Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier: 6S07qu4Ifi0/zDsrkzayFc3uxjasQwUMalFcVEfqiNI=
Subject key identifier: 1C:91:43:88:9F:DE:72:03:78:C9:B2:40:CE:A9:40:C7:6F:65:75:D4
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 0199FCC692C29A67AC2D72621767A63728FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: Ju1qmbwk+1l+J4gsYXb1vGlLfLIHSEsyK/IYFvNA/Fo=)
2: kVipI_xyp0_kuJlOJOnoAHsePks.roa (hash: 1FUuhHfAvSDiWJAZOii+4sL3nFhAdH6ZW0fC89DJLKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:92:c2:9a:67:ac:2d:72:62:17:67:a6:37:28:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=1c9143889fde720378c9b240cea940c76f6575d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:70:e5:82:61:10:b0:99:0d:58:9f:d0:13:
49:ca:75:2e:37:2c:45:36:28:ea:d3:1b:85:f3:92:
da:f8:43:64:21:9a:47:7e:03:2d:13:92:ca:4c:8a:
ac:6e:cb:c6:5a:a6:4e:98:f5:dc:0e:f6:3c:c6:fe:
9a:08:a4:1a:a3:94:4c:33:de:bc:8b:b1:f4:79:f2:
60:09:ed:1a:ef:48:15:fe:2d:8e:53:79:e9:cf:43:
f7:48:d1:36:0c:62:a9:5c:60:61:76:42:66:d6:31:
69:87:a7:95:49:62:5d:09:54:c1:8d:a2:14:ae:77:
e9:dd:de:68:44:c4:a3:d4:a0:a1:bb:65:2c:a2:5d:
25:24:d1:96:e2:2e:72:c7:2a:31:2d:ea:2d:02:14:
29:c2:f2:38:ba:00:71:7a:3a:f7:f6:a9:06:87:0d:
16:a6:49:83:bb:3c:8b:4a:36:ee:bf:c6:e2:c7:59:
c1:fb:26:64:c5:50:71:60:50:1b:7c:41:57:22:4d:
9b:7b:15:80:51:56:79:09:a0:ea:ff:67:ae:4c:a0:
5e:30:7d:12:4b:73:6f:d4:10:92:03:f1:45:68:f8:
ca:4e:cb:20:ec:4c:1f:d2:d5:15:3c:1c:38:b7:9f:
1c:75:bc:b3:2b:9d:06:5d:12:7c:74:e3:6d:12:b1:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:43:88:9F:DE:72:03:78:C9:B2:40:CE:A9:40:C7:6F:65:75:D4
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9d:36:c4:f7:42:b8:31:37:39:e3:0e:1a:d2:25:a2:d0:8f:
9e:b3:68:bb:ec:59:9d:2e:7d:2b:c4:7e:21:b7:02:d5:b9:e6:
72:4d:36:91:c6:d0:51:b4:59:af:93:35:36:bd:e7:f0:c8:f1:
69:12:21:67:b1:a7:53:25:81:1f:71:9e:d1:d9:46:b1:01:3a:
42:e5:91:28:62:50:24:df:12:89:fe:73:43:92:e4:8c:90:69:
b8:89:f4:f1:d2:84:ee:6c:c2:d6:92:31:43:91:57:83:32:c7:
86:f0:2b:b2:97:44:02:30:17:6b:cb:7b:56:fb:56:18:39:c6:
eb:27:e4:88:17:85:3b:40:68:36:6c:4d:50:81:89:72:c4:b0:
c9:48:38:64:24:a0:7a:bf:53:cf:6c:ab:bd:8a:d2:43:14:09:
f6:54:15:ad:b1:c4:1f:96:e2:40:19:64:21:db:5b:85:d1:40:
65:28:c4:54:67:80:42:bc:39:b7:7a:73:28:c4:1b:12:63:a1:
8a:15:34:77:63:0e:99:af:f3:da:52:ef:c9:83:0a:e3:3b:79:
91:e1:eb:d4:3f:f2:7d:69:83:e0:49:c2:4b:7c:49:f5:17:ad:
bc:81:3d:7d:58:4d:90:52:c4:8d:04:34:5c:a8:d0:e2:13:a1:
0d:51:6d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:22 2025 by rpki-client