Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier: KNIx3wdOVUQSembL3LCWUN6i39zbcI0UAdudn2XnJkg=
Subject key identifier: 3B:1B:BB:9F:FD:1F:1E:78:18:DB:01:FF:E6:0B:C1:66:7D:1E:0A:A4
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial: 019A4D05B7D0A7B810112BF04969FB2BA2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 04:00:11 +0000
Manifest this update: Tue 04 Nov 2025 04:00:11 +0000
Manifest next update: Wed 05 Nov 2025 04:00:11 +0000
Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: Uwj/40Xs4QeW2N487CWq5RwyUcOlj/TFv2mWnG9JaWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:b7:d0:a7:b8:10:11:2b:f0:49:69:fb:2b:a2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Validity
Not Before: Nov 4 04:00:11 2025 GMT
Not After : Nov 5 04:00:11 2025 GMT
Subject: CN=3b1bbb9ffd1f1e7818db01ffe60bc1667d1e0aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:73:bb:19:59:2f:1b:d3:05:5a:df:49:ec:
6d:b5:63:21:bc:d1:d0:9a:2e:a6:c1:6c:00:31:55:
38:5b:97:2a:02:c7:32:7b:c7:00:cc:b7:51:fb:6d:
fc:f9:56:96:ca:92:f2:d4:66:77:e5:e9:a6:4d:9a:
c9:52:09:6a:81:99:d6:57:eb:08:6b:cf:7c:e1:07:
b8:18:b7:f7:43:c6:28:e6:08:72:b8:83:3b:75:dd:
04:30:0b:2a:82:02:39:24:2f:d2:87:2b:07:9d:88:
db:28:15:55:97:db:8a:1b:98:44:21:34:e5:3a:29:
61:e7:d9:a5:31:9a:92:df:a5:72:16:b5:96:fd:70:
63:d5:a7:fd:60:34:bd:7e:12:d0:f1:48:3b:fe:fe:
60:e9:c0:fc:ba:1e:39:d7:e6:78:03:35:f2:f0:41:
f4:9c:28:4e:5a:db:f6:43:2a:da:ce:8b:ff:6c:81:
2d:be:89:ba:af:c8:ec:68:42:2f:ec:f0:45:29:eb:
41:91:87:e3:c7:83:ca:22:3a:b9:80:46:e9:48:90:
93:28:25:85:4e:23:1a:2a:24:1c:aa:4b:7f:4e:5c:
07:f1:11:09:ad:ce:96:81:02:ac:c4:52:04:30:05:
bc:e4:b5:f8:f0:28:ac:0a:81:7c:34:76:c5:76:46:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1B:BB:9F:FD:1F:1E:78:18:DB:01:FF:E6:0B:C1:66:7D:1E:0A:A4
X509v3 Authority Key Identifier:
keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f9:5f:34:15:65:ab:20:24:14:ea:ed:b8:25:d2:dd:74:e4:d6:
93:f5:a1:4f:31:cb:18:f6:93:e3:51:89:67:de:b7:03:db:d1:
a4:00:19:bd:58:5a:b9:15:3a:f6:a7:0b:7b:dc:23:f5:58:57:
05:86:4a:a3:fc:4e:e2:c8:2e:64:38:9b:1c:88:2e:97:3a:47:
35:c6:02:a7:df:21:c4:56:4a:7c:b0:5d:97:6f:e5:ac:e9:9e:
e2:46:67:4f:fb:85:7d:ca:13:1e:d4:2b:e5:e5:70:98:29:0c:
fd:1c:a9:80:3d:6f:c7:c1:c5:32:1e:ec:06:0b:fe:71:42:95:
91:21:a7:c1:2c:1a:4b:a3:fa:6e:7c:5d:62:8f:f0:e2:57:b4:
70:2b:9a:44:8f:fa:d0:ad:b9:46:30:28:ef:9a:16:0c:1c:ed:
ba:d1:82:7d:95:1d:1b:90:b4:db:5d:65:16:6c:c6:45:d3:00:
7d:73:26:93:15:d6:48:6f:9b:03:12:46:dc:ef:0e:cf:55:55:
09:ed:f3:80:71:b7:e0:31:52:f3:ce:a1:01:63:de:55:fb:4e:
a5:89:ea:a4:0e:20:c5:d0:33:b1:d1:99:29:d2:82:ca:07:7d:
44:4e:ea:25:ed:fd:fb:47:8f:2d:39:e2:0c:bf:69:b0:9a:e0:
9b:00:8b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:50 2025 by rpki-client