Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
File: NO2iVBz8z2guKd2uYx7cjR57b2A.mft (raw, json)
Hash identifier: rOYfaL4gIR8RYlf9Rh9g41YiD4hifsv/VBg6GZT5DuU=
Subject key identifier: E0:35:BF:4F:E8:C9:C5:68:8A:E0:F0:0F:E3:F4:6E:CE:35:81:4C:AE
Authority key identifier: 34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
Certificate issuer: /CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Certificate serial: 0199FBEA95901E1DC2B20C271EC8E641F77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
Manifest number: 0790
Signing time: Sun 19 Oct 2025 10:01:18 +0000
Manifest this update: Sun 19 Oct 2025 10:01:18 +0000
Manifest next update: Mon 20 Oct 2025 10:01:18 +0000
Files and hashes: 1: NO2iVBz8z2guKd2uYx7cjR57b2A.crl (hash: 81l2Yui4spNrURp7nRj3m0RgFbc5EgF0T29eAyAwK+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:95:90:1e:1d:c2:b2:0c:27:1e:c8:e6:41:f7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Validity
Not Before: Oct 19 10:01:18 2025 GMT
Not After : Oct 20 10:01:18 2025 GMT
Subject: CN=e035bf4fe8c9c5688ae0f00fe3f46ece35814cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:5d:5d:a4:9d:86:81:8f:99:da:d8:87:68:
67:b1:de:54:e8:0d:af:9d:83:5e:d2:e5:5b:57:fe:
c4:0b:84:65:b3:ef:a0:86:49:28:87:9b:2d:b9:be:
c1:d2:78:5d:70:fa:eb:11:d9:c3:53:28:f1:ce:67:
a2:73:65:09:13:f2:34:20:71:5f:2b:0f:17:a6:b8:
6f:e8:97:b8:ea:a5:b8:ef:80:67:23:0a:d1:80:dc:
16:38:5d:49:e5:da:d6:fd:52:db:88:55:2c:64:57:
7c:77:cb:60:78:45:4d:e4:ac:04:6d:bb:d8:20:55:
59:70:3e:a9:18:ce:b9:15:48:40:42:9a:f0:26:4c:
4a:2b:c0:c3:65:83:aa:d8:71:19:c8:be:04:bd:32:
e9:23:ca:66:fd:c9:3f:94:7d:ff:f6:ae:61:8d:03:
46:de:c4:47:c2:7e:6c:82:48:e7:7d:24:60:db:2d:
85:fe:2d:75:40:32:62:f8:a6:73:a7:94:1b:26:9c:
05:87:7c:f8:15:9b:82:1b:f1:94:86:9c:4e:42:13:
a1:e3:50:74:93:d2:eb:dc:fd:4b:34:ac:62:ba:9b:
f5:a4:0d:a5:24:83:dc:ad:66:62:a2:ab:05:f4:7a:
27:19:5d:90:70:af:aa:72:36:8b:d6:84:cc:1a:ee:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:35:BF:4F:E8:C9:C5:68:8A:E0:F0:0F:E3:F4:6E:CE:35:81:4C:AE
X509v3 Authority Key Identifier:
keyid:34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5c:2f:ca:8a:c1:e9:f8:6a:ae:fb:5f:61:55:5b:3d:24:1c:
78:76:49:a1:5d:4c:3e:bb:f6:f4:e6:95:7f:e9:30:75:e9:25:
37:a4:27:3f:71:f6:34:ca:79:83:91:8a:5a:48:35:d1:d2:79:
58:18:d1:30:25:35:3a:c5:d4:de:43:20:59:0b:02:ad:83:aa:
a7:44:93:42:e7:89:e9:d4:77:59:db:66:82:ff:53:73:c5:70:
30:91:f8:cb:a1:8b:5e:62:d6:b5:1e:f7:c7:a9:44:9c:16:93:
de:3d:6d:c9:89:b5:03:31:95:4b:0f:26:83:d6:81:dd:93:98:
fc:bb:22:15:f9:57:3a:2e:97:5a:39:40:37:42:c8:56:49:26:
fc:0a:0d:f7:ac:4a:76:3d:34:80:59:a8:53:d1:99:ef:33:66:
20:a3:92:b4:71:86:34:5c:ac:f0:1f:90:22:dd:da:2d:75:5c:
db:b6:d4:62:c4:de:32:71:c5:8e:05:9a:f8:a6:f4:31:05:97:
ce:a7:e7:61:36:05:44:7b:18:a5:ac:bd:6a:bb:de:5e:b2:b8:
9f:92:70:53:4a:7f:96:54:3d:df:16:c1:c7:33:29:a5:4f:cb:
20:e2:6e:7e:e9:d8:fb:42:fa:0b:6e:f0:40:f4:ab:20:4c:bc:
33:b8:0f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:53 2025 by rpki-client