Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier: z58qf3/P4XDYYk82+NfXGX03Uxotu8lPBVvDaoM4NxU=
Subject key identifier: C2:D7:BF:87:C9:A0:AB:71:85:99:E1:97:3E:9F:20:CF:A6:95:F5:D0
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial: 019A71B8036A30AB14CA09C52392453E1F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: lavh470SbzoqA1TmjIu/J9WD/HSQxhn3LXxtv+KCp00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:03:6a:30:ab:14:ca:09:c5:23:92:45:3e:1f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=c2d7bf87c9a0ab718599e1973e9f20cfa695f5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:fa:a8:6f:39:f7:7c:21:fb:3c:c3:4a:56:
b3:0b:9f:07:6a:79:72:2d:b9:96:27:d2:15:7f:ad:
49:3c:77:7a:8e:66:ba:9c:9a:95:c6:64:fc:20:be:
49:6c:04:aa:46:d9:1f:6b:5e:5a:d6:a1:46:bf:6f:
c2:82:e0:c0:98:e0:58:50:7a:46:8e:b6:ce:fd:88:
63:1e:d4:71:21:38:4c:b3:52:c9:ef:18:94:d4:4b:
85:4e:4e:d0:d5:2b:ee:7d:f4:a4:f2:e0:d8:57:10:
ab:ea:20:8a:7c:ca:19:7e:c4:cc:a1:1a:69:dc:fa:
53:e2:11:a6:a1:9b:86:7d:29:5c:95:c0:35:8b:ec:
bc:7c:25:9a:b1:af:46:1b:16:a5:fb:fd:25:57:ca:
d0:7f:c4:35:0e:08:1d:ce:d9:66:00:4b:90:b1:23:
4d:b1:88:b0:27:16:f1:de:b9:f0:04:e1:60:6f:11:
7a:b2:f4:38:29:ff:8a:bb:c5:bb:1c:84:b4:95:55:
bd:7c:af:27:c1:08:5d:d3:1d:5a:ed:a7:02:c9:34:
82:a8:64:0d:2b:fd:14:85:a3:bd:e6:4a:ce:59:09:
ee:bc:db:77:78:dc:62:1c:71:8e:1e:a5:df:ff:ac:
ca:f1:24:29:75:31:d6:76:e7:d8:1f:be:64:7b:fd:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D7:BF:87:C9:A0:AB:71:85:99:E1:97:3E:9F:20:CF:A6:95:F5:D0
X509v3 Authority Key Identifier:
keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:81:b8:1f:78:71:65:bb:e1:7b:f8:8c:f3:5d:b0:7d:5a:39:
f9:37:e8:7d:aa:3f:af:99:3c:67:4f:72:14:38:de:2b:de:8f:
fc:9b:31:a5:fb:38:23:ee:78:28:27:a7:e2:ff:b4:7e:3b:11:
e7:9e:08:bd:d1:cd:e3:be:b3:2d:0c:ed:e9:64:bb:92:d3:eb:
2b:fe:ea:e8:a2:86:57:fd:31:17:82:3e:f1:b9:c9:8f:cd:5e:
69:ee:e1:5a:6d:1c:38:18:be:ea:43:3b:f2:11:13:ad:e1:05:
26:b1:1c:5c:e5:7e:e5:04:d8:dc:03:07:fe:d5:ca:56:df:49:
98:e6:eb:c3:76:f9:cc:70:ef:2e:5d:3d:df:7b:e6:aa:1c:a3:
f6:dd:5f:96:76:f4:0b:e4:63:1f:07:8f:99:09:0a:ba:c3:08:
43:22:51:7f:c7:a5:9b:a4:63:7c:62:59:49:15:1b:5e:3a:31:
3f:02:0a:2c:14:09:09:fd:d1:78:0a:c6:ca:0d:3b:1d:6d:e1:
42:62:7b:76:50:eb:92:e4:2d:95:38:9b:7b:a3:c2:2a:e6:88:
4d:13:67:84:42:97:ea:d4:7f:d1:bb:d5:cf:ce:4f:ea:f3:8d:
64:cf:0d:ed:e8:0d:a1:61:09:42:ae:82:1c:69:02:ad:ab:63:
14:91:84:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:58 2025 by rpki-client