Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: 3eisQZ7TDb/4FOWYX3SwdQVCNlUTqrsR2ieQkaKEuZQ=
Subject key identifier: 81:48:2C:E7:75:1C:87:0E:5C:10:5D:26:76:B7:5E:14:F9:63:CC:E5
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 019A00A34E3EBD469D519CA330E8AAC83CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 0FA6
Signing time: Mon 20 Oct 2025 08:01:33 +0000
Manifest this update: Mon 20 Oct 2025 08:01:33 +0000
Manifest next update: Tue 21 Oct 2025 08:01:33 +0000
Files and hashes: 1: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: 17PaVH9O4PMYS19O/ZW3iO50/DajZooC1wBeYrugXsA=)
2: pD83cCgQmkTqmybL4Qe3QLOSsJI.roa (hash: Dc3wCA5yOgFeVk3/J+FU53rFpNzosD7EmU4+ejzw5Hc=)
3: snr-oR1drnGUDE12am2Oc1SmmAE.roa (hash: ypW1nfFwE2qpQdtfuVLzUTdrQHGTdbKiKTowycflNh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:4e:3e:bd:46:9d:51:9c:a3:30:e8:aa:c8:3c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Oct 20 08:01:33 2025 GMT
Not After : Oct 21 08:01:33 2025 GMT
Subject: CN=81482ce7751c870e5c105d2676b75e14f963cce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:b6:17:ec:b1:c9:bf:85:5c:66:6f:28:aa:
03:bb:c1:90:49:38:65:85:e9:bf:c6:97:b0:fc:b9:
0f:ba:91:b4:38:8f:a8:71:7c:a9:5b:ca:e2:7b:0b:
ea:e8:93:be:e0:02:fc:cb:5e:01:f3:09:c5:55:7e:
6f:e9:c3:b7:e6:68:dd:d4:7c:4b:80:57:aa:f8:3c:
06:9d:4e:86:a6:dc:ad:32:28:ba:39:60:55:90:de:
5a:a4:e3:45:bd:4b:9a:f3:c3:5f:5d:ae:7c:cb:66:
2b:fe:79:ed:da:4e:af:09:3d:a6:2b:a3:30:89:99:
76:dc:43:e4:02:17:e1:d8:66:2f:35:29:8d:16:95:
c3:6a:a8:9f:07:c5:49:20:b3:a5:e0:e5:75:48:f3:
5a:ab:eb:7a:7c:40:7f:6b:06:e6:c6:c8:0f:d0:2b:
57:c2:fe:a2:16:dc:ae:2e:c9:4d:f6:e9:0e:f9:41:
8b:8b:74:ff:21:0d:41:50:41:e7:1d:3d:ab:e4:69:
e8:75:63:a1:25:c1:55:75:44:48:76:a0:4e:bc:2b:
16:3c:d3:17:d6:6e:ba:45:71:26:50:c0:18:6a:8c:
10:a8:22:5e:e8:a7:02:03:07:b2:41:99:88:7e:97:
54:ec:f8:b9:d8:84:d8:5e:2e:78:24:c3:cb:4a:a1:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:48:2C:E7:75:1C:87:0E:5C:10:5D:26:76:B7:5E:14:F9:63:CC:E5
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f1:a8:c9:8d:9a:0e:33:89:32:f8:42:75:05:bf:55:97:71:
e6:59:87:3a:f8:63:6e:5d:48:9f:23:21:f5:11:7a:ed:69:1d:
e2:c8:bb:e2:1a:13:21:f8:d3:77:64:0c:ff:1b:0d:ae:87:36:
7d:1a:7f:41:be:48:33:6d:60:68:c4:6d:cc:05:2a:46:6a:91:
ef:2c:1e:c4:5d:aa:19:d7:13:4e:ff:7a:fd:9e:c7:bf:31:82:
30:05:55:7a:53:7c:ce:4e:26:1c:c2:81:d0:a7:7b:fa:8b:7b:
8f:d5:0f:30:1d:5d:97:4b:55:71:85:d5:36:38:05:0a:20:47:
8a:73:14:25:75:df:56:dd:30:b8:f5:60:2d:4c:fb:6c:f2:20:
01:7f:5c:18:9c:ba:47:fc:79:b9:0c:75:75:98:56:e3:4d:3e:
44:53:59:3a:06:8f:af:9d:f3:d0:d6:2f:24:d1:4c:ca:ca:4d:
7c:7e:a9:b1:d0:c0:e5:49:d7:e0:e6:55:29:30:0e:2f:d8:0a:
01:98:f2:77:a1:11:84:32:fe:59:87:f1:29:f9:92:48:1e:ef:
1f:06:cd:8a:60:e1:6a:88:46:39:0c:38:cf:fe:bb:57:ae:e4:
d8:42:28:26:83:55:d3:7a:4a:dd:65:49:88:50:da:b4:f3:6b:
88:cc:5e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:31 2025 by rpki-client