Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
File: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft (raw, json)
Hash identifier: G0S/LcvAiXSWPcwRR3bL+Z9tfGZUKMILDBny4dluzJw=
Subject key identifier: DE:27:CC:96:BA:54:D0:46:5F:D0:2C:22:A5:16:1B:11:6B:A2:F6:8D
Authority key identifier: 35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
Certificate issuer: /CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Certificate serial: 0199FB45B728D94084953851A8A9215F6B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
Manifest number: 0A8E
Signing time: Sun 19 Oct 2025 07:01:13 +0000
Manifest this update: Sun 19 Oct 2025 07:01:13 +0000
Manifest next update: Mon 20 Oct 2025 07:01:13 +0000
Files and hashes: 1: NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl (hash: s/DHO4l6MefVI2tRgYAq/69rA3ehBtUDH0SdgQab2Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b7:28:d9:40:84:95:38:51:a8:a9:21:5f:6b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a555e146be4ae5f7ccfe5a3c12d3f2a2543b05
Validity
Not Before: Oct 19 07:01:13 2025 GMT
Not After : Oct 20 07:01:13 2025 GMT
Subject: CN=de27cc96ba54d0465fd02c22a5161b116ba2f68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ed:80:ae:11:e4:40:ab:80:91:b8:7e:b9:dd:
4a:af:56:4f:1a:d5:2b:3e:4d:0a:37:11:2b:10:6b:
39:36:df:75:1f:bc:59:24:55:c6:dc:e5:52:97:c0:
12:f1:13:e1:7f:fa:c8:61:5d:7a:ee:b7:78:55:03:
0c:5f:6f:14:a5:ad:c2:02:30:86:8d:04:8f:31:f2:
4e:05:c7:2a:9b:fa:40:48:99:bd:84:9c:ec:1e:5c:
07:27:4f:48:77:08:55:83:8a:bd:cd:b3:98:6f:d0:
e4:44:7d:b9:cf:07:15:b9:16:1e:4c:61:fc:53:7d:
63:5c:73:f7:2e:69:15:6f:08:70:f1:6f:93:91:43:
ba:9b:7f:b6:58:67:70:c5:28:92:c8:5c:40:29:2c:
50:43:ef:34:06:8b:76:f0:fe:a2:13:d6:33:75:92:
c9:ef:a9:a2:40:ee:37:12:9e:b7:e6:1c:c1:e3:49:
66:db:24:58:c6:2a:12:5a:62:ce:d6:5f:a1:37:be:
4a:db:05:1f:e1:fc:d2:4f:a6:72:78:11:6b:b1:ee:
a7:11:e1:4e:c6:32:65:d9:47:0f:b3:d6:1f:81:7d:
1e:68:0a:98:f7:56:60:0a:8b:49:2c:2e:3c:bc:68:
49:ba:67:37:33:3a:fa:3e:4b:38:3d:25:85:19:6c:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:27:CC:96:BA:54:D0:46:5F:D0:2C:22:A5:16:1B:11:6B:A2:F6:8D
X509v3 Authority Key Identifier:
keyid:35:A5:55:E1:46:BE:4A:E5:F7:CC:FE:5A:3C:12:D3:F2:A2:54:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/549744-bdde-42e8-87a8-051cd30cbcf1/1/NaVV4Ua-SuX3zP5aPBLT8qJUOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e6:7d:45:9c:9b:1b:42:54:f3:75:9d:5f:48:4c:d2:cd:ff:
46:42:70:75:15:fd:e0:50:9c:8c:9d:69:49:f4:f1:0c:33:84:
65:b2:dc:ba:7e:49:6a:51:96:b2:58:a1:36:2d:36:a8:0d:b3:
7a:22:51:8c:31:68:87:7c:75:43:49:20:81:62:98:f0:0c:2c:
49:ff:bc:d5:b5:ee:92:00:80:7a:6b:ac:2a:63:cc:8a:0b:a6:
65:0b:2f:b1:2f:7d:e5:74:ff:8d:ce:52:fe:68:9b:1a:9a:fe:
15:2f:5c:f0:9b:d6:9f:32:33:a9:e8:d1:0e:45:38:e4:98:1d:
66:65:1d:c8:a1:db:34:8c:02:5e:86:f4:e2:83:e9:24:10:6d:
70:83:2b:ff:a0:cc:f1:d1:5e:03:7a:c5:6f:79:10:e4:45:06:
f0:f3:21:6b:f6:cf:91:bb:da:53:70:1e:44:32:ea:16:5b:b1:
91:08:10:f5:1a:ef:c2:cb:8c:9d:1e:cc:ac:2e:09:9a:15:10:
d2:ad:a6:d7:fc:67:80:03:b5:8e:f5:49:9e:ff:e9:1d:c8:47:
ad:81:77:73:1c:3c:3e:d4:ee:6e:42:e8:7f:20:9b:89:da:c5:
85:fd:de:bd:03:90:40:90:35:a3:cc:a2:63:7a:64:75:8c:cd:
0b:7a:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:00 2025 by rpki-client