Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
File: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft (raw, json)
Hash identifier: KTZElloQhMKSX/3QCiMJVN6tclGhzDqBshx4Nk/29IU=
Subject key identifier: 05:70:9D:86:C2:C9:EB:C7:6B:19:BB:99:20:36:EF:59:93:D7:FF:96
Authority key identifier: 35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
Certificate issuer: /CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Certificate serial: 019A725CF50C626CF5DEA8FA95785B0B3DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
Manifest number: 1357
Signing time: Tue 11 Nov 2025 10:01:25 +0000
Manifest this update: Tue 11 Nov 2025 10:01:25 +0000
Manifest next update: Wed 12 Nov 2025 10:01:25 +0000
Files and hashes: 1: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl (hash: 9RFmJVaco3FqtToPCXmSjdYEotUMZIo4XXCrvTDks2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f5:0c:62:6c:f5:de:a8:fa:95:78:5b:0b:3d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Validity
Not Before: Nov 11 10:01:25 2025 GMT
Not After : Nov 12 10:01:25 2025 GMT
Subject: CN=05709d86c2c9ebc76b19bb992036ef5993d7ff96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c5:cd:05:28:58:c7:8e:86:c6:2d:a8:b4:0b:
18:9c:e4:63:b9:ac:a8:63:3d:59:6f:0b:d9:ef:7a:
45:4d:44:2b:93:0d:ac:01:5f:cb:6b:94:14:be:fd:
ff:e5:ab:2b:fd:52:4e:36:79:a3:bf:9e:18:79:f7:
e3:10:32:4f:a6:72:27:09:61:69:a9:cf:6b:57:92:
0e:57:0e:21:b6:04:ad:78:2d:3e:3f:db:c7:89:34:
8f:28:04:02:e4:3e:25:97:f7:7c:d6:0d:72:7b:bc:
b0:ad:8b:fc:2d:38:0a:39:75:cd:ff:51:bd:e9:f1:
2b:68:c6:84:85:dc:34:2e:6f:6a:91:a3:8e:d8:ef:
4a:41:9c:14:a9:80:fa:9c:87:8b:15:15:3b:a4:ac:
ea:5e:9d:b6:af:6c:3f:60:e6:49:d7:ce:85:21:c9:
31:b7:1a:e7:80:86:2f:a9:cd:02:f6:70:d4:7b:05:
2b:ec:43:2d:f3:c9:81:7f:36:e7:60:33:f5:9b:23:
2b:f4:22:63:d0:d1:4e:f8:02:28:a7:b7:89:80:b9:
c4:ba:54:e9:9c:05:5c:e9:44:eb:9c:56:fd:dd:13:
91:18:45:74:7e:6a:4f:32:aa:69:bc:50:33:d3:7a:
a2:5c:bd:ac:f1:1a:8f:a0:d4:6a:9f:c6:8d:c6:74:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:70:9D:86:C2:C9:EB:C7:6B:19:BB:99:20:36:EF:59:93:D7:FF:96
X509v3 Authority Key Identifier:
keyid:35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b3:72:2f:0a:d4:cc:52:da:54:45:97:ae:d2:3f:8b:23:fd:
4e:bf:a7:45:c1:87:1e:98:25:c1:e1:e3:b6:a0:d4:86:03:ee:
7f:f9:6e:34:71:4b:c1:7d:ff:e2:80:a9:eb:0e:7e:23:59:cf:
bc:b6:b3:ae:2b:c3:9c:67:c5:d1:16:04:8a:49:48:f3:d2:df:
51:db:7d:17:a1:97:6e:16:8f:f3:99:fb:15:78:fb:32:1f:21:
6f:92:63:c4:64:b0:05:f4:62:24:68:d7:0e:3c:75:ee:50:34:
b7:fa:ac:69:ff:65:f6:fe:74:a2:4c:18:49:bd:40:1e:76:4b:
c2:7e:72:40:57:bf:98:57:7c:8e:64:29:5e:28:f4:8c:6f:f7:
a4:b6:f9:68:fb:f8:21:68:3d:48:d4:16:83:52:a0:78:e3:e0:
68:83:9a:c8:2c:fb:0e:20:9f:f4:27:00:48:b3:7e:70:ee:cc:
f8:c0:7d:54:6d:a2:00:0e:d4:cd:dc:8e:ec:a5:d6:42:fc:1c:
7b:b6:40:76:1a:43:24:9f:09:cd:19:9d:82:14:e7:b9:7b:34:
d1:eb:fa:44:0c:b0:0a:e9:89:0b:6a:a7:4c:15:28:b6:88:b0:
66:18:78:fa:3a:38:2b:e3:55:df:9f:6d:fa:d3:b0:e0:d8:33:
de:25:f2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:24 2025 by rpki-client