Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
File: x_nvdcTr2Q5NisU39pPdM6xIVko.mft (raw, json)
Hash identifier: zyi67Kc8eDx1IgHXSFdK8W7ktbjFTwYECljF04hlXAE=
Subject key identifier: 87:19:C6:A1:19:E7:64:F4:CA:EC:4F:85:78:28:D7:31:B9:AD:0D:BA
Authority key identifier: C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
Certificate issuer: /CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Certificate serial: 019A71B9816BCF9D1FED32E0FE6C30D12A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
Manifest number: 01D5
Signing time: Tue 11 Nov 2025 07:02:53 +0000
Manifest this update: Tue 11 Nov 2025 07:02:53 +0000
Manifest next update: Wed 12 Nov 2025 07:02:53 +0000
Files and hashes: 1: x_nvdcTr2Q5NisU39pPdM6xIVko.crl (hash: Ur+YtMm8HJftlYP0APNJ7RS6boegzn7uR9EDK093IDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:81:6b:cf:9d:1f:ed:32:e0:fe:6c:30:d1:2a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Validity
Not Before: Nov 11 07:02:53 2025 GMT
Not After : Nov 12 07:02:53 2025 GMT
Subject: CN=8719c6a119e764f4caec4f857828d731b9ad0dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:dd:d6:eb:d2:85:d0:09:ff:de:34:38:16:
22:76:14:dc:13:7b:50:67:d9:25:46:85:18:b5:45:
bb:37:be:7b:00:9d:58:c3:6a:b4:1b:43:c3:9b:25:
e0:76:3a:41:33:8b:bb:a0:e9:94:5e:cc:25:9c:33:
2e:36:67:80:09:48:38:cd:04:70:e8:93:6d:af:79:
8b:ee:3c:41:88:b6:95:ad:ca:67:83:f7:38:44:0a:
66:86:c7:98:df:07:9e:10:a7:3a:34:63:59:0f:4c:
e2:3a:5b:34:08:f1:e9:84:9e:7d:7f:1c:e7:2f:6a:
64:de:16:e2:d2:ea:ec:54:fe:ce:0f:d5:a5:05:bf:
f9:51:6d:c8:16:83:8b:fe:26:03:f1:32:ee:c0:fd:
07:f7:bb:13:08:f8:cf:18:73:41:0d:a7:aa:28:6d:
69:00:17:fa:30:b4:fe:18:e8:ec:f9:4e:5e:69:5b:
c5:ee:02:db:f0:e9:cf:4a:dd:c2:07:d7:a1:1c:e1:
07:97:dc:ed:43:65:1f:bb:e6:03:bb:55:0c:3c:e1:
14:e6:71:26:ad:bf:18:65:36:f2:8e:7e:82:b5:6b:
63:55:15:97:29:15:c1:fb:7b:22:26:ae:31:bd:51:
93:ea:60:4b:0d:8c:cd:e2:79:a0:13:d4:c3:86:be:
15:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:19:C6:A1:19:E7:64:F4:CA:EC:4F:85:78:28:D7:31:B9:AD:0D:BA
X509v3 Authority Key Identifier:
keyid:C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:73:22:e4:f2:c9:31:22:49:67:c5:0e:a3:e2:4f:4a:63:27:
1a:43:58:71:fc:b6:c3:09:d1:16:d9:3a:b4:45:b0:e3:f3:af:
6d:91:ac:1d:d8:92:15:9d:3e:dd:32:14:3c:ba:6d:bd:02:6c:
8f:ec:ba:bf:89:2c:91:8e:7f:2a:b1:79:9f:8a:7c:fe:77:14:
bd:44:d5:af:96:7e:90:ee:6f:b9:d0:d8:6e:e8:cb:01:ae:30:
12:20:67:ad:cd:dc:d5:9e:f9:04:d0:0e:33:0c:23:46:9c:4f:
95:4e:c3:a4:43:84:ca:f4:bb:68:7d:32:f4:eb:28:20:6f:99:
1a:bc:d3:0f:12:f8:d1:6b:82:94:11:f6:66:2a:8c:f5:dc:6a:
ac:35:17:d2:ff:43:39:d3:87:2b:20:7e:1b:b2:c2:74:c2:75:
fe:f6:61:5a:53:12:92:a4:f6:48:2f:2d:aa:af:4f:f9:3c:b8:
a1:41:69:4d:e9:75:60:59:a2:0f:73:79:57:6b:29:00:15:17:
5e:32:47:cb:66:fc:5e:38:38:5e:10:36:61:a3:f3:c1:50:42:
bc:53:ab:b1:3c:49:0b:18:3e:2c:ef:af:6b:ec:1e:5e:cc:e8:
42:af:00:5d:9e:59:23:c2:27:08:af:bf:58:27:f9:9a:de:ca:
4c:c1:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:56 2025 by rpki-client