Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier: 7FHZnkgA9MrVBrLrLd++Id4Dzo6j8cTkjS+bG0ciPu8=
Subject key identifier: 0E:D3:A4:00:E1:1E:44:C9:11:66:4F:DE:A4:7B:C0:13:FA:EA:E3:DC
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial: 0199FF22D94FBF743A7B0F94923818A0FD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number: 0B72
Signing time: Mon 20 Oct 2025 01:01:37 +0000
Manifest this update: Mon 20 Oct 2025 01:01:37 +0000
Manifest next update: Tue 21 Oct 2025 01:01:37 +0000
Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: 54DL6dj7lZKTZzIW68kdpnb+5rmCrqBdaCOvW1+dQ24=)
2: SN4WN6j4-rBWWV-Y2IngI0okDFk.roa (hash: /CIKiQgS+ZyX8NEUirY7oJW+SA7En87kVbxutLDyvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:d9:4f:bf:74:3a:7b:0f:94:92:38:18:a0:fd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
Validity
Not Before: Oct 20 01:01:37 2025 GMT
Not After : Oct 21 01:01:37 2025 GMT
Subject: CN=0ed3a400e11e44c911664fdea47bc013faeae3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:bb:0a:cb:6f:ea:24:9d:59:2c:88:ad:50:
e0:6d:a8:2d:01:18:c8:36:ab:ee:bc:58:ec:b4:3e:
ff:7f:3b:48:d6:75:07:be:19:8c:38:ea:ee:99:de:
4e:fa:f7:48:37:bd:c4:61:29:8a:c2:0a:d8:43:2c:
5a:45:23:a2:21:49:b5:3c:eb:43:26:94:59:47:c8:
b9:4a:9f:59:f8:ba:2e:be:80:c3:61:5d:d1:c7:7c:
93:03:ed:56:76:38:5a:f8:34:b5:e5:ac:85:e7:81:
9b:55:f0:16:86:73:94:5e:ea:01:74:e9:c5:3e:fb:
e8:49:b1:f2:16:b6:c8:46:6f:07:fc:60:fa:6c:00:
da:a4:0e:20:c3:26:d7:b7:1d:4a:e2:62:7c:f8:37:
c9:02:f0:0e:79:02:7a:c7:0c:bc:aa:0d:b4:9e:ea:
97:fd:bf:6b:1d:52:b0:86:fc:18:16:e0:0f:15:c9:
ea:32:57:c6:e5:a6:06:a4:31:a1:35:37:52:dd:d7:
ea:e4:52:aa:8c:99:0e:75:19:e7:a3:8b:ea:40:80:
97:a3:96:3e:b6:89:5d:c2:b4:9e:a0:08:c1:9b:c4:
bd:f5:3d:3c:ad:f3:7a:32:1e:b3:d7:85:52:25:bc:
5a:ed:49:0e:96:18:61:e6:b5:8c:17:86:28:6e:dd:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D3:A4:00:E1:1E:44:C9:11:66:4F:DE:A4:7B:C0:13:FA:EA:E3:DC
X509v3 Authority Key Identifier:
keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:38:27:49:51:d5:64:a9:23:f4:af:51:62:1b:7b:65:f8:c0:
07:63:81:bd:78:d4:df:71:5f:53:1d:19:a3:39:8d:67:4c:2c:
d0:2c:f8:81:c0:af:a2:0e:f4:b9:0d:f1:94:7a:74:6f:0d:38:
19:5b:29:1c:51:be:ad:11:20:fb:83:bb:46:c1:fe:57:37:75:
c5:5b:2c:cc:61:16:a3:08:53:d7:95:bf:5b:7c:af:1c:96:b3:
79:b9:25:ec:4a:40:09:23:3a:b5:c2:e0:89:4d:80:4c:96:c9:
52:9e:01:97:b7:96:a0:b7:eb:67:5d:ef:92:5a:51:9e:cd:66:
18:b3:06:8c:94:ca:77:3c:20:36:b5:aa:ba:bd:17:74:0c:09:
90:1e:fa:a9:50:51:2d:12:38:96:3c:86:38:e4:0a:01:d6:0e:
72:a2:43:1e:fc:e5:90:da:9b:9f:2f:6b:15:1e:0d:98:a6:31:
a5:a5:cc:ee:a9:99:d4:db:7f:fa:4f:83:2f:7b:9c:70:ea:16:
d0:28:92:41:d2:72:e5:08:7b:6a:67:05:b1:79:58:01:23:cc:
21:96:74:3f:57:b3:8f:cb:3a:27:82:c9:b3:0e:cb:49:6e:ea:
a6:ed:e7:51:2b:a7:f1:d5:75:9c:d8:e2:90:77:71:8e:44:5b:
4e:ac:f0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:43:17 2025 by rpki-client