Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
File: nGCyJ8t1doofV4Vuw1M8loSCYZw.mft (raw, json)
Hash identifier: 1s72AmuFkeJp2+5jriamtE3v/y04hP1ZKzJhdHWSsGQ=
Subject key identifier: 24:3E:49:5B:6E:90:2C:CB:7C:7D:2A:B6:46:89:D0:8B:9C:2D:0A:31
Authority key identifier: 9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C
Certificate issuer: /CN=9c60b227cb75768a1f57856ec3533c968482619c
Certificate serial: 0199FC589020F721578F40C730D89C0B9266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
Manifest number: 1594
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: nGCyJ8t1doofV4Vuw1M8loSCYZw.crl (hash: MOCNgn/RV4zrsJ1be9G8iYSfW5HBq9qnw3HDCfB2In4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:90:20:f7:21:57:8f:40:c7:30:d8:9c:0b:92:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c60b227cb75768a1f57856ec3533c968482619c
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=243e495b6e902ccb7c7d2ab64689d08b9c2d0a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:e9:75:d1:00:82:1a:33:52:29:cb:81:54:
f3:bd:5d:1f:42:83:b0:f1:cb:21:20:2c:8f:bc:34:
35:08:c7:23:87:3d:e4:15:3f:11:43:ab:15:a5:8a:
9a:eb:71:8a:1d:8c:2a:52:43:86:05:fd:3a:6f:f0:
05:ab:88:fe:d6:b1:7d:ef:a2:35:1c:5b:23:e5:2c:
9d:7a:b1:51:c2:45:8c:a1:d5:4d:da:d1:86:a5:bd:
b6:4e:e5:8e:61:01:2e:22:92:bf:67:82:3a:20:39:
4d:9c:da:57:f5:96:09:38:1f:8c:ae:03:63:3b:f2:
34:e9:89:37:28:7e:5f:ba:6e:83:79:80:99:c0:1f:
d1:9e:80:0a:5c:51:8f:e3:e9:70:d1:4a:f4:e1:af:
f3:91:16:84:82:34:87:68:85:90:74:2f:dd:9f:91:
b4:b9:1d:13:86:09:59:d8:50:00:c2:9d:5c:7a:fc:
b7:e3:50:27:1c:e1:97:0b:42:e1:4b:f1:c3:ba:70:
e7:33:f6:62:39:f1:31:92:51:db:66:9d:a5:22:8e:
31:dc:58:60:4e:16:fa:85:2f:08:50:0d:e7:42:9c:
9b:3b:30:cf:37:a7:3a:70:7e:26:c1:26:18:3d:48:
b9:7c:5f:1e:7b:00:44:10:5e:6e:4b:d3:08:6e:84:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3E:49:5B:6E:90:2C:CB:7C:7D:2A:B6:46:89:D0:8B:9C:2D:0A:31
X509v3 Authority Key Identifier:
keyid:9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:67:48:9a:ce:db:ba:0b:29:39:5d:f8:22:a1:92:b5:ff:76:
01:6e:7c:6d:5e:3d:ed:d3:96:e8:22:d6:cf:fa:f7:fb:7d:47:
62:48:56:42:13:95:b5:0f:46:45:d1:02:bb:6a:2d:c5:82:de:
51:c0:86:78:91:b1:77:25:1e:33:4c:26:93:98:17:29:4d:e0:
cf:2f:62:7f:ef:1b:19:c2:af:76:33:f9:b6:92:3b:6b:6b:8d:
91:3c:ae:97:e9:57:ef:73:76:8f:38:47:9c:46:91:2c:78:79:
e0:54:30:ce:e5:13:a4:75:ac:3e:ae:e5:ec:97:9e:6c:c6:e6:
6c:0b:2d:ba:e0:6f:aa:23:61:3e:db:d1:95:21:28:b2:76:dc:
48:f0:46:af:01:18:0b:8b:26:fd:4b:92:1d:e6:ad:a7:cd:1f:
18:52:70:5e:9a:07:cc:88:39:c2:35:3a:b0:2e:3d:3b:7b:06:
61:07:a1:b6:1e:e8:1d:e5:f8:ac:7e:59:6a:42:61:f2:2f:a0:
51:b6:95:ed:65:3b:d0:b0:a7:bb:18:e8:34:0a:39:dd:86:62:
80:9e:eb:58:c5:a7:7a:7e:f7:fb:fe:23:15:b7:5d:9b:f3:b6:
b3:88:5d:c1:e7:6f:40:86:71:43:b2:3e:01:67:e0:27:2f:c6:
c3:70:5b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:01 2025 by rpki-client