Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
File: NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft (raw, json)
Hash identifier: W2bCrnWF1GCmIiZ2dsw37uTDmS/gv0atn2DCskSYJUA=
Subject key identifier: F5:24:E4:3F:F8:20:29:D0:7A:63:0E:D1:43:63:AF:3C:4B:5F:42:9A
Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877
Certificate serial: 0199FC58FFC33EA4BB84624D46BC279931AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
Manifest number: 11E4
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: 64AufSKo0ctGsskBfGJHYgegDUM.roa (hash: TxQbijMyiwaYhEgR6gv3I6pa/f1D2b/JYXZHussR2b4=)
2: NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl (hash: cFAOqNFCTEisaOqlRVv0t8eOBlUK9ATwwI9dynp7W0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ff:c3:3e:a4:bb:84:62:4d:46:bc:27:99:31:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1a573915153de82890eae1303067fa68b2877
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=f524e43ff82029d07a630ed14363af3c4b5f429a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:7a:2e:72:50:ab:3a:6b:2d:d7:c9:73:7d:
1c:a4:e0:28:40:8f:f1:49:5f:b8:45:b6:20:cc:99:
35:e5:b6:cf:3d:35:42:45:aa:9d:62:87:74:84:c7:
3a:ab:c2:b0:a1:48:1a:17:a3:48:cd:7c:8c:d4:79:
59:60:ca:f0:d1:ea:0e:df:2d:01:fb:98:12:49:6e:
30:12:43:67:d4:23:22:a9:94:82:02:70:52:e3:bd:
21:fa:ef:e9:cb:c6:3a:d8:bb:1b:58:4e:a3:e9:64:
cc:2c:00:c8:7e:ee:4a:fc:57:9f:62:cc:88:0c:0a:
1a:2e:89:0b:f0:bc:ac:44:e0:8a:7f:59:85:7d:f2:
a3:97:83:37:c3:56:76:78:d1:1f:48:10:20:e0:b0:
1a:73:20:44:0f:0d:e2:32:de:e4:c0:c6:05:70:8e:
33:af:e4:14:4c:af:6e:a5:ff:9e:1e:90:f1:f0:8b:
4e:99:16:f8:00:4f:3b:33:2f:a9:ee:6e:e7:a0:4b:
44:44:d1:65:1a:b3:16:a2:e2:69:fa:da:ae:4c:76:
0c:b4:b9:bf:23:bc:9a:ea:85:2f:c0:15:92:84:40:
e2:c0:b5:b9:91:b8:1d:ab:d4:ce:10:25:e7:23:e9:
8e:9e:04:c7:a7:6e:d5:a6:d9:df:18:58:90:17:be:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:24:E4:3F:F8:20:29:D0:7A:63:0E:D1:43:63:AF:3C:4B:5F:42:9A
X509v3 Authority Key Identifier:
keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:62:95:79:97:a6:cd:be:4d:4d:ba:d2:7c:93:93:cc:1a:67:
3d:50:30:d9:bf:50:25:4e:0c:c9:e9:12:a0:70:f8:dc:dc:0e:
64:98:99:29:6d:c8:b8:6f:df:4a:d6:1a:92:f8:cd:7b:8d:da:
e6:39:8a:7c:fd:f3:9d:c3:62:82:e9:e3:a4:47:78:0d:94:17:
3e:98:5d:4e:7b:1c:a6:77:5e:0f:69:b8:cb:d8:6f:b7:dc:66:
6f:2d:07:7c:80:03:d7:67:a7:af:36:0b:53:51:ff:a1:9c:eb:
a1:05:1e:72:68:53:ab:f6:9c:e8:04:ec:9b:f8:41:4b:36:2f:
b0:d6:8c:ba:58:8d:13:52:58:65:4b:c6:d7:d3:e2:a1:b8:09:
25:eb:5b:dd:5c:9f:c4:8b:5c:9c:ff:79:08:f9:68:a7:93:2a:
ca:e2:c5:f1:91:79:11:4c:55:77:09:5f:c4:da:0c:8a:c1:17:
64:7b:da:dd:1b:0a:2e:ce:99:99:70:cc:81:a7:48:85:3f:eb:
11:b4:f0:87:79:7e:ce:56:ea:b3:9f:e0:eb:c6:ae:c5:c4:2a:
b3:dd:dd:c0:02:6d:fa:b5:52:77:96:5d:87:79:2b:db:94:9c:
10:6b:52:86:85:7c:8f:38:06:d4:3f:9c:7e:ad:03:f0:05:c3:
b3:be:d3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:42 2025 by rpki-client