Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
File: x_nvdcTr2Q5NisU39pPdM6xIVko.mft (raw, json)
Hash identifier: MEa/+TZH8RMwvMyyGIn176/qkGi/+W2IQDd6h1tk2j4=
Subject key identifier: 70:E0:0E:0E:84:A3:F9:12:71:5D:92:0A:70:6A:B2:7A:17:B9:28:DE
Authority key identifier: C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
Certificate issuer: /CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Certificate serial: 0199FDD92325B7FFDB381418ABE222836D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
Manifest number: 0199
Signing time: Sun 19 Oct 2025 19:01:29 +0000
Manifest this update: Sun 19 Oct 2025 19:01:29 +0000
Manifest next update: Mon 20 Oct 2025 19:01:29 +0000
Files and hashes: 1: x_nvdcTr2Q5NisU39pPdM6xIVko.crl (hash: EAKpfvVDowPi9BFdzQ2XO6A3333IXJ3Hw0QpE90S/W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:23:25:b7:ff:db:38:14:18:ab:e2:22:83:6d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Validity
Not Before: Oct 19 19:01:29 2025 GMT
Not After : Oct 20 19:01:29 2025 GMT
Subject: CN=70e00e0e84a3f912715d920a706ab27a17b928de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:ea:33:d0:44:b6:a8:36:63:6a:a2:24:64:
ab:ad:5d:8e:ad:6c:47:5f:c5:45:3b:09:d6:00:68:
c3:49:1b:f5:73:d8:5f:cd:b1:24:2c:a6:5b:33:aa:
92:57:c6:24:b7:6a:d0:ad:0a:02:82:81:9f:dc:53:
b3:e4:47:fe:33:77:bf:0f:03:a4:7e:b9:4e:f4:6b:
c8:35:52:82:89:fe:74:0d:64:66:bc:5d:83:77:3d:
4b:c5:34:26:89:3a:bb:22:b2:9d:06:ca:22:fb:d6:
9a:87:52:f9:6a:e3:88:df:cd:ec:4c:8b:29:cd:a0:
8d:f3:62:af:da:77:5a:6c:9d:92:da:60:ba:04:43:
9f:35:b8:96:82:e7:da:ab:0c:50:d2:d9:cc:84:6f:
b9:40:5f:7e:ae:e8:2b:e8:4e:8c:3a:24:80:b7:98:
6f:f1:ce:9e:96:5d:a8:8c:90:4f:75:6d:37:0b:60:
ae:9a:2e:c9:51:b0:b3:f6:b9:93:5e:67:2b:22:9c:
39:34:ac:d3:18:6f:81:a0:8f:82:55:46:e0:d6:fd:
7e:bb:fa:bd:c2:24:4a:87:fb:72:d3:28:e4:78:b6:
9a:91:34:f5:b2:34:95:0b:79:07:6a:ba:e5:74:84:
0c:20:06:d4:ca:52:4d:01:40:0e:27:af:11:8b:69:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E0:0E:0E:84:A3:F9:12:71:5D:92:0A:70:6A:B2:7A:17:B9:28:DE
X509v3 Authority Key Identifier:
keyid:C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:25:f5:aa:01:d9:f7:4f:f5:d9:e6:17:ef:57:e1:c7:71:86:
e3:d3:54:0c:ef:69:b2:33:6d:6c:9c:b8:f6:7f:22:53:60:5f:
d0:2e:70:d0:a4:37:88:c6:5a:6a:e4:e8:ce:ba:e5:c6:04:c5:
b1:ee:23:d3:33:01:49:92:1c:96:e0:b0:06:d5:7d:a2:56:ee:
ea:7f:09:3f:52:15:d2:66:04:59:17:74:46:b8:21:4b:12:69:
27:93:51:e1:2d:df:ab:c9:51:1b:a2:be:93:e0:64:72:8d:7b:
14:49:2b:79:32:5c:02:e9:aa:7a:53:d6:5b:9f:59:03:0b:b1:
c4:15:60:61:2b:1a:49:2d:e1:29:80:07:1e:35:6b:01:54:de:
67:85:c4:2f:e9:4a:35:53:d1:af:37:91:0d:3a:85:0e:c8:71:
3c:69:aa:11:0d:c0:be:7d:c5:07:96:28:4e:5d:7b:b8:4f:3c:
5e:2b:65:48:65:7a:95:0d:44:5a:25:00:4f:ea:bc:7c:56:55:
95:45:7f:35:b6:8e:be:d6:1f:2e:39:cd:be:45:59:5b:4b:60:
a7:15:61:73:d4:01:1f:99:9f:dc:a7:89:4e:02:5c:f1:30:f9:
53:3b:9a:4e:43:c6:5f:96:b4:71:fc:0f:07:e2:a0:4d:2d:48:
f0:51:f6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:52:34 2025 by rpki-client