Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
File: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft (raw, json)
Hash identifier: pCwjU8Eph9s1it8zO80+2C0BL8mLYkmYdsaXQqd1GIs=
Subject key identifier: CA:28:79:C8:72:F3:49:AB:4D:03:39:A1:97:4D:62:F0:96:2B:7F:F3
Authority key identifier: 35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
Certificate issuer: /CN=35ced0549f5b35dafa74d90b0468200178545d74
Certificate serial: 0199FC586B9589E0251D505FF6F533C5C67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
Manifest number: 0200
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl (hash: koZF8PDtE/TY1YjjNxUFTQqe9tNdJEbJdakRZkInors=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6b:95:89:e0:25:1d:50:5f:f6:f5:33:c5:c6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ced0549f5b35dafa74d90b0468200178545d74
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=ca2879c872f349ab4d0339a1974d62f0962b7ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:10:05:ea:3e:7b:4b:e3:da:12:d9:95:e8:
98:c1:c7:ca:88:9d:49:c3:94:8d:d3:52:89:2a:39:
aa:a4:5e:c6:39:8f:2f:f2:79:e8:3e:89:9e:95:b8:
56:af:bc:59:4d:b6:5f:16:99:e8:fb:50:c4:09:14:
cd:16:79:2f:d8:2f:ce:77:c0:c7:29:66:4c:84:28:
f6:c8:dd:b6:58:1f:a4:7e:a1:94:ca:19:d1:29:06:
32:55:32:c3:28:c7:2a:9e:90:bf:54:62:02:8c:a5:
5e:0d:04:86:ee:16:37:93:c5:56:59:bd:76:63:6d:
da:31:a3:63:56:d8:c1:03:3a:f2:9b:86:25:e0:db:
66:71:22:e1:9a:05:96:f7:f1:4e:88:d9:4f:f9:81:
10:2b:73:a1:17:d9:ca:85:c0:83:37:d6:3b:a1:07:
3d:03:d2:8f:ae:c1:d1:aa:51:b1:e6:64:85:08:d5:
2a:e3:83:7f:8d:4d:d4:70:b8:b1:0f:9a:49:fd:64:
9d:7b:8c:4f:a9:b1:9a:e8:82:25:09:50:16:5c:bc:
96:6c:14:4d:3d:d3:ba:ee:ed:c0:11:05:9e:12:0a:
c7:d1:bb:b8:b4:13:89:7a:d0:9c:8c:e0:5b:f3:1b:
05:f2:76:5d:6b:c5:46:8b:c9:5f:da:7a:83:fb:5b:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:28:79:C8:72:F3:49:AB:4D:03:39:A1:97:4D:62:F0:96:2B:7F:F3
X509v3 Authority Key Identifier:
keyid:35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b4:f9:ef:57:ba:be:3d:37:52:af:22:30:dc:52:36:78:82:
87:08:27:f9:b1:ab:45:eb:6a:e5:56:ea:c3:a4:c8:07:14:b9:
89:80:b1:da:a5:3f:07:1d:e7:e2:ec:a6:e2:37:ff:4d:26:d9:
59:f8:03:61:84:ae:e7:23:67:ee:6a:a3:97:0a:ea:e3:45:62:
00:82:84:0d:5a:d1:1b:e8:9b:0b:a2:c2:c4:7d:2a:51:3c:4e:
d9:51:ee:c1:c9:3d:8d:07:12:5c:9d:33:9e:43:3e:21:36:41:
19:0c:d9:37:60:02:6a:27:eb:ef:f6:82:e8:8b:8e:47:48:93:
91:e9:ab:9e:0f:88:97:f1:4e:43:ef:1b:d3:73:7d:8e:57:99:
89:f1:10:77:ca:d0:09:1b:a7:9c:ad:47:d0:a5:ed:24:4b:d3:
48:4a:37:d9:a8:37:33:aa:be:ba:4f:a8:77:34:4f:f3:6a:ea:
b8:dd:56:6b:56:5e:f0:77:82:93:e2:55:aa:45:cc:fb:d6:ca:
f6:c4:54:f9:00:bd:d6:c9:60:41:81:7c:c7:9a:63:71:6f:63:
5d:4a:db:3b:6a:15:8a:67:fe:ba:c1:02:e9:f5:73:58:52:f9:
9f:08:16:a0:bd:31:4c:12:eb:70:1a:90:3a:2a:dc:d6:8c:24:
11:e6:27:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:41 2025 by rpki-client