Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: i47UMSx/S9kv1ZjqvioLmmjpdtmkT9PKicPsjUkFQ7Q=
Subject key identifier: 9D:C3:4F:CD:49:11:48:6E:F6:C5:32:47:71:A9:BB:63:1D:A0:BB:C1
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 0199FC5864E13C6F6D8402BD9544D99A6E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 040D
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: amx2jFxfMPTh8Z37Id7db7gLo+AXyGo0yLbJz4NPOHQ=)
2: cEQi14kKuKL4ZWozyPewcuSD5kQ.roa (hash: AQa4zimuZDO+7ACyM4KJjx7KQcRwuoNCJUovJ5T5Vck=)
3: xGHkCj7QXTK91-IzTTuEVkNvzos.roa (hash: jRuba4ysEPA//Moy/YkHQHxGDPSKQ/jX38S+l3o0ZrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:64:e1:3c:6f:6d:84:02:bd:95:44:d9:9a:6e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=9dc34fcd4911486ef6c5324771a9bb631da0bbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:73:ba:42:d6:65:19:5d:f3:b2:47:3c:a2:
76:e9:88:d2:ed:e9:d6:b5:85:31:5a:82:44:b9:d7:
5e:31:78:76:41:4e:e6:aa:21:9f:1c:3e:65:83:3d:
e3:f2:8b:2b:8f:f7:32:4c:95:06:1e:b9:9b:d3:3e:
83:27:0c:d4:08:dc:dc:04:49:50:ea:32:d4:c9:c9:
a5:f2:f1:57:40:2e:6f:69:4a:ce:17:bc:56:60:96:
6b:b7:dd:a0:8a:2f:08:6c:5b:f9:77:95:47:54:bf:
70:61:3e:bc:c4:4b:43:c5:25:0d:05:4e:5d:85:51:
21:5f:7a:84:9a:b3:25:d7:e5:b3:bb:3d:89:40:86:
95:aa:67:70:61:6a:77:3e:b4:d7:78:af:b2:16:ae:
9e:ee:96:7e:e9:55:25:d6:ef:6d:a5:d8:c6:f8:13:
fd:2d:66:7f:4f:43:c7:a9:8a:4e:55:a5:ed:da:66:
3c:ad:de:d4:f0:45:2a:7b:f0:e0:f0:a6:d7:78:0d:
31:31:3a:14:76:74:34:0d:90:65:4b:94:a1:ff:7c:
7a:97:9a:4e:35:1e:c9:0e:de:c1:a7:32:ee:69:2e:
2a:bb:a6:00:b1:37:c4:c1:52:cc:b1:51:19:1f:5a:
6e:82:06:8f:ef:9d:62:dc:ac:86:27:d9:6e:2f:99:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C3:4F:CD:49:11:48:6E:F6:C5:32:47:71:A9:BB:63:1D:A0:BB:C1
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b8:ab:27:9f:a3:11:b9:a3:40:d4:cc:f6:a5:c2:e2:1f:85:
7d:87:fa:aa:40:19:34:a5:d4:0e:51:f3:74:45:ab:7e:a1:95:
67:46:b2:03:f0:29:a0:18:73:b7:c5:9f:cb:f1:14:31:ea:fa:
8e:51:14:df:63:b5:14:8d:8e:19:00:38:aa:0e:43:1d:ee:6e:
14:b7:ba:ca:0d:38:c5:a4:64:00:aa:53:49:a3:69:aa:f8:71:
46:f3:96:14:0d:4b:20:50:3d:30:3b:68:3a:87:6f:cf:9d:29:
76:ab:60:45:0b:41:52:bf:17:8c:ad:71:79:ce:96:c1:07:c2:
72:c3:4d:ed:c0:04:58:09:a9:74:c3:57:d9:cd:44:36:58:c9:
97:46:25:77:a2:4e:77:0e:7b:86:77:95:02:06:f4:2f:d7:df:
e6:b7:52:9d:ca:7d:98:17:53:d3:40:cf:0e:52:ef:68:db:ed:
15:d0:f0:43:fa:bf:fc:7b:3b:fb:54:a5:0f:d5:d3:92:ef:98:
bf:d5:ee:ee:ae:b6:f1:1f:59:bd:a7:1e:da:7a:15:cd:eb:27:
8c:67:12:45:b1:ff:89:8c:c9:97:0f:98:73:d9:ce:94:f8:a8:
db:d4:5a:93:ed:07:82:ef:69:a9:86:73:9b:0c:92:f7:33:1e:
ed:7f:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:29 2025 by rpki-client