Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
File: NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json)
Hash identifier: TWdD5g4pPHdWUvRd9XUZJVe4JgSlcpODqSr8+wscPxA=
Subject key identifier: 4B:15:C4:E6:56:17:EA:F6:6C:17:78:42:45:48:0E:73:31:AA:DD:B4
Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
Certificate issuer: /CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Certificate serial: 019A71B8A9D81BF57B34816265A61FF99DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: 1BCvj/a7fEJzROJjK/Yq8z907oyJk3zROTSH9jrGfJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a9:d8:1b:f5:7b:34:81:62:65:a6:1f:f9:9d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=4b15c4e65617eaf66c17784245480e7331aaddb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:ea:9c:31:4a:dd:86:e5:13:da:cd:e7:65:
28:3d:9f:69:9a:3e:84:8f:c6:0e:2c:2d:b4:ee:f7:
79:f2:06:9a:de:09:d7:98:59:87:19:81:16:51:31:
14:8d:9b:27:ff:f5:67:38:23:20:77:d0:ae:3a:3e:
72:f0:f6:f9:a3:3f:fe:33:89:36:c4:8a:c5:fc:c4:
29:84:5c:46:90:05:63:29:1d:e8:b7:49:24:40:73:
91:73:76:46:1a:89:bb:eb:3f:24:a3:9f:7b:af:18:
7d:35:57:1d:f6:95:f6:3f:7b:23:f0:12:a8:56:be:
69:fe:32:fa:14:d7:b0:47:a5:dd:73:3e:d0:46:94:
5f:9d:6e:cf:ea:77:1f:07:f7:b5:69:9f:7f:10:9e:
c3:c2:73:fc:02:41:93:70:7e:7c:85:47:b5:1b:ac:
98:3c:19:05:ea:0f:24:16:5c:6c:07:94:73:22:11:
d3:f6:69:da:4a:e9:95:91:35:11:70:39:28:4f:46:
8c:94:f1:1b:20:7f:b9:60:c9:81:09:cd:1a:d7:fb:
e9:7b:db:34:c5:82:86:cc:8a:82:5e:0e:d1:10:79:
70:54:f6:db:9b:88:8c:b2:c1:70:e6:8c:03:a4:cc:
5c:8d:df:c3:ac:a5:87:e1:72:4e:de:9b:0d:74:b6:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:15:C4:E6:56:17:EA:F6:6C:17:78:42:45:48:0E:73:31:AA:DD:B4
X509v3 Authority Key Identifier:
keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9e:5b:28:d0:d4:9b:b1:b6:dd:de:ca:f0:ff:4a:27:41:1c:
68:90:60:bb:f3:ca:31:36:e5:a2:75:f9:52:5b:4d:49:bf:69:
59:99:54:34:ab:46:13:c9:d0:3b:78:5f:b5:05:fb:96:02:21:
75:86:9c:42:6f:a1:89:a0:70:62:70:f5:df:24:2b:0e:a6:3d:
02:e1:71:e2:62:44:9b:66:76:0d:85:ae:e6:5e:df:2a:87:bc:
1c:8f:ee:e3:52:25:8c:25:4e:04:aa:d0:9a:c9:46:79:2b:91:
db:04:bd:61:85:ca:62:b1:42:16:08:3f:01:60:f1:68:49:90:
3c:ea:1a:bf:49:35:d7:2d:5a:48:e7:7e:87:da:50:4a:73:2a:
f1:79:88:85:78:ea:a7:f1:af:41:43:7c:f8:61:1d:0d:1c:b9:
9c:f6:77:36:3c:b2:76:76:e7:a6:bf:c1:43:8e:d3:da:cc:5d:
ba:7a:57:30:ff:d9:0a:74:32:fd:bb:04:4c:03:d6:e9:9a:b3:
a7:87:73:e2:c3:d9:8a:72:26:22:98:af:11:ba:f1:fe:52:84:
33:26:22:6d:42:90:2b:57:f5:57:88:a0:c5:c4:5b:3f:21:25:
eb:3b:23:fa:55:39:43:ae:06:9c:57:f9:b2:df:a7:bf:f0:16:
81:49:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:58 2025 by rpki-client