Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
File: NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json)
Hash identifier: 8r7Y3QPp9zs5EhYR5LBKWJS6+vN8MZQ0ysLhK3dGTjA=
Subject key identifier: F6:B8:71:78:D0:B6:D8:4A:CB:81:41:D8:77:9D:B5:BF:EB:0A:D1:B3
Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Certificate issuer: /CN=363548ed4628966248204c2fe69065f0d7b527a3
Certificate serial: 0199FE46D3EBE5691940A35193848EB0C0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 21:01:18 +0000
Manifest this update: Sun 19 Oct 2025 21:01:18 +0000
Manifest next update: Mon 20 Oct 2025 21:01:18 +0000
Files and hashes: 1: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: D9SrDMA4k1fom4COUXL7ZGMT1lPqNXpjwFsNcrAQ2jA=)
2: ZTPqCUD63V4eQMXnLn6AnTQCitU.roa (hash: ywlhEvz+62iFTUdrK6be6oxB9Yvs+N63Zrh3s7mdFzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d3:eb:e5:69:19:40:a3:51:93:84:8e:b0:c0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3
Validity
Not Before: Oct 19 21:01:18 2025 GMT
Not After : Oct 20 21:01:18 2025 GMT
Subject: CN=f6b87178d0b6d84acb8141d8779db5bfeb0ad1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:24:31:29:50:a7:fb:88:43:aa:ed:e8:87:
4f:eb:52:15:7b:73:ba:39:bd:5f:6f:9f:10:f1:63:
55:5f:f0:3a:bb:d0:29:bc:3f:7d:bb:ae:5e:f9:ce:
46:c1:0d:20:e2:23:8b:03:ca:70:04:81:8f:39:85:
e3:20:99:bd:62:c7:e4:37:79:0f:98:1b:13:e8:57:
7d:ca:1b:83:57:25:cd:0d:be:f8:6a:e5:cb:96:37:
58:9d:1e:a1:b1:ea:47:65:df:2f:e8:5d:dc:6a:da:
1f:6b:8f:b7:ba:2e:b3:9a:1c:e9:af:6a:81:4f:a4:
11:6e:03:7d:fa:b5:10:cf:1f:e2:8f:b4:33:f9:9d:
8d:c3:a8:a6:5b:80:b2:4a:76:7b:7a:52:11:8f:dd:
26:d0:1d:94:39:27:1f:07:a2:80:63:f2:9c:5d:67:
03:b5:5e:50:af:2b:a8:92:ce:87:ce:ba:3c:69:ca:
e1:2c:88:bb:b4:bd:41:c6:88:aa:ed:90:17:97:14:
c5:5f:59:d8:68:f4:43:47:33:9c:79:b1:ab:65:d2:
43:e4:8c:aa:a8:d6:8e:d2:2e:8f:84:51:a3:36:a3:
c4:54:b7:8c:e3:d6:29:32:2b:c6:36:34:97:2e:1e:
94:a8:1c:87:1e:6b:47:75:c5:ae:eb:28:e7:e6:17:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B8:71:78:D0:B6:D8:4A:CB:81:41:D8:77:9D:B5:BF:EB:0A:D1:B3
X509v3 Authority Key Identifier:
keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:32:cc:a3:e0:b4:99:4b:33:20:3f:3f:35:c8:d3:2f:24:61:
a2:17:54:65:16:35:95:24:1a:58:d7:27:a3:5d:02:38:2c:3b:
df:9c:8f:e7:c6:73:51:bb:b1:cb:8d:61:a6:51:3b:ff:ac:01:
42:f0:a8:53:d3:f4:60:31:7b:18:5b:7c:67:38:e8:f4:b5:d4:
25:1a:bc:cb:b1:c1:8e:8a:c1:dd:27:6b:4c:d2:c5:dc:44:96:
26:37:f4:89:15:2a:1d:9b:4c:50:d6:5e:04:41:cc:57:67:57:
70:97:7e:01:bc:b3:14:16:02:b8:5f:aa:c9:b7:87:b0:56:3c:
02:5b:db:5e:a2:5b:e7:42:cb:17:75:a1:df:2c:b5:25:5e:5f:
b0:d3:ac:7e:70:29:99:64:5a:b4:64:ae:05:b7:74:77:f9:62:
0d:ea:6a:40:4b:3f:23:a1:aa:8e:47:b7:ef:b0:4f:6e:30:be:
c2:c6:9d:5b:2d:3b:db:25:89:a7:90:07:c6:c2:e9:46:c8:7b:
b0:17:85:b2:24:8e:f9:74:9f:cb:e0:fe:d4:14:95:1a:5c:88:
d4:93:d3:75:07:fe:a9:d6:e5:94:6a:e9:f9:db:4f:fa:fd:59:
8c:bb:fc:11:ee:29:67:98:59:fc:b8:c3:b7:4e:a1:1a:67:a6:
83:11:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:18 2025 by rpki-client