Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
File: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft (raw, json)
Hash identifier: ElE8EsszaLpeHWgoRmE+ogf7f0rWsoBft7jHIpuQWIY=
Subject key identifier: 76:E9:83:54:82:B5:63:E3:53:2B:5A:C2:CF:0C:CC:F7:06:DD:8D:1C
Authority key identifier: 35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
Certificate issuer: /CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Certificate serial: 0199FE47459AAA1D5B11A684948393C4B4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
Manifest number: 04AE
Signing time: Sun 19 Oct 2025 21:01:47 +0000
Manifest this update: Sun 19 Oct 2025 21:01:47 +0000
Manifest next update: Mon 20 Oct 2025 21:01:47 +0000
Files and hashes: 1: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl (hash: X36XmGcwS6Kp5mskLjbfRwFSg6Iq54y7XN60YwB/nIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:45:9a:aa:1d:5b:11:a6:84:94:83:93:c4:b4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Validity
Not Before: Oct 19 21:01:47 2025 GMT
Not After : Oct 20 21:01:47 2025 GMT
Subject: CN=76e9835482b563e3532b5ac2cf0cccf706dd8d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:1b:fd:74:0a:0a:09:57:bf:a0:3b:b2:f3:
0a:58:84:ee:ab:b5:9e:bf:5a:ba:8d:b5:d0:76:f3:
2e:84:7f:90:21:45:09:4a:37:55:84:71:5e:ec:5b:
c0:13:1a:1f:1a:09:aa:ab:35:a6:72:11:da:bf:ff:
f4:74:56:bc:d5:92:19:5f:f6:3a:d9:20:1a:52:07:
98:22:f4:c2:74:1c:57:e9:42:aa:c7:81:00:02:c2:
df:41:0a:4a:f3:6f:d5:06:f2:6e:d2:bc:f7:dd:ab:
a2:05:cb:fb:20:d5:fc:55:24:52:7d:25:8d:c0:a0:
5b:f3:21:57:11:a5:e8:47:c7:ae:c7:a8:68:3b:1d:
18:09:ee:37:5a:8c:bd:52:d8:3d:c3:1d:66:cf:7c:
63:e2:00:fa:ea:e7:c6:7a:7a:75:0d:05:4f:82:41:
9d:5f:59:4f:6f:24:ce:c5:68:da:7f:16:e9:74:19:
0e:37:90:d1:cb:e7:ba:a3:3d:d4:5b:9d:06:54:2e:
2c:6f:ff:53:09:4f:2d:14:4b:38:74:a6:e5:14:52:
d0:f6:d2:70:d4:95:f8:7d:04:24:ea:36:fe:23:dc:
38:71:5b:fb:76:48:49:c6:cf:4f:05:f7:80:57:bc:
3b:b0:c0:59:3e:6b:d0:aa:e3:7b:df:12:bd:66:41:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E9:83:54:82:B5:63:E3:53:2B:5A:C2:CF:0C:CC:F7:06:DD:8D:1C
X509v3 Authority Key Identifier:
keyid:35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fd:6b:d1:4c:af:bf:c5:a8:13:b1:7e:94:f3:aa:41:83:14:
a0:5e:a3:b7:1a:23:9d:51:73:ca:9f:73:a9:b5:ff:db:50:30:
c4:9d:3f:5d:59:0d:5c:fe:57:d4:27:a2:a3:7b:8c:72:70:90:
a3:0f:dc:83:6c:0e:d9:1e:5d:87:72:d8:65:17:43:3e:a7:57:
56:bb:77:4a:b4:4e:7e:8f:e5:0e:06:fd:19:f2:a4:d9:ca:6e:
54:c8:62:2a:eb:b7:c2:0b:9a:ec:d1:5a:7d:a3:3e:64:5f:9a:
b7:d4:dd:c1:a5:bb:01:32:41:05:8b:3e:28:9b:c7:49:54:a6:
e3:f3:29:50:81:7a:d9:79:3c:69:20:a3:c0:b7:4c:dc:c5:28:
4b:f6:6e:f4:7e:79:95:cd:2c:e8:08:82:e6:2c:67:7b:f8:61:
0b:7f:80:7f:1a:be:e2:7d:42:74:e1:eb:4d:c4:7d:4c:8c:12:
5a:ae:18:00:5f:26:7a:9a:83:9f:61:8e:ec:e3:ac:8e:e6:c8:
0c:11:48:de:ec:6e:9d:40:46:bf:4e:aa:af:48:2f:40:54:84:
27:69:44:ae:28:13:50:f0:24:6c:4c:a7:a4:55:59:8b:bf:3f:
7f:80:0a:9b:48:a1:34:d7:4c:75:29:76:dd:75:66:9b:73:3a:
0f:b4:e5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:49 2025 by rpki-client