Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
File: NoEciv-vsKwfX39v97ZLtwNGRX0.mft (raw, json)
Hash identifier: tAFPXGw/Eaj3z1ZRNVXbYtlXTwEU188u8qZyLiS1dgQ=
Subject key identifier: 36:BD:CE:F3:01:A5:F9:DE:7F:55:42:C3:56:A0:F8:C1:B6:9E:89:51
Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
Certificate issuer: /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Certificate serial: 019A7225C85976372025C641B3B849E4C28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
Manifest number: 08D0
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: NoEciv-vsKwfX39v97ZLtwNGRX0.crl (hash: wTT4OZf+qRT3jkFKE2XCYRSRs2EP1Wg4JScBzzfaQqM=)
2: sKsIMzPD584L0VxOKj3vB4o7BOo.roa (hash: rcaZ/4MvSYNPC9u83vkkXq81Cjv7cMoYe82DYi6JocE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c8:59:76:37:20:25:c6:41:b3:b8:49:e4:c2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=36bdcef301a5f9de7f5542c356a0f8c1b69e8951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:3c:11:fa:17:ed:1b:bd:cd:7f:54:a7:56:
e5:e8:ad:ca:1b:84:f3:33:7f:55:15:a7:5a:c6:fb:
41:23:30:4a:0e:54:d5:f7:d9:8e:18:6f:99:f1:01:
cc:cb:61:87:9d:2f:7e:63:03:c7:14:bd:a2:a1:bf:
20:a4:35:02:29:87:5f:8a:60:55:ff:1c:8c:4e:0f:
ac:6b:34:69:9a:0f:03:01:c2:bd:2f:be:5e:e0:f5:
f9:14:fe:b6:e0:15:3f:82:86:2c:4c:b7:25:e1:c8:
55:ff:7d:5a:18:dc:c0:b1:ca:84:21:e7:2d:26:e3:
83:d7:0c:d8:dd:02:b4:98:92:7f:49:dc:49:e1:42:
01:b9:85:ef:1c:1c:96:86:61:bb:35:70:05:94:6e:
97:8d:39:c4:53:4b:3c:f4:bb:f4:cf:3d:40:cf:04:
d0:60:a5:1c:c5:c0:22:82:25:50:4c:cf:bd:d2:77:
53:f2:27:77:e8:4e:e5:6c:fd:f1:d1:58:2f:be:da:
18:6e:df:c2:6a:65:3e:03:4a:e1:c6:71:f6:1a:93:
e2:38:a0:f1:54:d9:24:4a:5f:e6:39:98:dd:67:2e:
d3:8f:64:fa:0e:5c:e0:35:e6:2c:88:c8:5a:ef:3b:
3e:b3:f3:2c:41:10:4c:94:1a:43:5b:e9:88:a8:45:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BD:CE:F3:01:A5:F9:DE:7F:55:42:C3:56:A0:F8:C1:B6:9E:89:51
X509v3 Authority Key Identifier:
keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:42:eb:93:f7:2a:c1:2b:fd:e8:d2:dd:e5:6f:53:51:e2:ea:
b5:cd:eb:fb:8f:e7:6e:7d:04:c0:b7:3b:31:b1:f1:91:50:76:
c6:79:d2:b6:2f:71:ee:2e:ae:0e:a5:87:81:58:b6:09:61:fe:
ed:dc:ce:ed:66:d6:25:09:c0:a5:ba:de:97:5d:94:53:10:f6:
51:6f:39:f9:bc:af:50:40:c2:f1:7c:8c:f6:37:26:1c:fa:f9:
72:ea:3c:97:8e:b6:30:17:d0:fe:76:db:a3:a3:35:0b:62:1d:
50:ca:17:de:57:cc:1f:f3:1f:ba:c9:b7:a4:d2:3e:c0:6f:47:
47:d2:80:c4:bb:6f:af:dd:b0:5b:cd:dc:f5:0b:a9:d1:a5:11:
7b:bf:f1:11:09:e1:95:ba:9c:ca:73:5c:b5:4b:f9:69:fc:09:
c5:58:c1:09:c7:d5:29:e9:28:c7:ed:29:28:fd:ed:97:e4:e5:
0e:aa:e6:79:de:ea:c9:fe:81:96:71:c3:e2:1e:64:1f:83:43:
3f:2d:77:0c:e9:31:78:46:ae:b2:6d:20:c1:e3:91:38:0a:a8:
c3:e8:e0:bc:ab:21:5a:21:9b:8b:22:89:a4:e1:78:82:da:67:
e9:49:d1:ff:44:7f:d8:7e:17:95:4d:b0:19:9d:37:2d:3b:14:
cf:44:49:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:46 2025 by rpki-client