Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier: YryHm8TUjIP7OUE/oDrAsCdrZ4rRvpguedjtp6I9KYA=
Subject key identifier: 3F:40:D7:2A:69:90:9F:A5:82:38:39:E4:39:64:B0:CF:CD:F3:A8:71
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 0199FC21763030E1C9E2B02266E653B107AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: nfuzmOe8cD0evy5DZBYYBUoca7YL8LlSYc5RnDXJtHo=)
2: imECYFGKC-3y-aw_FjEqqGuMgCg.roa (hash: W1gRIBzxFMrRJWBGFPIeo4wKyMzv3I/ninZ6Px3gAlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:76:30:30:e1:c9:e2:b0:22:66:e6:53:b1:07:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=3f40d72a69909fa5823839e43964b0cfcdf3a871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:7f:ab:f1:37:6f:7d:20:0d:71:ae:9c:64:
91:19:d2:68:95:cb:55:c4:da:da:42:da:5e:65:5d:
52:09:2d:66:26:59:2a:e0:57:d2:13:3b:6e:29:35:
7b:f6:45:c4:9d:84:d1:85:c9:e0:fb:39:1f:9f:ea:
6f:3b:61:ac:3a:73:84:32:62:a7:3a:d8:67:ab:07:
84:4d:5f:1c:cd:2e:81:3a:ac:ce:ec:37:e3:18:91:
7b:f5:e0:bc:15:16:e6:89:f5:06:12:ca:ca:c1:b8:
c7:1a:a2:1f:8f:73:b9:85:36:19:72:1d:e7:e2:c8:
19:30:98:a1:b0:39:e9:b8:0f:c9:e2:a8:7b:32:c6:
37:7a:c5:d6:ce:7f:48:d4:43:8b:7c:5d:c5:b9:ce:
a7:01:1b:11:19:3f:02:a9:3f:6d:bd:b4:23:3f:07:
a3:52:01:a4:80:ad:36:52:76:95:91:c5:45:cb:6b:
09:0f:fa:85:eb:0d:99:36:56:cb:7c:f7:e0:a2:47:
33:c8:0e:a3:e2:a5:b3:c9:83:c4:1c:03:17:61:65:
ae:1e:c4:28:7d:22:68:f0:39:7a:12:45:37:95:1a:
15:e3:1f:86:4d:e2:ea:bc:7a:0a:83:cd:c3:38:cf:
29:0a:e1:00:b7:5d:9a:d1:e1:7c:28:82:c5:fc:d6:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:40:D7:2A:69:90:9F:A5:82:38:39:E4:39:64:B0:CF:CD:F3:A8:71
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:de:ce:84:ff:cb:a7:f2:24:39:f9:93:d0:77:11:8b:49:79:
fc:67:ac:13:fe:e7:7b:74:c4:b1:cd:d9:70:2e:8c:ce:f5:24:
ad:61:3d:38:b1:8b:b8:76:84:d1:97:10:f0:4d:89:16:43:bf:
3b:57:57:e4:00:22:5d:0e:85:72:f6:70:a3:ba:00:1e:85:99:
22:4f:b8:54:e2:ee:59:0d:8c:c6:cc:cb:2d:3f:17:1e:54:c5:
9d:c1:f3:91:1f:6c:3c:2f:05:f2:fd:ae:d1:4a:45:62:a5:e6:
31:bc:82:ad:77:4d:8a:43:c3:da:d9:6e:11:2f:18:32:41:8d:
84:aa:e0:1d:b6:04:35:b6:d3:fc:37:37:a9:57:63:99:bb:e9:
22:d7:d9:bd:e3:13:51:83:f6:35:4d:68:63:35:b6:0f:86:51:
fc:74:5a:aa:28:84:26:f4:30:7e:a7:b1:62:13:99:8d:1b:8c:
2a:cb:9e:16:c5:45:37:81:17:d0:f1:e8:89:fa:f9:68:23:51:
a8:c5:7f:b0:b4:fe:24:4e:89:f8:e1:b5:d8:1f:d4:56:ed:a3:
a1:f1:70:72:61:60:4f:ae:da:a2:6a:d9:1f:41:42:1c:51:7c:
c4:e5:d9:f6:00:9d:5e:c0:c4:ce:80:b9:39:82:d3:02:1f:44:
28:6e:06:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:12 2025 by rpki-client