Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: AXL6rocI9a77aYTCEzMfu+d7AcbWnj2kLW7ICQPzjKs=
Subject key identifier: 1C:F5:CB:5F:69:83:0C:CD:DA:5B:58:BF:95:C4:D1:FD:F9:D8:26:CC
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 019A13F1EF7BAB0779643D098CE1458D12FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 0FB0
Signing time: Fri 24 Oct 2025 02:00:13 +0000
Manifest this update: Fri 24 Oct 2025 02:00:13 +0000
Manifest next update: Sat 25 Oct 2025 02:00:13 +0000
Files and hashes: 1: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: em1TIqQC7MKy4ruH0duqNtMe+G3cpb/PierD868VV+0=)
2: pD83cCgQmkTqmybL4Qe3QLOSsJI.roa (hash: Dc3wCA5yOgFeVk3/J+FU53rFpNzosD7EmU4+ejzw5Hc=)
3: snr-oR1drnGUDE12am2Oc1SmmAE.roa (hash: ypW1nfFwE2qpQdtfuVLzUTdrQHGTdbKiKTowycflNh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:f1:ef:7b:ab:07:79:64:3d:09:8c:e1:45:8d:12:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Oct 24 02:00:13 2025 GMT
Not After : Oct 25 02:00:13 2025 GMT
Subject: CN=1cf5cb5f69830ccdda5b58bf95c4d1fdf9d826cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:8e:61:96:f1:3a:6e:32:5e:dc:47:bb:3e:
61:35:c6:1d:74:ae:a9:cb:1c:d9:9e:c9:2d:0d:d9:
a9:75:3e:4a:96:6f:52:9a:0e:f8:c1:39:68:0d:4d:
e5:9c:56:71:f7:31:04:3f:33:df:2e:04:12:bd:50:
e5:06:ab:66:99:56:ed:99:8b:8a:3f:6b:52:2d:ca:
ec:77:ed:f2:f6:31:95:94:b1:69:84:ba:fb:d3:39:
84:03:01:50:72:d1:b9:51:c6:1f:02:8d:44:c3:55:
2d:15:3f:af:19:ec:52:8c:69:82:28:94:ce:c7:2a:
ab:03:77:2e:37:78:26:e3:91:33:ea:5e:fe:60:32:
9a:0a:9d:19:71:09:37:64:8c:a9:81:45:8f:33:55:
93:34:e4:de:bb:15:d1:f3:24:fc:1c:7c:cf:a7:a1:
57:45:62:c4:5d:a5:8a:5d:24:6e:6f:88:2b:4c:d8:
00:7d:ec:d9:1e:36:35:20:1f:6e:6c:2c:c4:de:06:
0f:4d:7b:dc:fe:b2:22:f1:09:d0:7f:fb:f7:c0:6c:
22:05:c1:82:75:d6:ad:a6:d6:b5:00:1c:5c:1b:67:
f9:46:42:ae:ae:3e:6e:36:e0:0c:e6:b2:e3:67:f4:
0e:b5:d4:f2:e9:d6:19:a8:84:c2:41:12:d6:72:fd:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F5:CB:5F:69:83:0C:CD:DA:5B:58:BF:95:C4:D1:FD:F9:D8:26:CC
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:88:44:84:c1:17:8a:82:12:b0:19:44:25:c4:bd:02:25:9c:
e2:0b:27:3b:97:95:60:34:19:18:cc:53:aa:8b:a1:15:df:aa:
08:c2:08:b7:4d:1b:4e:be:bb:a1:bd:1e:5b:87:c8:73:2e:72:
9c:8a:3f:12:92:ed:fb:fd:f5:b3:9d:b1:8c:fe:cc:e5:26:d2:
e2:c6:f7:d3:70:c0:cc:27:b2:e1:ab:47:b0:a3:31:94:1e:89:
03:cc:38:4c:4b:1f:2c:f9:67:e0:29:ef:11:02:7e:cc:9a:c9:
4a:47:e5:13:05:6c:e8:54:e3:94:ee:b3:4d:ef:18:f6:10:23:
dd:9b:04:12:d1:85:68:ab:f7:df:6a:7b:47:1a:eb:43:e0:06:
c9:f4:84:6f:88:34:96:b7:6c:a0:2d:22:f6:bf:2d:2a:0f:90:
00:a8:73:ff:90:29:87:0f:29:18:07:e4:7b:ba:56:94:c7:7f:
e7:d7:7f:b8:89:44:b2:7b:f4:9b:97:fa:8f:13:4b:aa:6a:9a:
88:6c:bf:37:70:fc:d4:1f:6e:ec:50:04:e7:55:d3:e3:65:1b:
6d:7b:ca:0b:09:66:7f:63:e2:2b:72:f4:9c:0d:d9:42:ef:8c:
52:bd:d4:f0:54:dd:3a:6c:b2:bd:27:2e:25:42:5e:87:67:b4:
18:4d:2e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:31:46 2025 by rpki-client