Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: AKlxZpxvO7wJtXmf1h/rXCFBAQDvvpTrXfo9Hss2efw=
Subject key identifier: 2A:77:99:FC:AA:47:13:2E:74:E8:08:8F:DA:B1:9E:B1:33:23:AD:2C
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 0199FEEB8E36FF34D275747B147AA944240D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 0F62
Signing time: Mon 20 Oct 2025 00:01:14 +0000
Manifest this update: Mon 20 Oct 2025 00:01:14 +0000
Manifest next update: Tue 21 Oct 2025 00:01:14 +0000
Files and hashes: 1: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: coD6XCX5Iz1iOoNHAOwguFN31QCVY9P4uCy20Sa/9OM=)
2: ZIEntIvRdoyNG_9f7umqM8GaOP0.roa (hash: fyIclvXxfmafIM00Oljz1bkGgUIAKrrEkFW8CDlF9q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:8e:36:ff:34:d2:75:74:7b:14:7a:a9:44:24:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Oct 20 00:01:14 2025 GMT
Not After : Oct 21 00:01:14 2025 GMT
Subject: CN=2a7799fcaa47132e74e8088fdab19eb13323ad2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:05:be:a4:25:a1:2c:ba:f2:f0:92:0b:12:
3b:03:d9:8a:1e:88:b2:c8:17:28:e1:8b:d0:b3:e1:
ff:48:69:ed:bd:0f:07:b9:e9:0c:4f:1c:32:06:8f:
f8:ad:8e:ed:3e:19:ab:d3:a3:5b:26:7d:07:e1:90:
3e:7f:7e:b7:05:e0:d1:cc:42:4a:8e:2f:cc:8d:3d:
96:95:eb:62:8c:49:79:90:fc:8b:1e:e6:9f:a5:fa:
fe:38:07:45:7e:e0:41:9f:2f:8d:71:1d:85:da:6d:
c7:2d:af:d4:77:7b:83:a8:0d:b1:a7:b8:61:53:a9:
87:e5:16:bf:7c:fa:b2:3d:0b:ec:b8:f6:1f:df:a3:
5d:f8:f6:3a:40:82:f0:60:5a:ad:11:dd:4b:b7:d9:
52:99:33:e1:a5:00:75:65:21:f2:f5:cf:f6:98:4c:
53:2a:fc:e0:09:6d:ce:ca:62:e1:d5:fd:0c:af:2a:
36:e8:6b:24:06:aa:b0:c5:5b:e0:57:29:0f:38:b1:
a0:11:5b:d0:3e:b3:41:76:c3:49:40:f1:b6:68:8f:
09:be:e1:12:36:9a:99:b2:19:66:34:87:f5:a4:33:
51:82:56:4c:f3:c5:bd:88:d7:21:34:a5:98:f4:c9:
49:0c:d6:ae:04:e7:ee:e8:67:d3:15:19:5b:ce:07:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:77:99:FC:AA:47:13:2E:74:E8:08:8F:DA:B1:9E:B1:33:23:AD:2C
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6c:d7:10:bd:06:dc:a0:73:b5:81:97:f4:6f:41:a3:52:69:
55:cd:30:42:e7:98:b5:e2:20:b0:12:24:fc:f7:10:24:93:97:
97:ae:cb:5d:8a:dd:da:01:3c:43:4f:92:c6:76:92:8e:cc:47:
57:55:c5:52:d7:ce:1f:a0:fb:f2:16:96:e4:05:99:d4:44:68:
e9:e9:e9:49:6b:22:cc:fe:49:a1:2d:db:37:4a:4b:96:1c:7d:
5f:b1:dd:ed:eb:f7:dc:8d:f8:bc:a5:00:77:14:bc:5f:ba:42:
32:16:a8:85:a2:2f:09:42:06:78:c4:8e:ea:91:16:4a:fa:3c:
c8:a4:05:04:f4:5b:f1:07:08:27:1d:11:28:70:c6:9a:f8:96:
32:a2:cd:26:db:31:d1:a6:e0:a9:c2:12:31:f6:13:bf:21:54:
95:25:73:e5:64:57:2b:43:67:cd:e4:db:f1:73:ab:ae:74:a1:
fd:3f:ec:27:09:22:dc:e3:12:8f:c5:a0:c8:50:0a:97:4d:4c:
df:78:47:c3:46:1f:86:21:21:3b:94:59:5d:bc:c0:dd:2b:fc:
d9:71:c2:41:e3:04:59:76:bb:73:59:63:68:83:09:5b:65:6e:
55:1a:87:76:8a:c6:59:b6:72:b1:bb:fe:96:68:f2:94:bb:31:
f0:1d:e8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:08:23 2025 by rpki-client