Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
File: NrzwGgmAWLhROxb9nksbI4_Nb1g.mft (raw, json)
Hash identifier: 2paBHxNbsW/TsgzjID5U0bDpoXjE1RcittMIU0S+pso=
Subject key identifier: C8:99:EB:32:72:5D:4E:87:3D:5F:32:A8:DB:60:D5:F5:85:B5:74:6D
Authority key identifier: 36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
Certificate issuer: /CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Certificate serial: 0199FE469515BE6FE30CC8C6105B5C4DF299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
Manifest number: 0290
Signing time: Sun 19 Oct 2025 21:01:02 +0000
Manifest this update: Sun 19 Oct 2025 21:01:02 +0000
Manifest next update: Mon 20 Oct 2025 21:01:02 +0000
Files and hashes: 1: AfyofESsKziO9R3ILuO1YYWUdu8.roa (hash: nUxsrIBKiuHD8xm10VmDY98apv5y2MdixCNIXLJz49Q=)
2: NrzwGgmAWLhROxb9nksbI4_Nb1g.crl (hash: v+fbNYSedjIKQj9qIMpv6+RpoUJ0rEbqPogItP+jasE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:95:15:be:6f:e3:0c:c8:c6:10:5b:5c:4d:f2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Validity
Not Before: Oct 19 21:01:02 2025 GMT
Not After : Oct 20 21:01:02 2025 GMT
Subject: CN=c899eb32725d4e873d5f32a8db60d5f585b5746d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:db:67:0d:98:af:c0:52:10:66:02:19:27:
68:45:d0:72:cb:ff:76:8e:4d:06:7f:c9:a6:d5:7f:
ef:2f:1d:1c:a2:63:e6:c2:3a:b5:f5:bd:cf:b5:d9:
09:64:c4:62:8c:76:78:67:a1:06:f8:5e:0f:a2:88:
61:54:14:74:af:c9:4d:75:25:97:db:a3:6f:e4:63:
4e:d9:ad:21:9c:5d:cc:f6:ba:48:6f:b4:34:6b:45:
01:95:d3:0e:c3:20:07:43:85:2a:2e:ed:49:6f:6e:
39:dc:92:66:69:98:1b:13:66:d4:24:6d:ef:49:a4:
c7:50:72:f0:b9:c4:56:04:e5:0c:65:7d:34:e4:0c:
48:42:ff:08:7a:90:f8:5a:ea:65:35:d1:7e:30:e8:
36:60:06:2e:34:71:3f:3a:28:64:3f:5d:5c:23:f3:
52:6d:dc:43:b8:59:25:c0:9f:b6:ca:ac:68:ca:bf:
bd:c7:ac:5b:56:13:e6:d1:a5:42:55:86:61:4e:9e:
0d:b2:0a:18:7e:1a:01:a6:a0:de:4e:8e:8b:2d:75:
ee:c0:4d:12:9c:b6:e4:ea:46:07:47:0f:0b:43:8c:
a5:4a:3a:95:fd:a5:f8:6b:13:df:17:49:a1:e6:6a:
7b:e3:17:0a:6d:31:36:21:07:8e:b9:6c:1f:09:63:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:99:EB:32:72:5D:4E:87:3D:5F:32:A8:DB:60:D5:F5:85:B5:74:6D
X509v3 Authority Key Identifier:
keyid:36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a7:4b:f5:db:39:2b:8c:3a:95:19:aa:64:e6:c2:b3:25:8b:
db:11:be:e5:cf:7c:99:18:ef:36:76:ec:91:91:2f:68:c4:ba:
c7:07:c3:57:c7:29:69:47:f0:ef:fa:a0:73:24:96:13:24:46:
32:2c:ad:9f:14:2f:45:ea:04:ed:df:d0:ad:5e:4d:a2:33:4c:
2a:fe:cc:17:64:37:ae:f5:95:6c:fe:88:20:4d:c1:7f:26:ad:
a7:27:8d:13:f4:1f:76:c7:df:ed:0c:78:1c:19:bd:f2:f5:2b:
45:b8:b6:10:de:10:c8:40:32:1e:49:1f:66:6c:1e:e8:9a:5e:
51:f0:52:ed:87:a7:f1:c1:c2:08:36:52:b6:f1:0f:91:db:b0:
96:e8:fa:e0:47:df:a0:81:eb:33:7d:ad:e7:d0:45:67:f1:90:
5c:8a:02:7d:99:d8:e6:fd:66:66:fe:f1:6a:66:52:a7:28:4c:
be:89:67:65:59:8b:00:df:e4:81:9c:a5:11:e7:d1:6c:70:b6:
48:e1:5c:59:ff:bd:73:3b:a1:90:25:18:cf:43:35:ab:70:1e:
35:70:80:98:05:30:6c:f9:bc:37:52:34:5a:ff:3d:78:c7:16:
a6:8f:29:97:6b:18:59:a8:27:a9:21:4c:4e:f1:75:6b:cd:f2:
b5:a6:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:52 2025 by rpki-client