Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier: DTF76sFSuciajgHyX5TNQhRfMqGV5YMFFWpdloLwz4c=
Subject key identifier: 97:3F:32:33:A8:AA:90:ED:CF:7C:EB:75:0A:DA:5A:25:3D:57:BD:7D
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 0199FFC836FABB054453E7DC7A42219976B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number: 140B
Signing time: Mon 20 Oct 2025 04:02:15 +0000
Manifest this update: Mon 20 Oct 2025 04:02:15 +0000
Manifest next update: Tue 21 Oct 2025 04:02:15 +0000
Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: yPUa9TIB/0xnbx+stQBjKoXsQLzT4RxDyuCGNW20GZA=)
2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:36:fa:bb:05:44:53:e7:dc:7a:42:21:99:76:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: Oct 20 04:02:15 2025 GMT
Not After : Oct 21 04:02:15 2025 GMT
Subject: CN=973f3233a8aa90edcf7ceb750ada5a253d57bd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:99:ec:e2:29:0c:3f:31:bb:e8:0a:0e:00:
83:ec:ee:ea:6e:8a:1d:63:48:24:43:5d:a6:83:e4:
ea:e7:14:fa:4b:c6:7f:c0:d1:27:af:66:9d:52:be:
08:c6:22:96:eb:93:79:9d:6f:6e:de:ba:ed:d2:0b:
25:00:1c:92:71:36:2e:9b:d5:38:c4:3d:1f:4f:c5:
67:2d:86:ba:9d:7d:4c:66:87:c4:b3:06:f2:c6:d1:
1e:f1:a8:7b:71:5a:f7:69:8f:11:05:2e:5e:13:43:
ba:a8:8f:f2:6f:30:01:a3:f5:73:b5:a6:4c:62:cb:
22:da:27:cc:7c:e6:25:26:5a:f6:1a:8f:73:2b:ba:
71:09:78:b7:02:a8:2c:ee:0e:7e:28:2b:af:c9:86:
4a:14:0a:59:8c:88:22:87:39:a8:8f:bf:ed:39:10:
d7:99:1f:21:fc:6c:77:32:98:2a:10:95:7f:fe:2d:
33:7e:76:a2:c4:c4:8e:14:36:7a:cb:cf:d2:9b:52:
9d:c2:55:c5:37:62:67:9e:c6:a3:92:2c:82:10:ec:
eb:b9:9c:a9:ae:e2:3b:ae:86:82:a8:7f:a3:e2:80:
24:24:9c:76:c7:24:40:5a:ea:f4:d7:b7:c3:46:e4:
ea:da:b0:b0:3a:33:a7:5e:d6:10:65:c6:2e:77:d4:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3F:32:33:A8:AA:90:ED:CF:7C:EB:75:0A:DA:5A:25:3D:57:BD:7D
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:99:85:3b:cc:29:c9:82:1d:5d:03:ce:6e:95:22:df:d7:f1:
be:0c:30:3c:d9:49:23:73:84:6a:f7:b9:1f:cc:83:0e:67:f5:
7f:cc:6c:e2:94:e9:60:0b:0c:10:ff:02:20:8a:74:47:92:a4:
11:88:cf:05:f8:d9:6d:fe:82:de:fe:17:2f:10:da:9f:58:b2:
78:8f:da:91:fe:87:ee:14:f3:e3:d7:3e:de:0a:a0:5a:f0:fa:
00:af:a5:a6:a8:55:fa:1c:f3:a0:29:9c:07:3c:88:70:97:8f:
b9:87:14:4b:6b:79:40:9f:ed:6a:78:09:86:74:b9:41:9f:b2:
8a:70:d9:38:42:70:d9:bd:2d:ff:92:5f:3d:f9:d7:0f:a9:06:
7b:ef:74:b8:22:bb:1e:20:a3:0d:70:ae:5b:6c:d0:53:2b:e6:
0f:a8:03:a4:76:25:55:1c:e1:2f:31:a9:66:ae:ab:fe:a9:76:
ec:52:cf:ff:5f:fb:dd:1b:53:02:68:d2:f8:e4:61:8d:ca:ff:
c1:46:6c:57:58:13:69:32:15:d0:bb:cb:4e:23:fe:99:14:8c:
68:97:26:57:ad:5d:23:64:74:2a:13:03:b0:84:13:34:2e:ff:
4f:f4:1f:f2:41:17:f8:51:69:bd:c3:8a:37:c1:ef:7c:7a:ab:
94:ed:f6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:32 2025 by rpki-client