Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
File: NbdnbT6rzEXogFTIuEBH7ocyvHM.mft (raw, json)
Hash identifier: /lWvw2mArmgKOHy60YA40X2xOvt6GUMcViLynpQ1vL0=
Subject key identifier: 66:75:3D:23:5E:7A:F0:28:3B:91:BD:05:14:FA:59:9E:66:BC:ED:DF
Authority key identifier: 35:B7:67:6D:3E:AB:CC:45:E8:80:54:C8:B8:40:47:EE:87:32:BC:73
Certificate issuer: /CN=35b7676d3eabcc45e88054c8b84047ee8732bc73
Certificate serial: 0199FCFD5975F399B2A4947ADEA51644FC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
Manifest number: 03D6
Signing time: Sun 19 Oct 2025 15:01:25 +0000
Manifest this update: Sun 19 Oct 2025 15:01:25 +0000
Manifest next update: Mon 20 Oct 2025 15:01:25 +0000
Files and hashes: 1: NbdnbT6rzEXogFTIuEBH7ocyvHM.crl (hash: uxHx3lzjAO+rNHJVvfYnI9dp6Fb3rbVpnqX4a2bpTok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:59:75:f3:99:b2:a4:94:7a:de:a5:16:44:fc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b7676d3eabcc45e88054c8b84047ee8732bc73
Validity
Not Before: Oct 19 15:01:25 2025 GMT
Not After : Oct 20 15:01:25 2025 GMT
Subject: CN=66753d235e7af0283b91bd0514fa599e66bceddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:89:9a:ce:d9:b7:02:39:7c:8b:66:36:b1:
3e:9f:5d:2f:0a:8a:29:cc:d3:f4:a5:85:3b:1c:cd:
c8:b9:c4:a2:43:6e:5b:27:bc:bb:7a:20:da:35:5e:
4e:60:c9:fe:29:e6:40:a7:b3:9b:7c:35:9f:da:46:
18:12:9d:85:6d:d0:64:c3:bb:78:1c:82:e9:c0:51:
d4:69:c7:57:af:50:bd:51:74:e4:ee:5a:e3:4d:13:
60:e6:cb:fc:9b:5e:9e:bc:cf:1d:c1:71:4c:74:fa:
e9:f0:e6:4b:91:91:10:c6:48:3a:04:bb:fe:5b:99:
81:aa:34:ea:27:ff:44:28:59:8a:1c:40:4f:27:c9:
fa:33:8b:7a:53:05:8d:24:fd:cd:1b:83:2b:26:23:
cd:0c:cb:a6:d8:3a:d6:60:66:97:50:c7:b9:fd:72:
23:9c:ef:72:c5:bc:10:1c:01:0c:49:65:8a:72:eb:
50:23:d0:83:2c:af:b5:71:bf:7b:97:73:29:9c:7d:
47:19:96:78:74:8d:00:24:6a:c0:5c:03:19:ab:9f:
23:62:0d:ed:d8:f9:da:ea:af:43:d0:78:b0:44:bf:
16:3f:bc:55:d2:3c:43:56:80:92:a9:b3:38:59:ec:
d4:8a:20:6a:8c:dc:31:46:93:96:ef:63:9b:80:93:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:75:3D:23:5E:7A:F0:28:3B:91:BD:05:14:FA:59:9E:66:BC:ED:DF
X509v3 Authority Key Identifier:
keyid:35:B7:67:6D:3E:AB:CC:45:E8:80:54:C8:B8:40:47:EE:87:32:BC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbdnbT6rzEXogFTIuEBH7ocyvHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0c71e8-6c09-4850-a6c5-be203f01304d/1/NbdnbT6rzEXogFTIuEBH7ocyvHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0c:24:fd:10:33:98:9c:fa:d7:60:46:53:a1:2d:39:a5:f8:
e9:60:3f:69:c9:d4:0e:98:ff:1a:32:e2:2e:25:8e:a4:4a:a3:
6c:86:57:a6:5d:99:bd:eb:a3:c0:5e:b7:9e:06:74:88:92:9a:
6e:75:d7:9a:be:1f:37:46:db:d6:9b:db:c2:3a:6a:52:86:1a:
ce:b3:bb:24:f4:7c:d6:68:ba:e0:cd:78:2b:a6:46:f7:c9:95:
cb:41:9a:b0:ec:c8:87:c1:51:06:30:ae:7e:a3:ea:3f:44:6c:
0a:1a:71:51:a6:6a:45:43:43:40:64:f5:8b:47:d6:1d:93:4f:
6c:78:4f:b3:69:78:91:0a:fb:76:ac:e4:1a:d7:d9:17:2c:72:
36:47:9f:49:dc:84:07:25:d3:2b:4e:5a:22:aa:f3:ad:98:71:
24:8d:e8:b9:66:70:a5:ff:c5:c8:1f:1a:38:02:56:03:26:22:
f8:05:71:e2:6c:65:c7:2a:b0:2c:77:0c:2c:ab:7b:9c:72:e6:
73:9d:96:62:cc:e4:e0:9d:ce:04:01:3b:58:b6:02:ef:d8:64:
59:2e:f0:e8:29:e8:c2:94:9b:43:9b:74:a6:f0:0b:81:7e:d4:
3d:b7:70:cc:ad:58:d4:9a:be:ff:bc:88:21:3e:d2:7d:17:09:
0b:7e:7d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:18 2025 by rpki-client