Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
File: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft (raw, json)
Hash identifier: As0rbc3c/0jWr97NpkgMLILmOOiLcLWwXJ/9GeEs0uQ=
Subject key identifier: F1:25:3F:3D:01:A6:74:9A:C2:DD:03:2F:3F:37:19:81:1C:D4:4B:81
Authority key identifier: 35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
Certificate issuer: /CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Certificate serial: 0198D7A9177E8934C5766FC821925E60427C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
Manifest number: 09F7
Signing time: Sat 23 Aug 2025 16:00:39 +0000
Manifest this update: Sat 23 Aug 2025 16:00:39 +0000
Manifest next update: Sun 24 Aug 2025 16:00:39 +0000
Files and hashes: 1: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl (hash: 4cRhF5Eb08vj4+CR/SiQGCJXWvhbQe2zQyUA44oQKb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:17:7e:89:34:c5:76:6f:c8:21:92:5e:60:42:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Validity
Not Before: Aug 23 16:00:39 2025 GMT
Not After : Aug 24 16:00:39 2025 GMT
Subject: CN=f1253f3d01a6749ac2dd032f3f3719811cd44b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:a4:d9:b6:04:df:c3:c3:53:7e:9f:57:dd:
5d:33:7e:48:4d:10:4f:31:29:c8:1c:f2:2f:c3:31:
0e:62:d6:f8:15:e7:66:49:2e:b3:6b:08:f3:6e:96:
3c:f1:19:a8:65:5d:fa:72:97:21:50:fa:33:10:a8:
9a:d9:9a:d8:62:e1:9f:71:94:0a:90:1b:b9:ff:5e:
3e:59:1d:c5:95:cd:da:9d:65:17:38:99:c0:bf:9e:
25:dc:e8:d3:7d:ef:52:f9:89:b0:47:98:53:2a:3d:
cf:6f:8f:63:63:fa:3e:92:bc:c3:45:4e:17:70:91:
7d:6d:34:cc:06:e7:ff:11:97:f3:da:4f:e7:9e:c9:
ed:81:26:5d:20:3a:20:fb:1d:34:4d:21:c3:2c:5a:
07:a4:76:ff:34:af:30:95:5a:a9:78:f9:fe:13:40:
a1:c5:a9:bd:f8:1e:79:71:0d:70:d1:15:a9:72:68:
a2:58:58:3f:b5:41:3a:09:f8:09:57:27:00:2f:ab:
69:e1:ab:cb:8e:b0:05:7a:1f:cc:a2:82:50:1b:8d:
01:7b:2f:3a:7d:62:bd:bd:d7:7a:0b:ce:dc:47:c7:
76:40:28:bd:31:38:59:bd:99:a3:e3:df:8f:0a:e3:
ad:db:52:5b:3a:94:69:9c:a0:7e:b1:d2:dd:be:0e:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:25:3F:3D:01:A6:74:9A:C2:DD:03:2F:3F:37:19:81:1C:D4:4B:81
X509v3 Authority Key Identifier:
keyid:35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:00:72:32:58:9b:56:b3:5d:a0:7c:05:a0:18:06:8d:04:13:
01:26:8e:13:f2:fc:1f:14:05:1d:a5:ff:23:88:94:86:8e:e2:
5a:4e:17:d2:24:ba:c6:37:45:75:5d:e1:27:f3:22:f6:62:4e:
a3:34:4f:ac:a8:e1:c7:a5:68:24:b0:89:35:b2:eb:a4:40:02:
f0:a6:d6:22:a8:67:88:a5:48:cf:85:c4:f5:60:c3:f2:4c:b2:
a0:49:77:f4:0a:6f:86:76:72:65:5a:b2:57:6f:fd:d0:8c:0e:
e0:dc:1e:1d:00:57:da:42:90:54:3d:85:1e:a6:50:7e:1d:32:
81:63:af:cd:47:64:4e:a6:2a:be:13:79:b0:cf:a0:38:9b:32:
17:d7:77:96:a9:c8:e5:3e:98:31:0f:86:29:ca:18:8d:6f:9d:
25:2c:1d:74:7a:16:d3:c4:87:4d:b2:ba:db:f6:49:7d:b0:83:
b1:7f:40:02:ed:a9:b6:81:1a:35:5d:ad:32:99:3e:75:cf:74:
4c:03:c6:25:46:d8:5b:96:f0:c2:fd:6d:55:37:7f:15:8c:f3:
7b:f0:84:45:c8:f4:55:b8:7f:3e:e9:0c:e8:e5:de:de:65:9a:
80:cb:c6:a8:a7:60:64:11:19:5c:10:1d:8f:fe:74:7d:58:ad:
88:4c:34:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:35:15 2025 by rpki-client