Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File: Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier: sp1duAtnwajdFf8/yFQjx6bciD3nqiNVYppaUAehXXI=
Subject key identifier: EA:9F:B0:DD:6C:C7:BE:AC:E6:51:F5:81:C4:8D:70:F8:F4:3C:F7:58
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 019A4DAACA5942FF39B5F0DF087C2BCF4609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number: 034B
Signing time: Tue 04 Nov 2025 07:00:29 +0000
Manifest this update: Tue 04 Nov 2025 07:00:29 +0000
Manifest next update: Wed 05 Nov 2025 07:00:29 +0000
Files and hashes: 1: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: aUswtFjpIaALaim4clnW5o/gBa6mvMIGm8k61AGbvNE=)
2: vLw_9uPb3Irigwnvf70YcfYSc4I.roa (hash: FMmqrUGJnKtzvJZcwgN7Qfl5fWAjm916Dx0Zjbp3RSM=)
3: wlrH8iJKD-dvArKLHwGDyb-b3_A.roa (hash: MNpmVDPz5k8I2IkuWOZyn4/S4dD0F06yQSeegbd6Lco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ca:59:42:ff:39:b5:f0:df:08:7c:2b:cf:46:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Nov 4 07:00:29 2025 GMT
Not After : Nov 5 07:00:29 2025 GMT
Subject: CN=ea9fb0dd6cc7beace651f581c48d70f8f43cf758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:e3:80:e6:0d:f4:95:a6:dd:b7:06:0d:90:
24:5f:6d:85:e9:8e:09:ff:30:1c:10:06:84:14:ef:
4e:5b:e1:de:b0:cd:38:b2:6f:3f:85:99:02:4a:eb:
c3:0e:55:6c:7d:12:22:23:a3:f3:ff:c3:17:1f:a7:
69:01:91:2e:06:6f:f2:9a:7a:3d:0e:89:64:58:38:
1b:83:b5:33:6a:a8:99:f7:45:45:32:be:89:3d:59:
06:f9:37:62:b9:0e:94:c1:b4:88:0c:00:45:eb:60:
84:51:90:dc:d7:9b:62:9a:f6:8a:0c:f5:dc:f5:78:
73:ba:40:37:53:53:5a:5c:3f:f2:51:c6:08:39:32:
09:6e:e9:3c:79:af:c0:17:56:29:6e:64:aa:05:cf:
a4:c0:d6:a4:f0:3e:b3:47:05:b9:78:84:a0:d1:bd:
1e:5e:14:35:5b:5d:c0:92:bd:69:0a:39:a4:c0:05:
22:58:a4:e8:d5:75:01:9b:26:c4:f6:b9:ca:72:3c:
d5:06:7b:2b:a1:b7:f9:28:f0:68:20:f4:03:42:86:
e7:a5:9d:10:ae:54:7f:1d:6b:6a:a3:5f:39:e6:02:
20:b1:1b:f0:6f:18:55:18:0e:14:00:be:ee:c3:d1:
79:38:e9:c5:51:18:fd:16:92:c6:69:19:e9:69:bc:
b3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9F:B0:DD:6C:C7:BE:AC:E6:51:F5:81:C4:8D:70:F8:F4:3C:F7:58
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9f:b3:40:17:b8:a6:8e:5a:44:3f:aa:a5:0c:ef:88:9b:a0:
5d:f7:ee:72:98:84:36:fd:0d:23:af:f8:e3:fe:55:be:6d:e7:
4f:ad:ae:fe:be:58:87:4b:2c:6e:49:cf:07:94:e3:0a:09:73:
e8:cc:67:fe:b4:98:ce:20:a2:82:5d:75:bd:8e:16:e5:49:5a:
a5:38:c3:af:be:27:99:b1:61:4e:e4:a5:1a:89:7e:24:e2:a7:
db:3c:9c:be:8f:40:b4:c0:54:88:8e:71:fe:91:5c:73:c9:8d:
8b:11:0d:40:a0:09:2b:9e:ce:e6:15:1e:74:c5:79:19:a5:6a:
2e:54:8c:2e:9e:8d:b5:db:9d:a2:67:1f:92:72:bf:fa:11:1c:
a2:d5:dc:a9:4c:c6:54:40:49:17:9f:16:f7:5e:d9:c7:29:7d:
f7:78:07:71:c7:e1:d9:58:11:9e:13:ce:92:18:10:dd:50:b9:
5a:56:4e:e2:c7:7e:b7:51:94:98:0b:23:c2:55:0a:ac:26:7c:
3f:dd:d7:84:82:6c:4d:e0:2b:e1:34:74:51:fe:8b:4a:4a:b3:
31:32:1f:cd:a7:7c:4b:0a:07:1f:9c:13:87:b6:28:50:68:50:
be:87:87:ca:cc:19:df:07:59:6f:58:2f:64:68:3c:ac:91:2f:
4e:80:d3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:51 2025 by rpki-client