Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
File: NO2iVBz8z2guKd2uYx7cjR57b2A.mft (raw, json)
Hash identifier: uyVZ5P7Tq4yabMjbQWSNbkLV1to0TxVh6tw+QXpo8Zc=
Subject key identifier: 4B:4F:95:B2:19:6F:C3:C8:61:A5:AC:8B:1B:9C:92:74:34:AE:5C:77
Authority key identifier: 34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
Certificate issuer: /CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Certificate serial: 019A71B78BD439903D31D67F320C907E6EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
Manifest number: 07CD
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: NO2iVBz8z2guKd2uYx7cjR57b2A.crl (hash: vbuy22GrnNHiE0BoXTWF+Dq8q7n733IblZLWd+8ylV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8b:d4:39:90:3d:31:d6:7f:32:0c:90:7e:6e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=4b4f95b2196fc3c861a5ac8b1b9c927434ae5c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:7d:65:18:aa:df:f7:0c:33:80:f9:30:e5:
11:28:4e:f8:40:6a:d0:1e:6a:9b:84:28:3a:7d:e3:
5e:ff:9b:02:0e:0b:85:4d:1f:4c:b2:7c:aa:77:48:
ae:56:1c:c4:c0:83:60:30:c8:87:ec:78:74:c2:ef:
10:87:af:3a:44:35:7e:9c:99:5d:b2:75:42:d5:8f:
00:6a:dc:66:46:0c:c3:d5:62:8e:23:ab:84:3f:79:
17:50:f3:4e:26:cf:76:60:79:5a:c5:35:69:5c:e2:
a7:28:eb:e7:58:5e:a1:eb:f7:e4:0f:ba:47:cd:29:
02:c8:1b:15:4a:94:69:08:fc:f1:24:76:a5:e6:bf:
db:47:98:7f:cb:7a:8b:2c:97:d9:6e:cb:d1:ff:d9:
59:51:ac:65:12:84:57:2d:b1:79:9e:1c:40:97:c3:
b4:e3:d4:44:c6:fb:b2:c1:ca:7c:ba:ca:32:a1:96:
58:47:2a:34:54:39:38:ff:4a:56:09:e3:fe:1c:20:
73:39:47:15:0e:f0:38:a7:56:c2:55:36:0b:98:ca:
bf:c8:05:7e:b2:b9:f6:88:fe:80:9e:5f:06:bb:b3:
03:94:80:8d:e6:2f:0f:8f:08:f2:d7:89:01:76:ce:
5f:82:e9:bc:04:5d:b3:f0:f2:61:39:3f:d7:ce:8a:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4F:95:B2:19:6F:C3:C8:61:A5:AC:8B:1B:9C:92:74:34:AE:5C:77
X509v3 Authority Key Identifier:
keyid:34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a0:9f:50:60:81:8f:4e:7e:a8:01:0e:aa:0d:94:a6:c8:59:
34:a1:b3:38:15:a5:5e:71:2e:2c:30:aa:cb:e8:d0:88:23:4f:
bb:e7:9c:bd:4f:bd:0e:e0:8f:c3:ec:b2:78:33:22:8f:00:c0:
8f:22:da:44:c5:0c:7d:f7:0f:a6:96:cd:0d:35:c7:b0:1a:ba:
e0:54:17:32:77:92:ba:77:ae:34:9c:51:19:cc:07:df:c4:1d:
db:e5:c9:06:f1:b3:42:a5:4e:0a:bf:22:6b:2f:50:31:f4:ab:
f4:f7:87:06:64:72:fc:6b:e6:e3:3a:07:b6:cf:4a:f9:ff:16:
d5:6e:9b:79:ab:57:86:5b:7b:ce:e4:6a:ed:e4:2d:64:0e:a4:
1f:e1:75:e3:f5:fa:7c:eb:f7:51:6e:aa:20:a7:0f:4e:b8:e2:
76:69:55:b6:07:57:a5:16:21:97:30:78:16:5d:f7:32:38:0d:
dd:92:3a:c6:4b:bc:53:e8:ea:8a:41:af:82:ea:8f:20:02:c3:
08:45:91:83:3e:c1:ad:41:53:60:b9:2d:d7:bc:02:02:52:e2:
1e:2d:4f:08:05:c7:05:99:32:6d:bc:d2:33:9b:bc:53:e5:5a:
fa:96:5a:55:0e:c0:96:de:8c:7d:8b:02:22:16:aa:9d:7d:a6:
2b:fe:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:12 2025 by rpki-client