Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
File: NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft (raw, json)
Hash identifier: 88uJtD+JHzmbw1fhgbHPwEeN5RDSYbM1uI2oW9mVglU=
Subject key identifier: 14:89:4F:2C:D6:63:82:95:24:47:8B:B3:CE:E0:41:CC:32:91:09:91
Authority key identifier: 35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D
Certificate issuer: /CN=35f49b5d505000b909932c6b4f443e7ef81d780d
Certificate serial: 0199FC59107CF1558B061000D93BCCD50504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl (hash: o65cdnEVO07AG7E6vnwhYRBn2XUYCWt9LlYAPSGgO/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:10:7c:f1:55:8b:06:10:00:d9:3b:cc:d5:05:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f49b5d505000b909932c6b4f443e7ef81d780d
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=14894f2cd663829524478bb3cee041cc32910991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b5:4f:1f:83:41:74:76:02:38:96:bd:2b:9c:
22:c1:78:26:ee:3a:d9:1c:a6:52:3f:f6:25:2a:ac:
47:42:24:5d:a0:f9:9f:d8:23:6c:71:dd:47:49:7f:
bb:1e:eb:fc:73:20:fd:2d:2d:76:46:4e:e5:ad:16:
54:35:b0:3f:54:c0:e7:52:30:99:6d:f3:ae:6a:b4:
d8:90:24:26:8e:ab:48:9d:1a:34:6e:73:07:a3:42:
a1:37:a8:ea:ed:1a:4a:f1:03:db:89:dc:f0:78:fa:
84:db:09:0d:93:d5:8e:65:a0:99:d6:43:ad:64:3d:
cb:78:fe:b5:1b:3b:c6:ab:03:12:5b:39:28:57:32:
28:f5:26:96:85:4c:9b:32:79:63:65:4e:c6:a6:fb:
fe:6a:cf:e8:f8:c3:ba:23:72:98:b0:91:5d:6a:60:
e4:32:df:c0:0d:34:bf:55:9b:68:da:e2:97:2d:9c:
91:63:ef:2d:b0:a6:20:48:a9:5a:ae:ee:6b:79:0e:
47:27:65:70:78:49:a9:70:f8:cd:d6:c1:2b:e7:9a:
86:7a:13:3f:2f:18:fb:04:55:52:58:e9:96:47:89:
a4:f6:2a:ed:66:b9:57:4e:14:4e:e9:be:00:a1:f6:
41:ce:55:40:18:f2:84:84:56:f7:31:2c:77:39:bf:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:89:4F:2C:D6:63:82:95:24:47:8B:B3:CE:E0:41:CC:32:91:09:91
X509v3 Authority Key Identifier:
keyid:35:F4:9B:5D:50:50:00:B9:09:93:2C:6B:4F:44:3E:7E:F8:1D:78:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfSbXVBQALkJkyxrT0Q-fvgdeA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b39217-25d3-401d-a1d1-02b3de834bf4/1/NfSbXVBQALkJkyxrT0Q-fvgdeA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:08:c9:ae:63:b9:06:64:19:ca:a2:c8:68:5e:e6:d2:29:64:
8d:b8:8b:74:fd:07:9a:32:20:ef:29:da:ff:21:ec:1e:3e:ed:
0d:2d:c8:12:b8:81:17:b1:3f:1d:75:75:04:f3:1a:be:2b:c6:
16:2a:f0:18:35:82:06:83:a5:b1:09:2d:a4:cf:02:69:a1:2a:
f4:5c:dd:cc:ae:0c:5f:11:42:18:d2:87:75:65:52:04:02:e0:
1f:88:5f:a8:3e:ef:d9:f7:ca:56:e6:ae:f1:54:f9:bf:1f:59:
b7:98:58:8d:d6:38:3a:ec:d7:9d:2b:b8:ab:74:4a:50:29:3c:
3c:d9:12:4b:6b:c9:fd:e2:0f:bc:bd:18:41:2c:b9:dc:95:c4:
e2:f2:6a:e1:1f:8d:a5:49:c4:69:fa:ae:90:b2:41:29:94:c4:
10:23:11:ad:41:30:ca:a1:92:78:d2:5a:7d:a2:03:48:3d:d6:
eb:03:e6:49:78:db:0b:8b:37:67:5b:d8:f3:cc:42:fa:b9:de:
22:e9:09:2f:b8:ed:e0:82:d2:79:a9:ca:46:17:2b:52:f5:71:
51:3f:13:dc:3d:cb:43:14:b3:49:06:45:c9:06:28:01:30:3c:
2e:25:39:5e:1f:8f:62:32:c7:a3:ee:1a:64:b3:a9:e1:5e:cd:
b2:83:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:01 2025 by rpki-client