Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
File: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json)
Hash identifier: Qtx7uODWgaMEH4hvV+qxeucLK7uD7g4IwcZxv1z41gc=
Subject key identifier: 3C:B0:DD:AB:29:EA:A2:76:53:81:6D:5F:E7:A8:49:AC:09:B4:00:3D
Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
Certificate issuer: /CN=363bd1b29c89edb944e28710d193874c94323eaa
Certificate serial: 019A4EF5093D3FF141E107285BB8BFA5D487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
Manifest number: 03F0
Signing time: Tue 04 Nov 2025 13:01:12 +0000
Manifest this update: Tue 04 Nov 2025 13:01:12 +0000
Manifest next update: Wed 05 Nov 2025 13:01:12 +0000
Files and hashes: 1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: Mc/tBlDE6WFvM0BTFUpnFuP6R/nK0ClV9VNgQoupNRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:09:3d:3f:f1:41:e1:07:28:5b:b8:bf:a5:d4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa
Validity
Not Before: Nov 4 13:01:12 2025 GMT
Not After : Nov 5 13:01:12 2025 GMT
Subject: CN=3cb0ddab29eaa27653816d5fe7a849ac09b4003d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:d1:9b:ad:4e:35:ef:26:d4:24:b7:33:04:
84:a9:de:bc:cf:0f:75:09:aa:6d:82:e7:ac:24:f7:
d7:89:39:f0:ef:78:ec:db:e4:90:cb:71:3c:e3:6b:
d0:ff:e2:9e:de:77:c9:f2:c5:6c:84:d5:6e:2e:a3:
54:0d:b6:b1:8d:7b:bc:90:b2:74:dd:f1:4a:32:0c:
f4:43:50:3e:b8:2d:34:8d:84:16:0c:68:b4:73:b3:
29:74:dd:a9:80:c8:f9:71:85:96:74:00:0c:45:54:
3f:ad:c4:15:da:26:4a:af:63:cb:2b:b3:75:e0:36:
73:23:e5:66:ce:e1:77:14:8c:07:8d:77:14:50:e2:
dd:a5:0b:a9:f0:69:90:07:60:bb:16:93:c1:fb:e8:
9e:de:db:b7:91:68:66:f5:30:8f:83:d0:36:f3:b2:
a0:5f:a7:fb:51:cc:8a:ba:6d:9d:e9:03:0e:7c:2c:
59:50:c8:27:88:fa:c8:cf:92:cb:ba:ae:df:05:94:
80:50:f0:a6:b7:8d:f5:36:df:e0:92:57:0a:59:23:
4c:63:78:0b:1c:b5:59:c9:cf:00:35:84:63:69:ad:
15:f6:89:3b:44:cb:50:db:fa:7b:a6:c4:3c:d3:25:
d3:42:1f:3a:e9:30:53:dd:55:86:59:05:bc:50:3a:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:DD:AB:29:EA:A2:76:53:81:6D:5F:E7:A8:49:AC:09:B4:00:3D
X509v3 Authority Key Identifier:
keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:41:a2:de:33:9e:63:90:c1:9b:68:0f:b5:9b:6b:c3:25:b3:
2f:da:fb:53:12:f4:cd:66:c2:ad:0f:43:5d:e5:b3:1e:20:17:
49:4f:a8:63:21:02:af:96:9d:bb:60:d8:81:40:bf:a5:20:35:
40:56:a4:e7:cd:f9:8a:d4:fa:e3:35:c7:ad:27:77:4a:ff:6f:
16:a9:ad:d6:08:a6:3f:2a:85:d7:3e:e0:ce:6e:13:ab:55:4e:
19:bf:c7:6d:96:89:c8:2f:c0:89:30:bd:ee:ed:38:53:c3:3b:
4b:cc:09:43:53:c5:3e:8c:0d:00:bc:bb:46:3a:c6:9f:a8:9f:
68:1e:40:d9:c8:60:60:e6:c1:dc:fb:85:9e:6e:b5:14:bd:cb:
27:de:a0:ac:56:f0:53:76:4e:6e:28:cf:68:ce:7a:0b:37:5d:
8f:16:32:86:f4:a7:34:75:aa:2e:81:59:8f:51:45:d3:00:b0:
f9:1b:4a:6b:53:83:55:14:8d:17:15:a1:1a:33:11:6f:4b:cf:
e8:7c:84:e6:7c:df:ef:29:42:86:8c:a7:f7:ae:32:67:b2:16:
4a:7e:d5:42:a7:26:98:3d:4e:bd:34:7d:74:df:07:46:b2:be:
d0:7f:f4:56:21:cd:a5:93:51:b9:43:52:96:fc:2b:bc:41:10:
7e:92:52:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:14 2025 by rpki-client