Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
File: Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft (raw, json)
Hash identifier: YwRmLwerfPlbowdoU8sJRsAw+n4TcN8boJmjg7dpFJs=
Subject key identifier: 54:4C:C4:2D:C2:25:79:EB:75:C8:54:FE:78:60:F1:01:56:D8:0A:0D
Authority key identifier: 36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29
Certificate issuer: /CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
Certificate serial: 019A71B8D070FDE34076DDCC6EA9603675F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
Manifest number: 0DB2
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl (hash: gbvT7nQfG6MCuoRkA93UuwXYRT5e0+w9fs2GTfZRjzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d0:70:fd:e3:40:76:dd:cc:6e:a9:60:36:75:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=544cc42dc22579eb75c854fe7860f10156d80a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:50:63:82:12:96:1d:71:45:7c:20:06:bb:
fd:90:08:22:f3:1f:a1:1b:45:e5:98:1b:30:18:91:
ef:84:3b:5c:ec:47:82:86:36:a8:b0:7e:54:35:74:
a2:d2:a8:4d:70:2b:3f:c1:d0:5b:da:48:3a:72:1a:
44:23:b9:97:a4:83:aa:dc:45:38:f4:6a:96:fe:a0:
d5:52:7f:b7:65:44:e7:55:c4:88:9c:71:c3:73:32:
b0:64:39:82:e7:4d:af:8b:f5:9f:63:fd:3e:d8:dc:
6b:f8:3d:7e:8f:7f:bf:e7:3c:f7:5b:90:38:02:ac:
9f:2c:e9:bb:20:ba:1e:86:91:a0:14:7f:25:ab:c6:
9b:3d:89:28:37:17:00:d4:cc:f4:c3:b7:75:59:d0:
56:5b:2d:b2:2f:a7:9d:34:60:e2:20:86:ae:38:b0:
b4:06:5c:e4:1a:53:32:ad:69:a0:74:51:dd:1c:cf:
0c:19:12:3a:17:f4:d6:e6:52:06:3b:da:04:4a:53:
c0:3c:31:38:d9:e9:ff:30:33:ee:e3:5f:4f:be:08:
48:bc:47:86:26:8e:7a:e7:81:7b:76:9d:79:18:a7:
f7:51:9e:f9:83:79:6f:71:39:24:eb:ab:eb:e1:48:
1e:db:85:09:86:82:c9:55:a8:91:39:a4:2a:fe:b0:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4C:C4:2D:C2:25:79:EB:75:C8:54:FE:78:60:F1:01:56:D8:0A:0D
X509v3 Authority Key Identifier:
keyid:36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f4:d5:ce:b8:9f:8e:84:8e:29:25:fd:ff:6c:bf:06:d5:3c:
fc:2d:41:4e:9e:b9:b5:34:8d:47:ab:d9:4d:1b:57:34:46:08:
5e:40:63:1e:02:62:4b:81:57:3b:cd:ee:c4:e4:10:74:6a:2e:
f8:f5:08:dd:73:08:67:64:81:ac:b4:0d:26:c8:04:2f:cc:89:
81:24:4e:c6:2e:60:9b:8b:13:ec:e7:15:4d:45:6e:2f:19:cb:
61:0e:24:eb:23:eb:63:5b:4f:73:4b:06:94:37:cc:12:24:0b:
22:a6:8f:0d:7a:d6:af:98:e4:02:27:e9:d9:7e:b8:20:52:62:
d1:06:53:e8:f7:94:e3:d6:21:86:90:33:58:f7:b9:ad:a7:ac:
d0:cb:ef:59:29:f0:57:b9:e4:02:c1:c9:45:0e:db:56:e3:02:
ad:f0:2f:01:03:f2:1f:54:2c:9d:df:33:4c:29:ed:3a:ce:05:
45:63:c1:62:64:09:2d:e5:ba:9b:96:2b:2d:39:22:9c:0d:36:
15:b3:1b:dd:80:72:b8:a6:60:8e:27:72:5a:ec:ae:55:55:00:
b7:66:36:23:9d:c7:89:0d:b9:3d:60:8d:da:39:33:9d:b3:6b:
1d:41:91:07:8f:3a:50:77:6a:8d:44:8b:83:15:56:84:da:fd:
cc:80:a4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:20 2025 by rpki-client