Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
File: Nq6kWA8QexEmjJbqMYko1O11_5M.mft (raw, json)
Hash identifier: sqTpxOCf5uEjIZVWIH4szkx2pzXr9ZKdlNQ7z5HFaQM=
Subject key identifier: 54:39:8B:8B:04:9C:3D:5D:B5:13:60:BA:E8:56:66:D8:D5:55:67:5F
Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
Certificate issuer: /CN=36aea4580f107b11268c96ea318928d4ed75ff93
Certificate serial: 019A4E4F5C36ADB015E4AF0EE304B7CFAB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
Manifest number: 05C4
Signing time: Tue 04 Nov 2025 10:00:15 +0000
Manifest this update: Tue 04 Nov 2025 10:00:15 +0000
Manifest next update: Wed 05 Nov 2025 10:00:15 +0000
Files and hashes: 1: Nq6kWA8QexEmjJbqMYko1O11_5M.crl (hash: xwWEBnf1XqGAUlKYS1OCR+etxKnDkunmNDqnd//Bz1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:5c:36:ad:b0:15:e4:af:0e:e3:04:b7:cf:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93
Validity
Not Before: Nov 4 10:00:15 2025 GMT
Not After : Nov 5 10:00:15 2025 GMT
Subject: CN=54398b8b049c3d5db51360bae85666d8d555675f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ed:10:99:26:6e:b0:19:de:14:8e:59:6e:0e:
da:29:0f:28:4a:35:90:73:bd:0f:82:d6:4f:59:78:
4b:c0:d2:c3:3d:6b:fa:24:09:da:59:bd:60:15:91:
66:30:03:fc:a0:cf:23:b5:d8:99:15:0f:4e:1b:f3:
a7:bc:b1:e1:02:e3:a1:99:f1:f2:0b:b2:8a:85:79:
05:dc:6e:c8:ca:20:6c:2d:01:ba:68:bc:7e:a9:78:
31:58:b1:6a:59:0b:ab:68:3a:ea:11:06:7e:78:7a:
3c:76:4b:76:fa:89:fa:95:8f:5e:11:7c:7e:e0:5d:
02:08:b0:43:b8:8b:be:d0:7c:84:ac:89:03:0d:28:
06:7c:a1:6e:a3:f0:00:c0:67:1f:40:eb:e2:8e:c6:
f0:28:35:12:32:7a:2d:a7:9e:e1:39:e1:ce:5f:94:
0c:a9:1c:eb:92:f1:99:53:04:0e:f3:2e:fa:4a:37:
e4:24:c5:04:39:59:be:94:ba:41:60:af:a2:83:17:
06:f5:b4:31:bc:a7:ab:bc:7c:e8:b3:2f:25:63:25:
f3:d6:6f:9f:d8:79:b0:27:85:fb:78:5e:a5:1d:34:
d7:96:65:f4:28:4b:d2:67:a5:92:3f:ee:6f:85:f1:
a7:7e:3c:d3:fe:01:3a:44:54:e2:31:15:64:b4:ec:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:39:8B:8B:04:9C:3D:5D:B5:13:60:BA:E8:56:66:D8:D5:55:67:5F
X509v3 Authority Key Identifier:
keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4d:e7:e8:98:e6:4f:d4:6a:a0:fd:b0:97:5f:ad:91:f8:16:
b0:fa:32:6c:ce:88:e3:c2:e4:a2:8e:bb:d7:d9:1c:17:0e:2e:
81:dd:31:44:53:ac:25:cf:57:1e:04:ca:57:f6:71:cb:07:0d:
08:72:c3:dc:98:13:70:9d:3e:da:b5:14:ab:1f:c1:ed:1f:59:
69:61:8c:ee:77:2d:e3:52:31:c7:d1:07:3c:0c:3c:f1:4b:0e:
b0:46:03:53:85:18:a5:1d:70:7d:92:f5:95:f9:be:82:13:45:
c2:40:d3:01:b8:14:1d:d4:f3:38:37:3f:ee:e4:52:c4:72:5f:
1c:38:20:da:e5:21:af:e3:61:3c:61:57:61:0a:59:40:e9:e7:
9d:79:c3:b3:1a:0b:36:25:24:d4:c6:fa:dc:86:21:fa:cf:87:
fb:eb:e3:98:e1:30:1a:b4:c6:8b:54:9f:af:08:b5:84:2e:20:
4b:64:e3:d1:a2:b9:3f:35:d1:7a:db:34:b5:00:68:b6:ac:aa:
f4:9b:4a:6d:71:03:70:a0:53:01:13:92:9a:5a:29:83:20:7c:
24:fa:e7:42:17:08:f0:76:7c:41:9d:b8:33:f8:07:7b:ff:e9:
39:95:10:13:58:50:78:28:6c:3d:0e:73:f8:9f:41:cb:7e:3a:
42:2c:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:40 2025 by rpki-client