Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: JVtVDgDaiI826qct3RE8M1grtAxd6tLuOekdIlfx0mQ=
Subject key identifier: 42:60:24:8F:C3:33:97:99:D1:61:7E:1E:A1:DD:45:A7:FE:D3:BE:6C
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 0199FBEB79E2F86A397D97DA310BD8971ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 0242
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: 5V1T24m7JEIoI31qfHgpiQL9DR+Gija3kxaH2NfPyrI=)
2: dy-p251zL98DN5HbKp4vPRlxutc.roa (hash: 4pwGuhrYIr/OJxEBN4t0YB3KYavBF0QhnyAv6oyh4DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:79:e2:f8:6a:39:7d:97:da:31:0b:d8:97:1a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=4260248fc3339799d1617e1ea1dd45a7fed3be6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:6c:66:0a:4f:f9:7d:be:b2:1f:9c:e5:e2:
d2:02:e2:54:f4:4a:ee:b4:01:98:e4:df:6a:e0:8d:
d7:0f:b1:c2:91:d5:68:eb:09:93:92:0c:fd:0d:b5:
72:59:7f:ca:b8:cc:a2:7a:fc:91:af:d2:a2:0c:c7:
95:4c:dd:16:b8:22:19:a6:4c:9a:12:04:f4:35:52:
a3:ff:00:f3:8e:15:b2:8b:3a:ab:ec:32:a7:b5:5e:
11:ff:a3:9b:95:5f:85:9e:d5:67:ef:51:52:db:4c:
d6:8a:e3:63:fb:a9:07:64:44:3f:4e:64:37:72:af:
fc:cc:b7:fb:59:80:e1:55:e5:cd:97:a4:ac:d0:f3:
2e:53:e8:e3:8d:8d:c2:a8:37:14:e9:bf:34:9b:5a:
ba:31:54:c8:b4:a2:1c:7f:5a:f4:f8:b8:53:68:72:
70:2e:f2:20:7c:de:64:f8:39:9b:e0:b2:83:86:36:
18:a9:59:8b:f9:af:f9:3d:84:8a:11:0b:33:13:a8:
bf:62:8d:94:99:b3:49:b9:82:06:2f:8f:ef:25:d1:
f9:fc:0c:ef:53:ae:e3:ce:80:6e:f3:82:2f:17:58:
e1:9c:90:79:ae:cf:64:1a:ab:a3:84:92:3b:58:63:
9e:f4:1d:b5:b3:58:12:e4:20:5c:e3:8f:e6:c7:f7:
5a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:60:24:8F:C3:33:97:99:D1:61:7E:1E:A1:DD:45:A7:FE:D3:BE:6C
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f4:61:b6:0e:e7:0f:2b:6c:ad:d3:92:c8:a0:1f:e7:57:f1:
cd:f6:dc:ae:3d:40:da:d2:bb:75:86:38:93:31:2d:0d:6d:4d:
f3:22:85:e3:7a:e1:7d:80:43:7e:ef:a5:7b:5f:a7:9d:86:84:
a9:07:34:36:59:82:c0:70:34:4e:c0:31:1e:7b:d6:a9:f6:dc:
33:55:f8:99:ba:87:a7:c1:9f:69:af:54:8c:0a:24:4a:25:75:
2c:69:36:ce:98:62:2e:25:9f:dd:1d:fd:f6:35:d3:af:89:f3:
00:64:6c:16:e5:b1:1e:fb:a4:81:94:49:46:d1:19:17:b9:8a:
87:52:c0:ba:1c:9c:8e:d9:9c:6a:4d:bb:a8:b3:f8:80:26:a1:
c8:b1:a0:93:59:73:43:f5:53:0b:d5:b3:3f:f5:4f:d9:ce:fe:
d6:73:39:31:14:57:da:b2:0e:e9:d8:2d:97:67:e1:41:2d:14:
6b:a8:4f:c8:19:86:a5:3e:34:4c:6b:f2:6e:9e:18:52:e8:5f:
54:7b:4c:fa:b0:37:f5:39:02:3e:b8:9b:fc:e8:ca:16:71:02:
fa:cf:c4:4e:ea:b1:1b:22:ea:c2:9c:32:1c:bb:c3:31:7f:86:
92:e9:3d:d8:6e:1c:88:d0:cc:a6:85:4a:e8:5d:e7:8d:28:bd:
23:4b:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:46 2025 by rpki-client