Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier: 6rdBFY/QmqKQ7QNwndMEouGJ9BbH/ytBzQsgI7ouNbk=
Subject key identifier: A7:F7:9B:61:74:EB:B8:CD:67:86:43:BF:D4:6E:5E:1E:0F:77:40:7D
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial: 0199FC58D34538F43BA3456E16741901D77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: v5qW2iS+kihvbvzLsC8+6CWquODZkxazG4H1c+Y6FLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d3:45:38:f4:3b:a3:45:6e:16:74:19:01:d7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=a7f79b6174ebb8cd678643bfd46e5e1e0f77407d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:6d:95:cf:31:f2:81:fb:f0:f7:aa:3b:99:
4a:1e:06:33:e0:97:cb:f0:e1:92:29:98:dc:b6:2a:
31:d0:e5:0a:ef:dc:37:ae:a9:bd:60:ed:5c:6a:47:
3a:5d:62:5a:4d:12:4d:a8:c6:7c:c2:89:d7:90:34:
13:f0:a8:56:c5:ea:7d:4e:92:a6:6c:86:b6:a8:a4:
e1:2c:1f:34:14:a9:38:2d:28:11:68:6e:6e:84:27:
fd:62:8f:a3:a2:30:44:de:34:70:15:45:96:a4:72:
1c:2b:8d:06:6b:95:1d:df:2e:bc:06:c9:b5:29:34:
57:21:13:51:ff:33:36:aa:63:50:65:11:b5:02:2d:
55:da:db:d5:b9:91:21:ce:fa:b6:58:74:a6:fe:2a:
2c:a4:af:67:f2:16:37:89:36:9d:f8:02:9e:2e:6d:
71:e3:d4:39:5a:ff:42:40:9b:ba:1e:3c:21:6c:17:
f5:88:4a:65:67:8a:33:b3:76:74:9e:9f:13:4c:d7:
99:65:3c:b4:76:62:b3:a6:aa:98:ac:6d:ee:c9:e1:
ee:0d:09:fc:36:5d:99:87:9d:b0:70:34:f2:38:f9:
ae:22:bb:41:13:0b:da:2e:49:9c:74:27:aa:25:5b:
5d:ff:28:df:07:39:0e:e3:11:cb:4a:b4:cc:55:6e:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F7:9B:61:74:EB:B8:CD:67:86:43:BF:D4:6E:5E:1E:0F:77:40:7D
X509v3 Authority Key Identifier:
keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:03:6c:a3:0e:77:a9:67:32:c1:ef:b1:69:67:a2:c7:25:61:
f5:4b:3c:db:51:ef:24:f4:32:ab:92:1b:37:38:44:37:a4:02:
e8:f7:98:cc:9e:1d:7e:bf:33:dd:0a:38:1c:4b:69:7d:ae:13:
b6:10:f6:e5:84:01:2c:05:2e:fb:4e:5d:87:74:d5:de:52:c5:
21:de:b2:c6:ac:98:b6:7c:93:c1:14:c0:2e:5d:72:b2:1c:a5:
2d:82:2f:ef:fc:14:d9:f9:83:8b:6e:3d:27:b8:74:da:8b:bd:
49:54:45:ef:33:c0:6f:bc:3d:e4:89:14:d6:d7:5b:9f:a4:90:
8e:60:15:ad:f7:d7:66:b7:b9:17:f5:23:90:4f:bf:f7:81:9e:
37:b3:98:1e:19:9a:2a:c5:69:d2:7d:63:d7:2f:01:7c:43:26:
a4:99:7e:ef:1c:2b:8c:10:53:57:dc:a6:61:7f:3a:9d:4f:43:
9c:cd:9f:7e:69:a7:eb:d8:0f:f6:e2:7f:98:a4:15:f1:25:77:
11:ed:20:7e:fe:ef:7e:18:c1:ee:89:07:07:09:53:ce:ba:af:
1b:e1:84:4a:c9:89:31:e1:02:a0:32:ab:57:a8:ec:e4:d5:ce:
2f:17:c5:6d:ef:3a:43:c4:46:78:43:d4:01:1f:fc:94:c7:a9:
28:fa:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:20 2025 by rpki-client