Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: NoZ5mKjy5qyUpWRGGkE/x1T2L1tSpdL7tumQFgnV6HM=
Subject key identifier: EE:BD:8D:83:96:D4:AA:DB:9B:5D:EE:89:23:4A:7E:81:28:54:82:15
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 019A4EF5E743803513039E2A40B51DAF61D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 026D
Signing time: Tue 04 Nov 2025 13:02:09 +0000
Manifest this update: Tue 04 Nov 2025 13:02:09 +0000
Manifest next update: Wed 05 Nov 2025 13:02:09 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: ThiZ1TeKvl5+mw1lOcJMPP5aXpJKAWK1BRN0HZSO5bo=)
2: dy-p251zL98DN5HbKp4vPRlxutc.roa (hash: 4pwGuhrYIr/OJxEBN4t0YB3KYavBF0QhnyAv6oyh4DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e7:43:80:35:13:03:9e:2a:40:b5:1d:af:61:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Nov 4 13:02:09 2025 GMT
Not After : Nov 5 13:02:09 2025 GMT
Subject: CN=eebd8d8396d4aadb9b5dee89234a7e8128548215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:77:33:01:1b:69:ae:4a:e0:33:fd:8e:e6:
47:9b:97:fd:d5:ce:75:a2:28:d2:01:af:10:6d:e0:
17:d8:34:f9:c2:d7:74:54:8a:f6:ee:90:88:d0:39:
86:cf:52:16:d9:89:c8:fb:1b:ca:b5:7e:ae:db:df:
aa:40:79:44:87:35:4f:3d:8a:f8:86:9f:6f:f5:c1:
36:2a:55:19:9d:70:ee:02:e1:da:41:16:85:f6:ed:
72:3c:8f:a7:a3:76:9d:7f:b5:e1:ac:a7:36:d5:55:
85:09:ad:8c:a0:ce:e8:99:9f:a9:be:ec:c0:33:5e:
34:5c:61:a9:35:b5:6a:41:4e:2e:ef:36:c8:ac:f8:
93:05:d8:b9:86:dc:f2:65:3a:5e:41:87:2d:12:fe:
89:19:37:9a:2b:c6:91:96:3b:7c:2a:e5:81:0f:8a:
8c:42:d0:fc:13:13:f0:6f:84:95:0c:99:93:5d:03:
27:5a:d8:f2:2a:55:7e:76:29:2c:1a:62:61:92:43:
d8:1b:ab:94:85:0a:05:71:0f:1f:58:d3:4f:f5:08:
19:25:d6:ad:3a:b1:8e:19:db:81:55:64:91:6b:3e:
d0:c9:ca:68:25:41:64:0c:d5:0b:c2:26:31:fa:9d:
9d:fb:5e:ee:49:ad:37:52:0b:ad:6b:da:44:c1:18:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BD:8D:83:96:D4:AA:DB:9B:5D:EE:89:23:4A:7E:81:28:54:82:15
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:48:97:d0:88:b1:7f:54:ad:d3:56:51:c4:07:dd:95:a7:6f:
2f:c6:a0:16:80:22:a2:0d:18:82:33:63:67:09:a3:a1:cb:4a:
17:e1:c6:9c:02:b2:7f:3c:f2:1c:7e:99:f3:d2:9c:36:62:dc:
d4:d4:99:c9:2d:7b:97:19:ed:bf:55:da:d8:3d:6b:2c:74:e1:
f1:ad:2c:47:ef:2a:a8:17:76:27:27:98:16:27:03:69:48:af:
f7:c7:ab:ec:2d:81:14:44:a8:ea:7b:1f:ea:f6:db:2b:90:c2:
6e:73:93:9a:dc:6f:fa:32:41:9a:5d:9f:fa:3a:5d:39:4c:41:
f8:42:bc:60:5a:37:3c:74:2d:bf:c5:07:bd:85:bf:4d:f9:90:
32:04:ad:01:df:71:a1:54:01:a1:b1:ba:54:f3:c3:40:7a:83:
06:e8:4a:e1:1b:f3:9d:31:82:de:cd:77:1a:cc:d5:c0:7a:ce:
33:64:c5:7f:cb:fc:74:83:fb:ac:60:1b:34:47:b8:ff:70:db:
65:98:76:18:e3:bf:0a:40:3f:bc:20:ab:b1:28:ac:d3:fa:8b:
1d:81:83:9b:5a:3d:5b:dd:03:50:b8:d1:db:9d:0e:fd:e8:60:
63:f4:0b:30:db:81:d5:b4:dc:8d:33:b0:a4:95:74:98:b7:26:
11:a1:33:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:25:02 2025 by rpki-client