Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
File: NWlXUM1GUx3eil-yZyzcgw09DG4.mft (raw, json)
Hash identifier: r/h3m5nLmyJcns0vKzHce+W/t00y/sUp/0n1+2TIeNw=
Subject key identifier: CB:A1:52:2A:82:A7:E3:00:4E:9B:E1:69:00:3D:3E:EC:83:6C:26:23
Authority key identifier: 35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E
Certificate issuer: /CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e
Certificate serial: 0199FCFDAD6278A1EBFBC2716EEF35DAE991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
Manifest number: 04FF
Signing time: Sun 19 Oct 2025 15:01:47 +0000
Manifest this update: Sun 19 Oct 2025 15:01:47 +0000
Manifest next update: Mon 20 Oct 2025 15:01:47 +0000
Files and hashes: 1: NWlXUM1GUx3eil-yZyzcgw09DG4.crl (hash: unHghlBsNb7CZpWkr8Q46UICXz2VemS06ybC5LyzMDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:ad:62:78:a1:eb:fb:c2:71:6e:ef:35:da:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e
Validity
Not Before: Oct 19 15:01:47 2025 GMT
Not After : Oct 20 15:01:47 2025 GMT
Subject: CN=cba1522a82a7e3004e9be169003d3eec836c2623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:5b:b1:54:40:4c:c9:4d:4f:df:62:e3:a6:
8b:bb:d8:e6:2a:56:f5:10:ac:96:ac:cf:b5:50:c0:
14:f8:08:2f:93:ca:b5:32:a4:82:39:73:9c:bf:4e:
c3:83:fb:f2:ab:70:e4:6c:bb:0a:32:8f:7d:d6:ac:
dc:16:1d:6a:e9:f5:b4:78:c5:56:50:41:dc:71:ce:
94:34:15:a6:60:b1:96:c8:86:3e:9d:d0:88:1d:78:
74:8e:fe:29:21:a8:d0:aa:87:9a:9a:f4:c7:23:81:
ed:a5:f7:54:f7:16:42:a4:8e:61:66:cc:a9:80:57:
c5:63:48:85:40:db:79:a6:54:73:e6:0d:da:a6:77:
e5:92:f5:89:d2:35:f6:0c:60:a5:e2:58:78:82:ce:
5a:42:ad:92:4d:93:6e:dd:18:80:65:ef:15:69:ec:
57:67:eb:14:6f:f6:10:1f:3c:42:b2:6c:f2:d8:2d:
d3:ce:ba:5d:f3:20:5e:ad:9b:09:8f:6d:07:13:d1:
52:a9:fe:e4:6c:01:4a:54:be:2f:b2:93:26:de:bf:
63:57:3a:b2:c7:e8:07:85:79:10:0f:e6:bc:a3:de:
3d:91:f8:79:e6:cd:01:8d:40:81:10:b1:cf:bd:36:
68:a9:66:7b:da:30:aa:bf:d1:cd:bb:13:1c:3b:b3:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:52:2A:82:A7:E3:00:4E:9B:E1:69:00:3D:3E:EC:83:6C:26:23
X509v3 Authority Key Identifier:
keyid:35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e4:19:98:d8:24:a2:e4:46:83:a5:13:37:ae:e4:4d:bf:e3:
4b:8e:06:67:87:c0:cf:72:de:e6:f9:56:1a:d7:34:88:91:50:
bf:2b:c8:fd:55:2a:c8:4e:d0:d1:33:06:ca:ec:5a:e4:4c:21:
7d:63:0f:e7:16:b0:f1:ff:24:89:2e:28:56:3a:8e:b4:1f:d4:
e3:e0:cc:4d:16:0e:ff:93:49:d2:09:9f:35:48:65:cb:de:f4:
43:ec:bf:e7:56:9c:f6:60:45:8b:97:d6:50:01:d6:71:b9:8d:
ea:f4:f8:5e:3c:43:d1:fc:c6:35:23:50:48:43:9c:a3:8f:1c:
f2:9a:07:3f:67:d5:4b:c0:a9:0a:d2:02:e2:74:78:24:67:d6:
91:29:b1:9d:ab:26:57:3a:a8:85:56:d0:ba:19:15:2b:21:ae:
a5:26:6a:8d:37:84:e1:97:b9:23:4a:ce:7e:09:d7:f7:13:60:
6a:e7:30:cf:36:20:97:86:ac:71:4e:ab:21:9c:e0:1e:96:10:
d2:a1:d5:c0:c2:71:09:3d:ed:46:5c:2b:b9:24:f5:fd:26:de:
0f:36:05:2d:9b:ed:55:1b:81:2f:87:3c:6f:89:9c:2a:8a:c3:
88:12:82:bc:76:fb:0f:21:85:0d:59:13:a8:f3:3c:9e:98:be:
92:22:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:36 2025 by rpki-client