Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier: eMhus9sNtbWGAcmOfNvmlh5KMMWetIZjxygpBitTf18=
Subject key identifier: F3:C6:B7:7C:28:42:37:A7:23:D7:AB:26:A5:49:AE:7D:74:DC:5D:FF
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial: 0199FFFE798A593B44B648AE95512D990B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number: 02F4
Signing time: Mon 20 Oct 2025 05:01:31 +0000
Manifest this update: Mon 20 Oct 2025 05:01:31 +0000
Manifest next update: Tue 21 Oct 2025 05:01:31 +0000
Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: W3MoNEFDQx95GHwB7hwMCFWGMv1ZXPBS+01iEIAxDmw=)
2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:79:8a:59:3b:44:b6:48:ae:95:51:2d:99:0b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Validity
Not Before: Oct 20 05:01:31 2025 GMT
Not After : Oct 21 05:01:31 2025 GMT
Subject: CN=f3c6b77c284237a723d7ab26a549ae7d74dc5dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:04:21:01:4c:9e:fd:4f:de:cb:50:b4:85:
f1:6f:22:a4:5b:c3:81:d5:d1:71:ed:f2:ad:d7:b3:
4e:59:36:19:3d:d6:a4:1c:29:c1:37:26:a0:24:58:
a0:58:5c:68:15:9e:20:4a:04:5f:cd:5d:1e:2c:ec:
bf:e3:42:da:39:b8:da:1b:f5:83:14:e7:0e:bf:a8:
b1:22:43:8b:61:11:f3:3f:c7:62:43:08:11:5d:a8:
32:f5:02:3f:49:3e:52:b5:a5:bc:08:04:a0:22:20:
1c:d4:17:30:c5:22:de:96:8d:09:6a:34:d8:23:7e:
d1:8a:3a:e6:39:0f:4c:1f:b9:1c:93:83:76:cf:1a:
f4:af:53:1a:5a:f5:a7:32:04:a0:88:30:d4:15:10:
2a:b5:4e:f7:8a:a8:65:91:40:b4:bb:1a:39:8f:89:
69:21:96:4d:de:70:2f:02:93:8d:f9:93:b6:1e:9d:
57:82:55:db:8e:42:48:3d:9b:92:bf:54:3e:6d:0d:
ca:a2:f6:62:f0:c5:b3:07:2d:46:93:6a:f2:a8:a2:
92:74:d1:23:be:ac:0c:16:d9:01:2f:64:49:5c:52:
18:0a:62:be:b3:33:e4:e8:37:a9:11:5f:0d:64:82:
3b:d1:da:2d:36:bc:6f:8f:82:b2:bf:30:fa:2c:6a:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C6:B7:7C:28:42:37:A7:23:D7:AB:26:A5:49:AE:7D:74:DC:5D:FF
X509v3 Authority Key Identifier:
keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c4:8e:77:ea:42:bb:ef:ea:2f:b2:77:fd:3a:c2:1d:53:72:
62:4b:e1:a2:aa:d1:64:59:c8:87:f2:95:fc:5e:f3:e0:3a:e8:
a8:f3:52:94:ea:b3:71:3a:f1:bc:9b:4f:db:61:7b:a5:e2:73:
74:83:2c:fb:e3:94:3c:c8:be:bb:be:8b:90:78:b8:a1:31:5f:
20:3a:34:84:63:a8:01:f6:22:38:5e:00:c6:a3:58:2f:09:b9:
8b:ce:18:0d:be:6e:86:08:8c:b5:41:70:9a:59:8b:01:a4:57:
82:0b:65:f5:38:cc:46:f2:11:bd:24:7d:12:29:2b:59:df:a2:
af:68:c1:55:4b:4a:44:c5:1a:14:c9:6d:f1:d9:e6:2b:47:fc:
b3:85:fe:11:70:d5:2b:80:f7:80:fe:d5:3f:5b:4f:1d:32:d3:
3b:89:0b:c8:c3:87:12:2b:7a:fc:2c:52:bb:c7:ae:94:40:a9:
4a:22:04:e1:dd:ef:03:89:bf:d5:fb:25:e6:67:3d:6a:77:3b:
0a:4d:c1:16:03:f4:59:b1:bc:04:68:51:d2:4b:0c:7f:ef:dd:
2a:fa:9a:77:eb:08:fa:c3:89:22:df:ea:c4:62:d0:9d:96:33:
0e:70:e5:e1:62:c9:e9:14:2d:f6:18:fe:bd:6a:a9:e8:32:6f:
6f:b5:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:36:24 2025 by rpki-client