:6a:b1:13:
97:77:6b:f6:0f:c8:3e:71:90:94:0a:af:bb:59:41:
3e:bd:16:a9:b5:0b:13:8c:4f:9b:47:d2:7e:e0:29:
a6:a4:63:97:d1:58:23:1b:f0:be:95:7a:30:4b:ff:
51:16:89:fe:54:5b:03:89:4a:84:ad:d0:c2:b5:e5:
ca:1e:a4:6e:bc:95:77:ce:a9:2c:f3:f8:33:9f:22:
55:f2:2b:e1:cd:fc:91:89:1e:1d:57:6d:b2:50:28:
a8:03:7d:c5:c2:39:60:78:16:59:f9:02:e6:d1:0c:
f9:76:72:fd:62:63:dd:6d:47:16:1a:b7:b9:d2:93:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F7:41:4D:97:30:64:FA:8A:AC:FA:68:F4:D0:E0:72:CA:83:1D:FF
X509v3 Authority Key Identifier:
keyid:9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9a:72:f8:e7:ee:b9:0c:c0:83:df:d1:79:47:fe:e1:54:37:
5f:f6:a5:d0:20:c2:7d:11:eb:9e:ca:d3:ea:21:c6:fe:cf:ff:
d5:a9:71:86:9a:4b:8f:5d:80:d4:68:ae:ff:f1:9a:2f:b9:e8:
05:fe:93:f4:72:bc:6e:fe:03:87:13:5d:aa:f6:fb:aa:5a:25:
09:c0:31:29:6d:84:4c:8a:4f:5b:da:21:ea:f7:a4:d6:70:7a:
9e:f6:34:cc:ea:8c:00:5a:5c:e8:39:f2:7c:20:7f:2a:ee:4a:
44:cd:84:34:23:3b:b9:c2:5f:ca:d6:6e:c2:d7:ff:a7:67:5a:
9f:fc:7e:72:26:b2:06:d6:d3:50:f8:71:27:19:9a:aa:b7:28:
84:8e:62:ac:d6:18:06:9b:ee:31:c7:90:3e:3a:02:68:d6:b2:
2e:ef:f8:a8:b6:9f:60:62:7b:2a:81:37:4f:1a:e2:15:4c:ae:
a4:1c:40:00:70:8a:07:5c:6d:e9:92:a2:de:d3:c8:51:3f:a2:
bc:ba:62:4c:e0:77:1d:be:c7:c8:d0:0e:b1:1e:18:20:3a:13:
e7:18:e4:a8:f3:f6:f5:f8:1c:77:21:93:63:78:10:14:d5:96:
b4:06:9d:9d:c4:f0:99:fa:e8:fc:9b:a4:b7:f8:1f:0a:bb:5e:
ca:45:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:13 2025 by rpki-client