Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
File: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft (raw, json)
Hash identifier: JWrPMtJYzfb+wLFzYofjurVGcIpMxA6DJYzBNMQtH7g=
Subject key identifier: 7B:71:7C:FB:DE:6B:5C:92:71:33:D2:02:AE:54:B8:56:DD:B2:D1:84
Authority key identifier: 35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
Certificate issuer: /CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Certificate serial: 019A4F6283D8A360E6A628D9D4C4D738DDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
Manifest number: 04D8
Signing time: Tue 04 Nov 2025 15:00:47 +0000
Manifest this update: Tue 04 Nov 2025 15:00:47 +0000
Manifest next update: Wed 05 Nov 2025 15:00:47 +0000
Files and hashes: 1: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl (hash: EN/Rm1WHAwKl2kRbPtUR7KVSZnR5AIWR/WgWt9ctbSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:83:d8:a3:60:e6:a6:28:d9:d4:c4:d7:38:dd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Validity
Not Before: Nov 4 15:00:47 2025 GMT
Not After : Nov 5 15:00:47 2025 GMT
Subject: CN=7b717cfbde6b5c927133d202ae54b856ddb2d184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:8e:51:11:f5:a1:20:cc:65:e5:42:0d:94:
36:e2:8e:63:a3:5d:89:29:4c:03:e2:c0:62:35:86:
9c:ad:c5:9e:85:75:26:f7:51:db:e4:b9:b5:ae:68:
21:25:5a:9c:38:2b:5d:7b:a6:3c:34:2b:4d:37:d8:
7d:53:9b:cd:e0:55:9e:89:f6:5c:2c:26:d0:dd:28:
06:4a:58:12:1c:5d:c1:50:93:89:3c:db:78:e1:fd:
4c:75:d4:f1:8a:fd:e5:c2:b1:29:d1:50:f4:8a:84:
28:0b:19:c9:e0:c7:a5:65:8b:4c:c7:c7:37:8d:fa:
f8:03:43:56:c7:2e:48:e7:8c:3d:26:89:0d:ba:15:
1a:7b:02:d4:1a:1f:3f:b6:01:f8:ad:aa:f1:d8:31:
d8:83:31:30:ec:63:83:31:4d:f9:56:6c:5f:6b:22:
b4:ab:d6:01:ce:c4:07:e3:e2:bc:fa:d0:6f:a3:23:
ff:a1:c2:b3:f8:76:e4:65:47:ba:e1:27:94:73:bd:
a1:47:7b:07:77:0d:7d:46:35:d4:64:70:0d:03:63:
79:c0:a1:24:d8:45:04:2b:2e:96:8f:1e:b2:87:61:
20:e2:88:9e:04:19:b9:2f:ac:29:6b:a5:c0:87:03:
97:1b:be:78:38:73:1c:e3:6f:8e:c5:82:9d:92:06:
de:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:71:7C:FB:DE:6B:5C:92:71:33:D2:02:AE:54:B8:56:DD:B2:D1:84
X509v3 Authority Key Identifier:
keyid:35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4f:4f:19:68:39:5d:a1:2d:df:4b:26:3b:63:5b:33:b9:6c:
ac:58:cd:9c:d3:07:ca:50:31:30:c4:c2:57:13:a0:d7:42:57:
2a:2b:60:91:65:05:fe:b0:4c:e8:c1:63:17:2f:1e:2a:61:c6:
80:7c:9e:da:69:21:df:29:55:b2:0b:d5:d1:11:c7:f3:46:a8:
de:18:af:e0:65:2f:fb:6b:42:fa:a6:fc:ac:25:fa:cc:20:a7:
56:07:fd:1a:16:0f:2f:44:26:ee:8b:86:7d:8e:ef:80:1c:b2:
a6:bf:26:38:d9:8d:db:c3:33:58:1d:f1:53:1f:da:e7:6f:29:
bd:ee:76:28:3b:9d:3f:92:8a:9f:ee:d8:8f:26:ae:85:63:18:
4a:f8:ca:79:8b:48:68:f0:e7:08:c3:2f:f8:8b:93:e1:49:26:
db:73:f2:70:b0:ce:d3:75:e2:44:f7:bd:89:e4:55:9d:a5:ac:
4b:3e:e5:b8:c2:1a:5f:57:54:08:31:b9:e9:70:a8:9c:48:7f:
84:5c:0a:9b:57:41:da:46:9f:df:8f:13:10:e1:93:4c:41:e9:
9c:ef:2c:5f:a8:27:d0:b4:2f:fc:44:ac:88:15:1c:54:c2:43:
b5:72:c5:98:67:95:3c:45:bd:53:98:96:12:a7:22:fa:ad:33:
65:ae:8c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:31 2025 by rpki-client