Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier: IxUDKZlC6sYb4x4V9lC7wYQWRlXogJmYOcOi3+uFSmU=
Subject key identifier: AE:24:CD:DA:71:DD:02:E3:5D:BE:C0:21:BA:7D:FC:12:EB:0C:EC:CD
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial: 0199FBEB4394940B157B71C2B9A03412134F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: /yusdqX2+dj2QhLT2pcQQL4+Sm7m0xxKAacEx+OoiHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:43:94:94:0b:15:7b:71:c2:b9:a0:34:12:13:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=ae24cdda71dd02e35dbec021ba7dfc12eb0ceccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:07:af:e9:fd:78:54:97:8f:69:d0:60:dd:
0e:14:ab:4d:59:cf:2e:c2:99:64:9b:ac:28:0f:5a:
d5:73:60:33:58:6a:c7:90:6b:dd:b4:5c:40:6e:05:
8e:47:14:be:d9:61:d9:28:ff:ba:47:bc:be:4e:33:
8f:1c:70:d6:81:94:53:74:27:81:c2:ea:56:15:ad:
e7:eb:7b:7d:55:ae:19:62:3e:d0:08:a5:27:25:81:
67:7a:5a:48:ba:28:3e:4a:d1:58:f7:04:57:98:4d:
d8:1a:c8:37:bb:a9:09:ad:d3:db:eb:f9:ee:f7:19:
d8:ab:93:35:cf:4b:f5:e3:cc:39:3a:96:d3:08:40:
db:bf:b8:80:b5:52:99:93:1e:3f:d9:a4:64:30:da:
30:7f:e7:58:09:c3:40:3d:77:d4:15:2c:cf:18:f6:
06:b6:a5:7a:27:74:fa:3f:02:a5:75:f9:25:3a:9f:
5e:6b:ca:44:3f:ac:be:7b:9b:b5:28:ac:11:25:b8:
e1:12:01:ed:09:66:5e:e8:df:68:45:c1:b0:87:7a:
d0:c3:ae:3e:a1:df:a3:e6:40:cc:cd:3c:55:db:80:
a2:d7:94:78:dd:fc:c2:b9:bb:53:da:eb:ac:7d:ec:
f9:5e:c6:f1:60:17:f7:4e:95:72:70:4d:b0:fd:24:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:24:CD:DA:71:DD:02:E3:5D:BE:C0:21:BA:7D:FC:12:EB:0C:EC:CD
X509v3 Authority Key Identifier:
keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4b:51:9e:69:05:2a:db:31:3f:0f:97:31:c4:fa:ae:f9:89:
c0:d4:ad:f6:a8:f1:46:d6:37:5c:58:0d:eb:6f:48:1d:26:1c:
12:bc:e5:18:3a:e8:0d:e6:9c:e4:cb:2c:eb:a3:d4:05:6e:a5:
9d:c3:5c:31:2c:23:f1:ab:fe:92:bd:5e:d1:ba:6a:e4:d5:a1:
38:98:1a:09:c3:b8:f2:4a:55:74:79:73:51:97:1f:43:7b:2c:
57:19:3f:81:83:6b:60:74:83:8c:0a:46:50:7b:07:03:d5:ad:
a0:4b:bb:54:02:fe:71:74:c6:ef:05:19:99:cf:48:40:ce:81:
ea:e5:9a:7a:24:cb:70:e8:88:cf:20:5c:df:8a:08:de:67:70:
f9:5e:f5:d8:45:74:a1:05:de:a3:8b:0b:69:c4:b9:67:e0:52:
51:b6:29:ec:3f:4c:21:23:58:45:8b:6a:22:48:51:94:89:d1:
39:82:7f:02:22:11:85:57:62:b6:d2:8e:af:1f:82:92:fe:0e:
ad:8b:06:0c:c9:8c:cc:91:7f:63:d0:9c:96:d6:fb:ce:a5:8f:
7a:c8:a0:20:44:f8:ca:d8:a4:59:8f:f7:fc:f5:83:13:bc:61:
78:ad:aa:98:74:60:a5:9c:8e:15:01:e7:9d:61:2c:26:72:83:
f3:06:99:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:35:10 2025 by rpki-client