Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: xCSeqbOTSOHjpPJ5GmobIPORItAP+UhnpB8Pl1wh4YI=
Subject key identifier: 3A:24:FB:C9:97:22:B0:CE:F5:69:D5:16:09:F4:75:26:8B:CD:D6:F6
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 0199FCC6BCAB8E8258B798F7C4CE91C2850C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0DC3
Signing time: Sun 19 Oct 2025 14:01:46 +0000
Manifest this update: Sun 19 Oct 2025 14:01:46 +0000
Manifest next update: Mon 20 Oct 2025 14:01:46 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: N0XJnfjhBNqWhynLhNzFVDkqJzedPWylWD7fxvv78LE=)
2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:bc:ab:8e:82:58:b7:98:f7:c4:ce:91:c2:85:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Oct 19 14:01:46 2025 GMT
Not After : Oct 20 14:01:46 2025 GMT
Subject: CN=3a24fbc99722b0cef569d51609f475268bcdd6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b3:c6:ed:30:11:ec:2d:05:c4:c2:56:c9:48:
e2:8f:d7:68:5d:06:ce:ef:04:36:14:be:09:d8:9c:
ee:63:95:d9:5c:ca:97:ef:83:8c:6b:71:44:5f:c6:
d1:bd:a3:7a:a7:cd:30:ea:57:7e:5a:82:86:57:cf:
66:54:e7:38:69:c8:18:c2:30:d6:98:89:49:a5:6f:
ae:8e:3f:36:b0:2c:12:71:b6:e8:37:c5:6f:d3:8f:
e7:c4:0e:17:96:8d:13:38:7f:6e:21:84:50:a8:a0:
46:04:a5:9b:bb:01:27:80:5f:76:2a:e4:66:23:18:
5f:99:ba:95:45:b6:e1:4d:dc:46:f9:b5:44:bd:5f:
b9:2f:fa:59:69:ab:ad:12:30:8d:4a:24:50:f8:46:
c2:cc:69:1e:24:73:7e:55:3f:93:ac:ab:6a:6c:2f:
f4:bf:c6:09:1a:92:2a:20:75:b4:7d:d2:e4:5b:10:
0d:98:c0:34:87:d4:e1:6b:95:44:7a:8f:db:c5:fa:
66:b2:24:1c:90:ca:b2:e8:b1:c6:34:3e:b6:e6:d2:
81:2e:91:29:32:91:4e:ea:c1:c2:df:d2:db:12:37:
88:ef:11:d9:47:e9:c9:50:ed:6f:32:47:9e:c5:ae:
70:a8:59:b7:55:0d:0c:8a:15:c3:b9:ec:b1:e1:68:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:24:FB:C9:97:22:B0:CE:F5:69:D5:16:09:F4:75:26:8B:CD:D6:F6
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5e:ed:18:5a:02:41:e8:dc:3c:34:8d:6c:bf:74:c1:c1:10:
98:fa:21:7d:f9:06:77:83:02:fb:96:11:ff:92:a5:9a:36:3a:
e6:b6:31:00:32:23:6d:46:c6:6f:38:60:82:7f:06:3a:c4:09:
4c:7a:9b:43:56:08:c4:58:5f:27:7d:c5:dc:eb:96:8e:d2:f0:
b5:e0:37:2b:26:e3:21:8e:85:95:f5:85:f7:05:69:70:ab:b4:
c9:f4:fa:68:bf:21:17:4f:73:e4:42:17:eb:1b:8f:1a:78:c7:
6d:22:09:95:d9:d3:78:5b:55:d9:d5:3d:9c:2c:a2:26:38:2f:
d3:2c:6e:1d:64:bb:3f:67:fc:e8:3d:eb:6a:18:0b:0e:af:cb:
8e:cf:50:19:fc:8f:80:75:d5:52:be:7b:3a:2f:23:79:40:ee:
a2:22:38:e2:40:fd:5b:bb:3e:82:54:b3:7a:91:06:f3:4f:40:
94:dc:04:4b:d4:25:19:10:0c:63:17:59:4b:e0:74:2e:b4:ff:
61:42:b0:8b:45:49:9d:4d:b1:ee:0d:3d:e3:b0:31:10:7c:6d:
71:80:3c:71:60:29:37:5c:35:41:49:91:f8:b3:66:2f:8f:51:
88:89:0b:cd:22:dc:9b:5f:c8:1f:42:f2:2d:49:5c:91:0c:53:
98:08:90:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:08 2025 by rpki-client