Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
File: NkITiw7v_lajLMuqWNb_5u3D8p4.mft (raw, json)
Hash identifier: OCNPXnU2lZCsOhmfv5HiArZCcdvoDcRG68izSgGSvZI=
Subject key identifier: AF:01:83:79:E4:52:97:B0:8D:94:99:0E:2C:17:87:45:80:84:75:99
Authority key identifier: 36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E
Certificate issuer: /CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e
Certificate serial: 0199FBEB8686884537FEA09F3558E33A7C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
Manifest number: 05E6
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: NkITiw7v_lajLMuqWNb_5u3D8p4.crl (hash: 4CzYFX57zVipXTIIPfN55pB4/WkX061Nvo3sz3uaGPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:86:86:88:45:37:fe:a0:9f:35:58:e3:3a:7c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=af018379e45297b08d94990e2c17874580847599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:82:41:4b:b3:07:10:71:c2:82:4d:f3:f8:
e9:02:eb:fe:ea:79:0d:82:a0:d8:5e:9c:08:b1:50:
1d:83:36:02:22:70:fd:c3:68:2f:98:db:a2:92:da:
5d:8c:fa:48:9e:29:0b:c2:91:b7:2b:48:bd:21:d3:
5c:4f:7d:01:99:9c:8a:f5:2e:87:04:87:0b:98:b2:
3c:79:b5:31:73:04:04:de:74:23:bf:6d:d2:22:cf:
04:34:bc:ab:09:21:1a:73:36:3b:3e:b3:92:85:86:
63:32:b0:ad:ed:fd:4c:3a:a2:fd:e1:55:c0:99:34:
c9:30:6f:7a:a9:c1:e8:ef:bc:6e:bb:74:e5:8e:86:
fc:c6:4e:98:ee:cd:e0:40:cb:66:7d:80:05:a4:fe:
60:77:1b:11:27:59:32:d1:b3:ee:52:34:6d:57:e4:
2e:89:4c:f8:75:f2:14:71:03:12:b8:85:a0:59:b8:
37:85:bf:92:2a:9d:d1:f4:6d:35:d9:7e:f4:96:4c:
8e:3c:94:cc:69:e3:94:f3:10:a3:06:57:08:eb:b9:
a8:44:44:ce:a0:63:c4:05:00:9c:d7:8d:3e:56:24:
ff:17:91:69:7b:bb:74:f1:e8:ba:de:0c:15:a7:a6:
bc:15:cb:37:01:45:6c:88:54:17:7c:e9:18:fb:30:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:01:83:79:E4:52:97:B0:8D:94:99:0E:2C:17:87:45:80:84:75:99
X509v3 Authority Key Identifier:
keyid:36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e8:94:42:82:2c:9e:bc:55:15:e2:2a:84:0a:58:67:7d:75:
b6:51:25:f7:e5:ca:ac:d0:fd:e9:11:b4:f4:82:9e:06:09:a6:
00:9a:48:77:46:02:62:32:23:2a:13:de:88:8c:3b:23:24:90:
67:57:b3:01:5d:bf:6b:da:c6:fb:9f:51:18:65:17:d1:0c:d5:
df:b0:c4:42:dc:5e:7d:8e:44:3f:6d:c4:18:57:2a:c6:d6:2e:
db:ec:33:c1:39:1b:f7:98:22:1f:88:e1:e2:4e:0e:55:c0:44:
19:1d:95:18:a8:b7:5e:a8:95:f0:e4:2d:14:61:ab:e6:0f:fd:
8b:bd:ae:ba:dc:9b:ff:ae:e6:88:ba:87:d6:3f:5a:82:98:c8:
ef:df:81:83:89:64:4e:e4:04:56:ce:fb:3e:52:b4:db:82:7b:
21:1e:31:2a:ce:81:86:89:e3:3b:00:c0:27:24:5b:05:19:b5:
27:ba:1e:ed:e0:56:bc:98:db:96:b9:6d:b1:15:01:01:68:9b:
2e:4c:3a:51:ad:c8:b8:cf:f0:6f:dd:72:3e:3d:16:43:4e:5d:
cf:e6:2d:62:a7:93:97:3f:25:19:4b:0b:2c:2a:e5:aa:81:89:
23:e9:93:b4:a9:38:34:fc:a5:f7:d7:d6:46:95:db:eb:7a:cc:
6a:c1:79:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:15 2025 by rpki-client