Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
File: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft (raw, json)
Hash identifier: vWVx6E/3fD+rVW4RaFRif/oLZeNM+mP6bnS/P6g3X3E=
Subject key identifier: C3:B8:4E:19:53:EF:69:B7:25:B3:C8:16:8E:DC:C4:A3:84:9D:B2:B9
Authority key identifier: 35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
Certificate issuer: /CN=35ced0549f5b35dafa74d90b0468200178545d74
Certificate serial: 019A7225DF5AD95B63316155CAE17423AEEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
Manifest number: 023D
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl (hash: hIr35XIU6FF7gisiJdh5cP0c1SYD4nLoaIRaterE3EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:df:5a:d9:5b:63:31:61:55:ca:e1:74:23:ae:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ced0549f5b35dafa74d90b0468200178545d74
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=c3b84e1953ef69b725b3c8168edcc4a3849db2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:b0:01:30:01:50:86:c4:2b:a0:a7:15:a6:
f0:ef:75:cb:49:c5:7a:1c:8f:0b:0e:46:8a:b3:05:
f9:3a:4a:46:d4:2a:42:6d:31:e1:65:07:f8:be:ce:
cb:39:5c:24:f1:51:1f:fa:0e:5c:eb:00:88:39:11:
f0:1b:0b:5c:f3:34:39:24:2a:61:7e:7a:7a:7d:38:
ec:a4:63:66:41:c6:ed:b8:c1:b4:1f:fb:59:f6:ff:
54:a4:5f:ae:3b:8a:90:87:56:1f:8d:0b:f9:91:fd:
b9:50:ef:4c:78:ec:95:18:3c:f3:5c:95:0e:b9:a2:
4c:b7:9d:4e:cf:66:4f:7d:24:b9:b5:07:0c:d7:85:
ef:9b:fc:84:ef:9d:9f:c7:41:80:98:ad:1b:a3:84:
a5:dd:db:ed:83:a6:d3:e1:d6:55:1f:79:8f:78:96:
1e:c6:9c:86:e2:c1:c1:62:5a:31:f8:e2:0d:f0:59:
14:29:30:53:0c:ea:e7:bd:44:cd:94:9f:4a:70:21:
c9:8e:96:a6:24:c6:50:93:eb:08:dc:b4:77:0e:a9:
e9:ce:42:6b:24:bc:f7:da:a2:3a:4b:c9:7a:c6:17:
50:43:57:00:99:7e:ea:ca:37:12:b1:b1:3a:67:ac:
f3:5b:cf:43:7a:b1:19:10:ba:1c:a7:52:f6:a8:8b:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B8:4E:19:53:EF:69:B7:25:B3:C8:16:8E:DC:C4:A3:84:9D:B2:B9
X509v3 Authority Key Identifier:
keyid:35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3e:c5:f0:4a:a1:85:a1:6e:a9:75:b0:c2:88:cd:e2:64:08:
00:f1:07:b5:5d:cd:ed:f4:ef:74:bf:00:d8:0f:59:1d:6b:3c:
d0:0d:08:08:63:ed:29:e8:57:fa:42:73:7a:d4:13:26:2b:f9:
1c:c9:88:c4:0f:60:84:40:28:93:81:69:57:ca:1e:29:f8:8f:
d7:9a:6a:f9:58:f3:c3:74:bd:5b:61:b0:e8:78:18:0c:37:76:
fb:1f:0d:93:6d:0f:4c:1d:75:22:2a:54:5c:2a:26:c7:80:b6:
e6:58:d0:f3:13:d0:ea:e6:a6:83:53:85:c0:04:51:8c:b8:16:
17:f2:df:5e:a0:96:c1:15:27:54:8f:15:df:7f:1f:b3:12:ff:
8c:35:f3:8d:7a:a5:42:67:4c:8b:48:4c:91:f7:4c:11:d7:9b:
8a:2c:23:72:23:1a:55:c2:79:ff:8f:35:0d:75:85:d3:e5:66:
43:6b:47:bf:e7:b7:57:1f:31:34:d3:0d:1f:e1:ea:e8:77:39:
47:c8:c7:fa:15:00:59:17:cb:76:ef:9e:43:a2:2b:b9:d9:1d:
37:be:c8:12:c1:8d:5b:a6:a1:00:e6:1b:fa:6b:a0:07:d9:25:
f7:ec:c4:7b:35:57:72:e9:18:ef:af:91:af:c7:65:40:60:1c:
f0:5d:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:48 2025 by rpki-client