Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier: +wDkfjf6sl1rR0EWie+wDB8qMu5vxgrgWAS1equwyoo=
Subject key identifier: 6D:F2:B1:DD:6E:89:BA:E6:59:AC:E3:8C:57:CA:B0:76:85:02:47:75
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 019A2855E7BCE4017A99B57D71753BB8B750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number: 1420
Signing time: Tue 28 Oct 2025 01:01:49 +0000
Manifest this update: Tue 28 Oct 2025 01:01:49 +0000
Manifest next update: Wed 29 Oct 2025 01:01:49 +0000
Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: 1xz5ducHrSMhGikOdfDMnNDs4h+Tk6t1I7q7DVOmf9E=)
2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:e7:bc:e4:01:7a:99:b5:7d:71:75:3b:b8:b7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: Oct 28 01:01:49 2025 GMT
Not After : Oct 29 01:01:49 2025 GMT
Subject: CN=6df2b1dd6e89bae659ace38c57cab07685024775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5f:f7:3b:23:ee:5f:32:f0:a5:ca:45:9c:d9:
49:b2:43:1c:54:8a:0a:4e:b5:bf:42:52:c5:79:13:
9a:9b:9c:c2:b3:50:11:ac:b5:6f:4f:61:15:39:13:
3e:11:1e:4f:a4:c2:9f:73:91:30:86:8a:a3:b7:bd:
15:f7:b0:3e:cc:42:a8:c3:0c:69:38:f0:81:e9:d5:
ba:e0:7e:9f:cd:2d:23:6e:38:8f:9b:c5:29:5f:7f:
c4:81:01:53:5d:d5:56:8c:db:e8:1f:da:d5:cf:26:
93:41:06:ba:74:09:e7:b4:64:2a:7e:9f:19:7d:93:
ed:bf:55:83:2b:3d:dc:4e:d9:10:74:00:5a:fd:25:
06:22:82:c0:fa:52:7c:b3:87:85:55:3c:da:0d:60:
59:7a:55:ac:ba:d4:ec:03:38:60:ef:17:a4:dc:fc:
cf:39:cd:27:be:b7:24:2c:2c:54:72:92:9a:62:19:
cf:24:43:2f:d9:09:78:57:63:d6:6a:10:6a:5a:35:
a5:02:9b:36:15:45:c4:dc:aa:f0:68:14:a5:6b:03:
0c:07:c5:84:98:40:58:64:70:a7:50:99:7e:70:4a:
a1:1d:ec:8d:8b:1d:65:15:e5:20:d4:c5:70:8f:04:
42:4c:1b:5c:62:6d:39:27:ce:9a:b0:73:11:ae:a6:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F2:B1:DD:6E:89:BA:E6:59:AC:E3:8C:57:CA:B0:76:85:02:47:75
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:04:5c:19:cd:29:04:ad:ee:2d:64:27:a4:72:54:6c:27:b9:
4b:e6:c8:17:af:b1:fe:db:2e:6e:c4:fd:49:d5:10:d9:3e:36:
fa:81:61:58:90:49:9b:fa:1f:ce:ed:e9:3d:d7:70:32:bc:6c:
39:1c:a5:ac:80:e8:94:b0:dd:ed:db:cb:05:7c:c3:00:1d:a9:
f3:a4:bd:32:5b:0e:6e:c7:e1:47:12:d1:c3:c4:02:c5:8f:d0:
b4:71:0e:ec:e1:d3:f5:5a:af:03:51:f6:b5:c0:6e:a4:5e:01:
01:20:35:2c:46:3f:4d:9c:62:0d:27:e7:da:b7:4a:63:de:58:
4d:dc:94:b2:68:66:66:ad:9e:59:27:f2:5c:3e:ee:88:53:af:
67:22:9f:30:df:24:87:cf:e5:30:24:d1:46:3c:3d:98:88:59:
9c:e1:72:49:a0:6c:95:9d:1b:9d:b6:72:9a:af:41:ed:67:20:
aa:29:2d:5e:12:df:2d:69:ca:52:b8:48:ad:ae:41:f9:28:71:
cb:ef:04:03:14:c5:76:1b:8f:60:27:2e:31:bd:da:51:51:0e:
fa:09:a5:cc:44:d6:75:4a:92:d0:ab:9b:af:c3:a5:80:d0:9a:
43:14:30:04:96:af:35:52:08:b8:fa:38:b4:0c:73:37:33:58:
5f:92:68:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:36:15 2025 by rpki-client