Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
File: NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json)
Hash identifier: qbox2nwfE2a1KRMs0xwWZxmGypt48mSlIjlbeISroyE=
Subject key identifier: 9A:2B:B9:21:93:8F:2C:E9:85:65:7C:58:29:CB:B5:63:88:24:89:72
Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Certificate issuer: /CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Certificate serial: 019A4F629B690DD63F455EE29C83073E817D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
Manifest number: 1252
Signing time: Tue 04 Nov 2025 15:00:53 +0000
Manifest this update: Tue 04 Nov 2025 15:00:53 +0000
Manifest next update: Wed 05 Nov 2025 15:00:53 +0000
Files and hashes: 1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: iLKQgB9dvPU3RyEl3Ked4t+gLH9BhU9dTR0Qf3C62S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9b:69:0d:d6:3f:45:5e:e2:9c:83:07:3e:81:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Validity
Not Before: Nov 4 15:00:53 2025 GMT
Not After : Nov 5 15:00:53 2025 GMT
Subject: CN=9a2bb921938f2ce985657c5829cbb56388248972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c7:a5:68:5b:7b:12:8a:f3:82:bf:90:d2:92:
40:ff:0d:11:76:d8:e2:d1:d7:5f:f1:ce:f3:f2:96:
df:32:94:14:e6:d1:d7:6b:e5:6a:3a:e2:59:ae:9c:
c5:6c:4d:8f:70:a6:f7:82:cb:40:cc:c5:e2:59:0d:
7b:21:98:ed:ff:8b:de:2f:60:ee:92:94:be:91:b9:
94:42:b0:ee:ba:3d:5a:79:54:a4:89:d0:38:f7:d0:
b8:ee:a4:49:27:b7:dc:4b:38:44:dd:1b:bc:2d:8c:
b2:5b:f2:68:0c:19:9a:d0:80:e6:bd:31:d8:e5:8f:
cf:64:36:7c:c3:31:b1:a3:d7:a9:ae:f9:15:0b:40:
ea:bf:11:fb:11:0a:58:6b:58:2e:2e:3c:3c:60:ab:
88:dd:d0:52:29:6c:b1:5c:07:dd:3d:db:88:be:2c:
a3:b1:e3:10:79:ae:0b:55:36:a2:7d:87:b1:66:8e:
01:cb:72:2c:eb:cd:54:57:db:94:ac:96:e4:f8:a6:
6a:55:bb:8d:0c:33:32:b0:e3:d3:42:5f:d2:5a:e4:
32:75:c5:88:87:57:b9:43:9d:ba:f2:e1:82:70:3d:
8f:a2:2c:22:5f:ec:a5:96:6e:29:1d:3e:f6:fd:9c:
80:d1:af:e7:a4:52:fb:6d:04:90:e9:c4:a5:25:81:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2B:B9:21:93:8F:2C:E9:85:65:7C:58:29:CB:B5:63:88:24:89:72
X509v3 Authority Key Identifier:
keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ae:ec:d3:a7:7d:07:48:dd:50:ba:7d:ca:a6:5b:66:c3:68:
19:b8:d2:80:78:5d:07:11:43:99:0b:1d:3e:45:f2:6a:c0:39:
99:0f:3d:16:94:a9:aa:df:fe:dc:24:81:35:08:a6:fe:1b:cd:
69:29:0f:84:ca:d9:a5:73:08:e1:c0:d9:e3:62:a6:45:9d:48:
8c:9d:bc:5f:18:7c:eb:88:4b:68:7e:13:04:fb:08:1a:d7:f2:
65:14:98:8b:10:d4:4d:62:3b:8e:f2:50:ed:ae:08:de:ad:4b:
35:26:6a:21:17:9b:1f:06:ed:74:80:ed:e0:3b:ec:94:82:30:
50:a1:e3:a2:64:3a:69:05:ba:44:6d:1c:6d:ee:0b:32:9a:c5:
ec:e8:a1:60:f3:22:40:d5:85:77:5a:fa:54:5a:b1:48:93:87:
65:42:15:a4:84:29:11:d6:b1:06:59:e6:67:9e:39:a2:84:b4:
1e:25:79:b7:9b:17:63:ac:81:a1:4f:72:a0:f0:ce:71:10:30:
4b:cb:61:ef:7d:25:d5:e9:5c:6c:37:ea:d0:e1:3b:f4:4a:73:
d2:31:62:8a:91:2f:5c:cd:ab:e9:77:1f:20:d1:9d:b8:33:ed:
e6:3b:a1:98:d4:be:f2:db:74:1c:70:24:28:de:6c:a3:52:f2:
e6:72:c9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:19:27 2025 by rpki-client