Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
File: NoTy9VGkNSosFNf45pMpqdxD_eA.mft (raw, json)
Hash identifier: 3hHrAILxxKy5Y3gObpIwfwGSo/EtEq4H3xTzaEZqf6w=
Subject key identifier: A7:61:AB:C3:28:31:AA:11:DD:FC:57:19:8F:3E:35:1C:00:AD:91:0D
Authority key identifier: 36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
Certificate issuer: /CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Certificate serial: 019A4E4F82932626D24D89E30014306423AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
Manifest number: 030E
Signing time: Tue 04 Nov 2025 10:00:24 +0000
Manifest this update: Tue 04 Nov 2025 10:00:24 +0000
Manifest next update: Wed 05 Nov 2025 10:00:24 +0000
Files and hashes: 1: NoTy9VGkNSosFNf45pMpqdxD_eA.crl (hash: bjzC1zINDZNUZB6EyTybGJhvBZpPiXlcFTteMALIjn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:82:93:26:26:d2:4d:89:e3:00:14:30:64:23:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Validity
Not Before: Nov 4 10:00:24 2025 GMT
Not After : Nov 5 10:00:24 2025 GMT
Subject: CN=a761abc32831aa11ddfc57198f3e351c00ad910d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:bf:fd:71:69:97:a2:25:e7:50:60:87:89:
cc:b5:27:ce:09:22:51:6d:c5:85:c0:46:66:0d:42:
29:04:55:c6:9e:c6:c5:3a:3a:ea:a3:a2:d8:db:4f:
e1:00:9d:b3:72:25:91:74:db:48:1a:02:72:be:9f:
41:c7:64:93:00:a5:8a:d9:8e:3d:91:1e:9d:02:fb:
b2:01:37:5a:b7:5a:b7:f0:98:8a:25:85:44:00:5c:
c8:7f:81:54:df:a8:68:e9:91:8b:13:20:a9:3f:0b:
ad:d5:43:42:5f:f4:88:ef:17:7f:fb:d0:69:7b:3a:
b9:15:d9:26:b4:74:92:51:a2:d6:9e:3c:94:c5:f9:
6e:13:f4:10:d7:40:5c:15:ae:4d:89:d8:4c:ed:af:
52:f9:76:cb:07:43:33:91:d4:11:02:c0:22:16:a9:
a0:2e:96:1f:c6:98:8c:b1:16:fd:97:8a:61:85:d4:
0c:a3:c1:f9:ee:5e:63:0f:1a:83:3a:a5:ab:55:ce:
17:11:35:7b:2a:c6:48:9c:7c:51:dc:91:24:b5:a3:
fc:15:05:70:cb:58:79:5a:1c:8e:f3:dc:95:f4:cb:
03:b6:0d:c7:be:02:36:4f:67:63:17:df:b4:ad:d5:
49:d4:4d:f5:a1:f8:41:28:16:61:ed:57:d5:c3:34:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:61:AB:C3:28:31:AA:11:DD:FC:57:19:8F:3E:35:1C:00:AD:91:0D
X509v3 Authority Key Identifier:
keyid:36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1e:5b:ef:a9:bc:ee:40:19:e2:ef:fa:f4:e6:84:5b:50:fc:
4c:a2:83:4c:01:42:45:76:5b:58:3d:fe:24:0e:a3:18:50:2a:
c5:8f:fb:7a:c9:f8:39:d8:18:93:17:f3:38:98:4b:97:8f:da:
88:40:8d:f5:ca:66:31:bd:c7:79:9d:68:48:02:bc:bf:eb:d5:
16:e1:c2:ab:a5:14:4c:52:7b:30:a9:5f:88:e0:ba:27:3f:dc:
6e:c4:75:1b:d6:c5:91:55:f5:bb:70:d2:3a:fe:4e:ef:1b:47:
56:e4:c8:77:78:bb:4a:25:14:14:c1:b7:38:41:da:9c:e4:aa:
e0:1e:98:a7:af:83:e8:ef:b5:74:dc:0c:5e:c7:4f:05:75:e0:
b8:e3:a5:8c:c5:2a:d0:12:49:f1:65:7e:e6:e0:8b:78:e7:25:
5d:bf:8a:2d:58:1e:2c:38:9c:be:23:f8:f7:07:a1:4f:00:18:
74:a0:c7:2a:74:c4:a8:b0:6b:bc:d5:34:a8:62:65:a4:6b:a1:
05:cb:97:a9:33:d1:9b:ab:a3:30:9c:d4:6b:2b:4e:80:f3:17:
a0:af:b0:74:85:20:0d:49:39:0e:51:4c:8f:5e:c1:c9:fc:2b:
bc:d2:22:92:ef:ba:5e:d8:83:c6:4d:a8:71:fa:12:44:1b:1f:
ca:cd:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:45:15 2025 by rpki-client