Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
File: NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json)
Hash identifier: pmYXvsW6X10MHkmJV2QyqZ7pwLsK4htFQOi97oa+Fmc=
Subject key identifier: F7:4D:F0:7F:8D:87:3E:32:F9:44:E0:FF:B9:B5:DD:FA:69:EB:17:F8
Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Certificate issuer: /CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Certificate serial: 0199FC58353BFD234F22F42A727100E29C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
Manifest number: 1227
Signing time: Sun 19 Oct 2025 12:01:03 +0000
Manifest this update: Sun 19 Oct 2025 12:01:03 +0000
Manifest next update: Mon 20 Oct 2025 12:01:03 +0000
Files and hashes: 1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: aK5qHDFBsctq/qit2H0jSF20+Dy4cUepMW6uBU+ggCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:35:3b:fd:23:4f:22:f4:2a:72:71:00:e2:9c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Validity
Not Before: Oct 19 12:01:03 2025 GMT
Not After : Oct 20 12:01:03 2025 GMT
Subject: CN=f74df07f8d873e32f944e0ffb9b5ddfa69eb17f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:38:13:6c:5b:f0:f5:15:13:aa:6b:39:50:
07:2c:20:3b:ff:1a:7f:0a:cd:37:7a:ca:a0:e6:7d:
7b:26:aa:79:83:9c:8d:2e:86:09:09:88:50:33:c1:
9c:05:f4:57:df:c0:0c:5f:27:e7:c9:a6:18:ff:d4:
d1:96:e3:e5:f9:ed:38:f9:5c:e9:b7:36:db:c8:53:
31:f4:31:4b:be:0f:96:82:fc:e2:29:24:ca:b4:3f:
21:3a:10:12:62:36:57:04:b7:80:93:d1:c4:d2:90:
18:55:90:d5:fb:c5:55:de:82:0c:e4:d6:c2:42:72:
21:c2:13:7b:c8:1a:f1:42:d5:98:db:11:c2:3b:ea:
0b:aa:c9:79:98:1f:05:d6:07:51:ef:6f:28:6d:36:
8c:67:27:d2:9b:7b:c7:dc:a0:63:71:3c:12:b1:2f:
a0:38:bc:1c:5e:13:39:1f:46:55:1b:b5:c6:fe:e5:
b9:09:87:3f:8e:b1:bd:57:28:13:36:53:af:51:87:
3f:45:15:75:38:ed:c8:fc:72:27:77:0d:9b:7f:95:
d8:a7:01:c7:c1:ff:ea:a4:13:e5:68:0e:4b:f4:20:
bb:4d:af:2e:56:ab:fd:1f:26:4f:ff:ea:69:be:9d:
c6:61:2d:9a:e0:91:19:bc:d8:87:8c:49:8d:0c:f7:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4D:F0:7F:8D:87:3E:32:F9:44:E0:FF:B9:B5:DD:FA:69:EB:17:F8
X509v3 Authority Key Identifier:
keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e6:9a:08:b3:91:0e:39:f6:fc:c8:5a:70:9c:ca:6e:74:6d:
10:61:7b:4e:53:e5:63:b8:97:8f:9e:4c:10:5d:73:df:80:2d:
31:c1:72:8a:c9:99:b5:72:3d:18:ef:12:c8:e5:91:3f:f2:18:
b4:11:49:51:e8:2a:70:dd:69:31:de:6d:0d:cd:6e:86:b3:26:
e4:8f:a9:68:cb:7d:23:d8:02:50:b4:21:d8:2b:2b:29:76:a3:
65:8c:c6:ea:4b:6b:dc:86:00:6a:57:41:9b:73:70:18:c5:b0:
d8:d6:41:76:f0:4c:28:c3:1e:b0:d2:ce:d1:fa:e9:b4:05:b1:
11:88:b3:6e:ca:a2:d9:b2:5b:dd:a5:d1:12:fd:91:f1:18:3e:
94:2b:3f:2a:73:96:8b:1d:ec:91:90:de:a0:a6:2e:ff:e8:61:
8d:a9:6d:d4:5a:ab:1b:81:d4:77:34:06:c3:73:4f:34:4e:ef:
52:98:4a:da:37:dd:e5:b0:b5:b6:f6:3d:95:4a:b0:4f:09:bf:
8a:b0:74:d5:b8:8d:15:de:a4:86:2f:83:e2:2b:1b:73:1e:91:
37:e1:c6:25:ff:e9:72:1b:38:bc:b0:14:74:57:27:df:dd:11:
d3:eb:9b:73:fe:ba:cb:6e:df:e6:b3:42:4e:d5:65:a9:9e:42:
1b:2d:36:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:42 2025 by rpki-client