Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier: O0iwnb7vgib+ppNexyr+trhFKydKZKB4uEqnJdoESDM=
Subject key identifier: 07:12:49:93:B4:C7:E6:2A:FF:AE:E0:00:84:AB:FF:B8:0C:F0:B9:F9
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 019A52D1C6AEE3C7C1BD32F952DC3F954CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number: 1436
Signing time: Wed 05 Nov 2025 07:01:10 +0000
Manifest this update: Wed 05 Nov 2025 07:01:10 +0000
Manifest next update: Thu 06 Nov 2025 07:01:10 +0000
Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: rroyzAIjASjS3QE0EPSixZG2c3LqJrWTkDSl/zjdP44=)
2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:c6:ae:e3:c7:c1:bd:32:f9:52:dc:3f:95:4c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: Nov 5 07:01:10 2025 GMT
Not After : Nov 6 07:01:10 2025 GMT
Subject: CN=07124993b4c7e62affaee00084abffb80cf0b9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:33:bd:73:cc:cc:b1:87:1d:76:65:28:2d:
b1:98:ab:d9:1a:41:fd:10:8e:5d:e8:fc:af:f4:aa:
b0:bd:91:09:b3:7f:fd:b6:1d:6d:a4:cc:a9:47:d7:
75:9b:c7:db:75:08:5f:36:4e:d5:30:ed:64:4b:52:
34:59:94:7c:f7:ab:90:36:fc:7d:64:0c:c4:bc:27:
ff:f2:e2:f8:45:09:f0:69:0f:19:07:af:84:6a:d6:
ea:af:25:2c:bc:28:8f:81:52:10:08:34:cf:61:07:
ac:4c:6d:79:d1:a7:24:86:08:f1:65:e6:40:ee:26:
0c:60:f7:92:8d:b1:65:0a:dd:83:e9:96:27:1d:35:
1b:b9:0b:53:2f:e4:48:7a:7c:4b:bc:b1:89:49:74:
60:8d:b1:07:6e:19:4a:20:96:ab:46:79:d9:3d:aa:
55:00:c3:15:dc:02:7d:f6:89:76:d9:4d:bb:ef:d6:
10:50:bc:0a:7f:74:4e:36:e6:b6:2c:c3:1f:07:98:
71:a0:79:3f:24:04:95:f1:e8:fd:14:79:64:95:d1:
3d:67:89:67:8d:00:f5:a1:22:ef:62:9e:43:e4:a2:
89:e0:17:a3:28:fe:17:2b:62:d8:c6:40:7a:bb:ec:
7a:2c:4e:d4:79:e3:db:e0:af:90:67:dc:48:2b:20:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:12:49:93:B4:C7:E6:2A:FF:AE:E0:00:84:AB:FF:B8:0C:F0:B9:F9
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c4:13:ea:2e:2b:4c:b1:81:83:d4:af:62:eb:7f:e2:7b:3f:
b7:42:44:29:a5:ce:67:57:1a:4f:8a:78:ef:ef:dc:ad:92:9d:
9d:7a:f3:b3:23:26:1e:64:17:c9:90:0d:a4:70:2d:c6:0e:1c:
98:90:a8:6e:7d:40:2a:0f:76:0a:9b:33:80:46:ed:45:1b:87:
da:e8:de:81:5b:de:d6:6e:70:13:3c:f8:de:e8:c1:be:45:b0:
ab:77:42:27:80:9d:6e:4f:9f:23:a3:19:59:84:c3:90:9b:c9:
54:63:75:30:5e:ec:5c:4f:56:06:e3:12:1b:79:69:12:5d:42:
80:4e:cd:1a:e9:1f:26:47:20:d3:15:fe:69:73:32:36:8c:fb:
72:16:44:a0:6c:df:36:40:9f:c5:82:2e:b4:40:d4:c6:6c:e8:
0b:e5:8d:e2:23:7d:ec:45:64:c8:64:f4:46:c4:f1:ba:a8:9f:
cd:60:e7:3e:57:30:cf:51:fc:eb:d7:49:a9:de:d3:b2:e9:cf:
84:72:15:88:07:a7:19:ed:53:66:2d:a8:d6:b1:70:23:65:f8:
f1:87:5f:4d:f4:e0:83:3c:ba:a1:94:28:e7:5a:18:18:a4:11:
9e:52:c6:e9:66:ac:3d:5a:01:23:12:32:09:92:f1:65:5c:99:
bc:f3:c2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:27 2025 by rpki-client