Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
File: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft (raw, json)
Hash identifier: eRUPtJnJ4TyG4iVMQ2qcRoXaUk3eRDU1F+huhgp+18s=
Subject key identifier: DD:AB:CC:47:CD:90:A9:F6:6D:64:0A:8F:D7:BD:B5:88:67:97:EC:BE
Authority key identifier: 35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
Certificate issuer: /CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Certificate serial: 019A522C0EC8DC0F33A2419938EF84D03227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
Manifest number: 0ABB
Signing time: Wed 05 Nov 2025 04:00:10 +0000
Manifest this update: Wed 05 Nov 2025 04:00:10 +0000
Manifest next update: Thu 06 Nov 2025 04:00:10 +0000
Files and hashes: 1: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl (hash: T+VTOS79iroeeBLlP+F+eFM+0ufy27zy6F188q5R49c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:0e:c8:dc:0f:33:a2:41:99:38:ef:84:d0:32:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Validity
Not Before: Nov 5 04:00:10 2025 GMT
Not After : Nov 6 04:00:10 2025 GMT
Subject: CN=ddabcc47cd90a9f66d640a8fd7bdb5886797ecbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:24:e0:13:69:ab:80:b2:0d:04:6d:90:ac:
1c:fd:6b:5b:6b:c1:15:73:85:08:5a:d9:4a:28:87:
bb:ad:3f:41:15:df:0f:6e:0a:8e:64:77:45:81:58:
99:de:a3:bb:44:a5:97:9f:79:07:2f:b4:a0:04:c6:
36:e5:1d:49:79:1b:91:0e:11:54:a4:1f:69:16:af:
89:a3:fe:c4:fa:73:42:c0:42:d1:d7:70:7e:15:db:
e7:f3:65:90:4f:f7:df:11:5c:f2:a4:9a:15:47:5e:
6c:49:a3:59:09:a3:f6:7c:07:ef:42:80:5c:0c:f4:
97:e7:5f:c8:e7:7a:54:2a:af:d2:98:82:8c:f7:af:
30:ec:f7:3e:e7:16:0d:fb:c7:d4:d9:42:24:44:fb:
a7:d2:f6:8e:3a:89:be:12:27:5e:27:df:68:04:94:
54:d5:2e:af:57:5e:cd:2b:48:c7:8f:23:6b:30:54:
e3:64:23:64:83:3e:5a:41:d2:8f:8f:e1:13:b9:ad:
9a:44:3c:1c:49:41:d5:fb:86:fc:4c:56:f2:2e:d7:
2f:53:33:87:4b:0a:5c:9d:76:6d:e2:bf:7d:cc:e4:
03:cd:05:90:af:8f:ed:de:0e:06:7a:d2:7b:5b:f2:
69:58:37:5d:a3:a5:9d:c0:05:ad:1d:f3:52:1b:69:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:CC:47:CD:90:A9:F6:6D:64:0A:8F:D7:BD:B5:88:67:97:EC:BE
X509v3 Authority Key Identifier:
keyid:35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:09:d2:f2:b5:cd:8d:19:9a:1d:cc:3c:6a:5a:09:af:96:b9:
c6:84:13:11:83:c1:29:2e:a2:db:91:a0:d1:42:2b:5a:f5:5c:
b3:25:f7:f5:39:15:3d:f8:95:46:ea:2b:b3:98:98:5e:07:ae:
f3:e3:13:d8:6f:eb:b4:e8:df:17:71:9e:9b:e1:13:11:e2:5a:
5b:eb:ee:8b:13:f7:44:52:ae:86:53:7b:65:39:07:11:f1:5e:
5e:7a:7c:ee:67:d2:43:77:e0:dc:82:7d:d5:0b:10:5a:a9:8a:
79:dd:49:24:1c:4f:81:f6:89:57:34:35:9d:65:c4:48:99:d8:
ec:ec:58:75:c2:2c:87:1d:87:35:94:d1:57:ee:af:84:bc:c9:
c1:32:5d:d6:a1:75:88:ce:10:d9:74:24:e6:1b:88:dd:f1:5f:
e2:0d:e2:1e:41:06:da:f8:ef:46:07:1f:1e:c6:c8:0b:8e:f7:
16:7f:64:7f:9e:2c:55:c8:2c:bb:b1:39:01:2a:d8:01:59:c2:
0c:0a:81:fb:53:de:cb:8f:8d:21:40:c4:08:a5:5a:73:c7:7b:
70:f3:dd:6f:6a:31:a5:4d:e3:09:ca:10:2e:22:98:e7:01:23:
54:47:dc:56:73:51:aa:fb:f0:95:81:53:0b:81:d1:05:0a:86:
3d:7d:4f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:18:02 2025 by rpki-client