Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: qCXGxc+fmkWDKo9SA6kICZy+XvxjnT2Sj1PavFViku8=
Subject key identifier: 58:B4:83:6E:03:96:4E:95:4F:74:8D:8D:22:C6:1A:64:E9:6C:97:A4
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 019A1B3DA13A3641380CEDDF112DE2DC590D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 041D
Signing time: Sat 25 Oct 2025 12:00:14 +0000
Manifest this update: Sat 25 Oct 2025 12:00:14 +0000
Manifest next update: Sun 26 Oct 2025 12:00:14 +0000
Files and hashes: 1: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: WR9sDbJls42U6rvlwrEDAcUMvv7wEFTBH4ePQ0nWeL4=)
2: cEQi14kKuKL4ZWozyPewcuSD5kQ.roa (hash: AQa4zimuZDO+7ACyM4KJjx7KQcRwuoNCJUovJ5T5Vck=)
3: xGHkCj7QXTK91-IzTTuEVkNvzos.roa (hash: jRuba4ysEPA//Moy/YkHQHxGDPSKQ/jX38S+l3o0ZrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3d:a1:3a:36:41:38:0c:ed:df:11:2d:e2:dc:59:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Oct 25 12:00:14 2025 GMT
Not After : Oct 26 12:00:14 2025 GMT
Subject: CN=58b4836e03964e954f748d8d22c61a64e96c97a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:05:ad:64:0c:41:3b:f3:3c:5a:6a:c2:ba:
be:02:70:25:29:1c:30:1e:4b:59:3b:13:4c:09:b4:
e2:fb:62:8b:47:ee:ca:4d:b3:f6:49:8c:7e:5f:b6:
bf:d9:c1:f4:a3:74:0c:a1:15:da:68:2e:0b:0d:65:
03:d1:0c:f4:49:c1:83:0b:61:b8:4f:7b:49:79:85:
16:0c:5e:dc:e4:1e:ad:0e:8c:ab:0e:2f:33:cc:d9:
df:f8:b7:20:37:30:7e:63:1b:a4:48:cf:25:b6:74:
bc:08:4b:ac:74:9e:79:06:c1:42:93:32:16:91:02:
90:2d:c5:e9:a5:1c:7e:f6:c4:d3:04:49:33:dd:a8:
d5:80:73:1e:fa:d1:34:d9:68:87:75:44:ad:c7:ce:
ff:fb:23:51:18:b3:9b:dc:99:6e:37:4f:59:17:07:
9a:b3:71:1c:fa:2b:b2:3f:dd:fe:e5:5d:d7:03:54:
62:8d:70:33:f5:88:02:dd:4f:df:09:f0:f5:9f:03:
2d:5e:88:72:b7:37:43:24:08:62:ba:1a:79:94:f6:
ce:b6:0a:ab:5b:c1:a9:24:59:2d:62:bb:d3:aa:c4:
d2:a3:70:c5:b3:10:d7:fd:b4:f2:f8:ed:61:16:b2:
58:7f:0a:c4:c6:aa:32:9d:f9:ab:68:2e:7f:5a:a6:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B4:83:6E:03:96:4E:95:4F:74:8D:8D:22:C6:1A:64:E9:6C:97:A4
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b1:a7:61:8b:1e:88:3e:75:3f:98:84:74:5c:42:e8:38:fb:
d6:54:ab:6e:8a:1b:8d:ad:2a:06:fe:e1:2c:3b:48:23:5f:60:
8c:0f:cc:30:89:0c:e1:b8:b5:08:ed:f0:1e:e2:a8:d3:40:0a:
66:9c:1d:31:78:d9:fd:14:09:ba:67:bd:ca:7d:b9:d0:ff:b9:
a3:38:5a:1a:1e:75:8c:78:07:b6:42:05:f5:24:8d:56:a2:ae:
54:11:f1:fa:22:44:40:b3:75:7f:30:1c:8a:34:08:09:c8:b9:
38:18:9c:66:b1:e5:d6:a2:cc:e6:9a:ff:dd:87:b0:f9:f1:1a:
f0:a6:e5:9c:b1:1f:c7:cf:d2:3c:d9:5f:2f:07:8e:b7:e3:f6:
28:9e:7a:ef:cc:48:a4:d1:d2:e0:a8:4d:07:8d:9f:55:7b:6b:
8b:e4:30:d7:2b:aa:2d:7a:fd:5d:8e:ad:54:22:33:f1:8f:a9:
39:c5:68:f3:3a:8c:0c:08:57:38:9d:d1:4d:df:a8:1f:fc:84:
bf:0d:4e:20:af:e0:8b:63:a8:f2:4f:63:51:eb:67:be:92:d7:
90:6d:54:38:19:a5:73:ac:50:1d:b4:23:23:2c:fc:b3:e5:7c:
49:9d:dc:de:ed:23:54:3c:41:78:69:73:fd:3d:1d:97:9e:db:
78:24:7e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:07 2025 by rpki-client