Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier: PpcF587oVZT8eDWV2F0HHieecZ+xM2gBvGjb+6semwI=
Subject key identifier: 5F:47:CD:23:B0:F1:F4:DE:27:AB:D3:9A:72:78:5E:83:3E:FE:16:79
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial: 0199FDDA0E1FC5CAD45CB2AB0BD7DACDEA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number: 07E1
Signing time: Sun 19 Oct 2025 19:02:30 +0000
Manifest this update: Sun 19 Oct 2025 19:02:30 +0000
Manifest next update: Mon 20 Oct 2025 19:02:30 +0000
Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: zE18gxfhy7JIjB8zAZBcNkTzlVXJnBrRKfGQELlu578=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:0e:1f:c5:ca:d4:5c:b2:ab:0b:d7:da:cd:ea:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Validity
Not Before: Oct 19 19:02:30 2025 GMT
Not After : Oct 20 19:02:30 2025 GMT
Subject: CN=5f47cd23b0f1f4de27abd39a72785e833efe1679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:9d:8c:96:99:c3:21:ec:ec:c8:cf:1e:4c:
1a:79:8c:e0:8e:b1:46:37:79:c8:41:43:94:04:61:
2f:fd:3c:00:3d:8e:b4:ac:c5:44:5e:37:7d:32:84:
31:2f:b9:0e:f0:55:75:eb:47:81:0b:ec:f8:58:d6:
87:1f:cf:6d:aa:7a:95:89:81:0a:3f:af:fa:20:fa:
ac:07:0c:a7:33:44:77:56:98:08:cd:14:03:3f:cb:
e7:72:21:fc:ad:1b:35:9d:06:c4:b8:fa:09:d8:22:
bb:68:ce:92:01:37:7a:0b:90:13:ef:2f:36:c5:f3:
8b:24:8b:42:75:e1:b0:08:26:0b:ea:af:5a:8e:59:
ac:2e:2a:f4:1f:e1:5b:dd:f6:d6:65:e1:32:53:5f:
73:85:0f:c2:1d:db:52:42:d7:90:0e:5f:8a:54:ef:
75:af:7b:e1:16:07:26:e8:35:b9:af:0d:30:02:bb:
df:23:7f:08:e8:40:b0:8a:f4:72:0b:08:82:ba:c2:
ff:5c:ba:f7:9f:e9:c0:f1:24:cf:c5:0d:a5:bd:9e:
47:fd:bf:f2:b5:a8:ef:9b:0f:9c:f5:46:24:f1:75:
57:15:7d:0b:92:f4:ef:23:ab:63:09:3f:fc:b7:15:
88:f1:21:50:ca:84:26:4c:dd:24:fc:36:49:97:1a:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:47:CD:23:B0:F1:F4:DE:27:AB:D3:9A:72:78:5E:83:3E:FE:16:79
X509v3 Authority Key Identifier:
keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d1:d1:a2:84:8f:47:b8:2d:5d:19:f0:bd:30:a5:62:08:3b:
43:97:41:95:9f:59:e3:8e:4e:5c:6b:9c:4d:fc:c6:02:af:da:
f7:3e:05:4a:02:e7:4b:30:60:ea:12:bb:50:bd:94:90:d2:85:
a3:3c:ea:83:2c:f1:ac:53:fc:55:37:bf:54:6e:46:08:be:f0:
44:28:1b:c5:24:31:16:dd:f9:f4:ec:41:70:e7:c2:7c:de:11:
6c:74:3e:a1:92:e6:b2:a9:ee:a3:22:7d:14:d2:d3:3c:88:42:
90:ec:e8:f6:ae:e7:66:fe:5e:d3:11:21:53:08:aa:32:0c:ac:
69:96:58:72:92:45:a4:7f:a7:68:b6:ab:f9:ae:d4:27:1a:15:
4d:d3:f6:9c:eb:b9:ed:65:db:9b:cb:49:61:50:c3:39:c4:91:
b5:77:65:04:51:7e:0b:75:33:81:7a:ef:fe:35:83:de:d9:4a:
b9:22:64:5a:bc:be:de:b9:3b:e2:e8:89:e9:02:73:30:c0:27:
31:e9:62:cd:e8:53:c1:9c:8c:6e:6f:fe:b4:14:df:58:eb:55:
01:1f:72:7d:87:2d:8d:bd:74:a9:04:6c:63:df:30:df:0e:d7:
3a:bf:99:f5:85:55:e8:78:5c:d6:64:4a:29:cb:c8:56:68:29:
bc:48:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:11 2025 by rpki-client