Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
File: NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json)
Hash identifier: IIhcgfgj8H/N76MOPauDoC42zEo4OlViDZnUnH8Ga4U=
Subject key identifier: AE:68:7C:3B:53:34:C8:12:78:92:C2:66:72:85:D9:21:02:70:12:E9
Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
Certificate issuer: /CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Certificate serial: 0199FBEC2D77FE6CA0A5FECFD0AC9EC0A583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 10:03:03 +0000
Manifest this update: Sun 19 Oct 2025 10:03:03 +0000
Manifest next update: Mon 20 Oct 2025 10:03:03 +0000
Files and hashes: 1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: b1s4kK8nEV6UWC5dixvhZzayMvjhU70zkxTvG5q63Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:2d:77:fe:6c:a0:a5:fe:cf:d0:ac:9e:c0:a5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Validity
Not Before: Oct 19 10:03:03 2025 GMT
Not After : Oct 20 10:03:03 2025 GMT
Subject: CN=ae687c3b5334c8127892c2667285d921027012e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:f2:df:cd:d5:51:4d:f4:b2:1f:a2:54:2e:
f7:b9:1e:49:cc:0d:97:ad:41:2f:4c:7e:73:09:43:
d3:a4:28:25:bb:f5:2b:38:43:1f:ea:b2:59:2d:f6:
b8:06:c6:39:1c:ad:a2:f9:0e:84:de:20:08:aa:e6:
52:61:38:bf:07:95:d7:64:fa:7e:04:e9:e2:c0:c1:
6e:83:39:e0:e9:99:9b:ae:38:da:45:ff:67:07:52:
12:99:53:9a:24:e3:44:5a:64:de:26:e0:d7:8b:4c:
57:a8:01:3f:b8:02:69:d5:ef:38:ea:69:89:1d:3d:
a1:38:47:37:0a:4f:4f:7f:49:5f:56:01:70:2d:bd:
06:74:ef:b5:de:96:1c:19:7f:e9:f3:8b:39:4f:83:
d8:77:eb:09:4d:59:eb:61:30:cd:3a:5e:db:9f:99:
ca:15:f5:0d:02:85:20:9e:02:0c:4d:a0:ca:4b:6b:
b8:cc:e7:22:b6:c4:ff:fe:5e:6c:e4:c0:ec:98:c1:
9a:21:13:81:38:7c:02:e1:4a:18:e8:9c:cb:24:59:
e3:e4:72:74:a8:d0:f0:37:e2:03:f2:1e:03:f1:91:
af:a6:4a:85:a6:87:41:f2:be:5c:23:50:32:7a:d8:
9f:ca:9a:bc:53:21:8e:3e:87:1a:d2:3f:cd:d7:ae:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:68:7C:3B:53:34:C8:12:78:92:C2:66:72:85:D9:21:02:70:12:E9
X509v3 Authority Key Identifier:
keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:12:d7:49:91:f9:4b:fe:23:14:34:7f:e3:78:7a:5d:e0:37:
93:c6:d6:6e:5f:42:6c:51:54:08:d9:a4:2d:76:07:69:52:c4:
d7:e3:70:c9:55:53:48:79:6e:c7:b5:90:15:e1:ca:77:2a:0c:
12:db:d4:c5:9c:c7:d7:b8:ca:70:31:f2:38:ad:b1:08:b6:20:
f3:e8:4a:d4:75:f4:8a:c4:69:f7:2e:c7:0f:b6:73:aa:6f:20:
35:2b:14:8b:ba:1e:3d:0d:a7:17:fb:26:f1:d8:b0:06:d8:ba:
2c:2a:ad:b5:1c:af:ec:ca:2a:e9:c8:38:ea:4d:78:5f:85:3b:
1c:3a:3c:8b:b8:72:bc:ac:8e:22:74:25:41:0c:33:8f:ee:f4:
79:33:42:a2:1f:c4:81:29:76:c2:6e:14:d9:5f:a6:52:c2:df:
29:12:9d:bd:5c:01:75:a2:c8:a4:8d:5c:8c:70:d2:da:8e:09:
50:43:3e:80:b4:62:17:a0:af:83:43:0a:0a:bf:f6:ac:49:1a:
8b:82:a1:6b:fb:38:7a:ef:c0:9f:da:f6:b8:00:b2:6b:47:2d:
64:87:b6:a2:00:9b:21:a0:b9:d7:32:fa:b8:63:13:af:ed:96:
2b:91:24:70:f5:49:91:70:01:87:b3:73:b5:04:d3:c7:5b:5a:
83:13:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:26 2025 by rpki-client