Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: 24CEq0vktrQbMDzx9fyF4/s9tcni0BxI3SZ27sFTvac=
Subject key identifier: 70:B0:AC:B7:60:45:F8:3C:33:61:C5:A3:AC:11:5F:58:C7:18:98:12
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 019A51BE53AC47C5B8E14379107457D22793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0DEF
Signing time: Wed 05 Nov 2025 02:00:18 +0000
Manifest this update: Wed 05 Nov 2025 02:00:18 +0000
Manifest next update: Thu 06 Nov 2025 02:00:18 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: 39KOmHDv9RcTYzPH6fC7/anQdsuY4auWxHJ7p3QzyH4=)
2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:53:ac:47:c5:b8:e1:43:79:10:74:57:d2:27:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Nov 5 02:00:18 2025 GMT
Not After : Nov 6 02:00:18 2025 GMT
Subject: CN=70b0acb76045f83c3361c5a3ac115f58c7189812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:6e:55:db:66:48:4a:46:97:93:64:8f:7a:
5c:5b:b6:2a:e0:71:8b:17:e8:85:9a:bc:45:bb:95:
91:51:17:cd:56:91:dc:45:b7:48:ea:8e:5f:f6:cd:
f7:52:8a:c0:9e:cc:5d:8d:7b:25:0d:20:b8:43:50:
45:65:e2:7a:af:cd:88:9e:69:3a:81:4c:07:3a:02:
82:0a:b3:8e:a7:04:0d:49:23:b4:9d:0c:ab:02:4b:
ef:79:62:5c:1a:d9:da:8e:15:a7:1d:79:ca:79:80:
d2:2d:6b:d1:61:79:03:37:c8:be:de:1f:3f:6e:f2:
0f:69:65:92:27:3f:44:66:ca:33:b4:a9:1e:8c:bb:
ab:ca:0a:ce:2a:3a:0f:6e:ea:07:14:ac:9e:c3:56:
88:38:83:e7:44:ca:51:7e:b3:f8:6f:51:56:ec:5f:
ba:8b:85:b6:9a:0e:61:47:d5:87:29:c2:ad:12:ea:
1b:fd:bc:cb:31:d9:2b:81:bd:2b:5c:ca:b7:8f:7b:
66:dc:fd:c9:5c:3f:8f:f6:d5:91:1a:29:c0:7e:b2:
8a:f2:0d:bf:0c:81:d6:64:ae:d4:32:b6:19:aa:f9:
5f:19:b1:0c:cb:26:80:fb:b5:73:fa:d0:60:d8:57:
66:08:3c:9f:31:cf:70:1b:45:1e:c7:d8:e8:82:fd:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:AC:B7:60:45:F8:3C:33:61:C5:A3:AC:11:5F:58:C7:18:98:12
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:90:08:88:82:02:87:db:29:79:b7:15:79:c2:b0:f9:6c:04:
b8:8d:8e:a2:9e:ad:5f:c9:c1:f9:ee:33:e6:eb:af:61:64:d0:
0f:02:6a:2b:f3:49:b0:2c:d5:d7:2f:c3:47:de:01:2f:ae:ee:
f6:e1:9e:5a:91:48:69:30:bc:99:3a:f7:99:2e:e1:72:1e:46:
54:f3:21:a4:e0:09:2b:9c:ce:f8:08:26:db:63:98:3b:90:4c:
18:aa:06:45:1f:79:9f:68:b0:a1:03:cf:2c:25:7d:51:26:92:
ed:f0:70:ff:5e:b8:d9:f3:5e:fa:f0:cc:59:36:e6:20:8a:06:
29:89:54:2e:f6:c7:fc:68:4d:55:fe:70:3f:e9:49:2f:3d:c6:
bc:9f:04:39:eb:77:2a:5f:c1:a2:7b:ba:f6:4a:80:f1:f6:2e:
9c:70:a9:60:9e:8d:8c:19:41:c3:8a:d6:fc:3c:64:d5:3d:98:
c8:86:6b:68:1d:fe:7c:42:df:5c:ca:2c:41:1e:4f:a5:01:8c:
47:d1:1d:49:a3:95:b3:a5:aa:db:fb:83:83:8f:e9:a0:b4:bc:
42:75:a5:dc:8e:bc:f6:88:38:6f:89:ad:c3:4d:12:e9:13:4c:
80:cf:d5:f6:6b:04:8d:9c:52:da:3e:44:d1:14:a0:ac:fd:13:
75:ca:85:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:44 2025 by rpki-client