Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: sVL1SjoZ2B4CzVJ0NM8owaxSQcJulQDyyeGbpNNno/M=
Subject key identifier: E1:D7:83:75:BE:8F:CC:81:37:E9:0B:D6:91:FF:01:86:1F:0A:0A:94
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 019A2289DC5340DCD357CE3E91B98FF63D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 0256
Signing time: Sun 26 Oct 2025 22:00:51 +0000
Manifest this update: Sun 26 Oct 2025 22:00:51 +0000
Manifest next update: Mon 27 Oct 2025 22:00:51 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: j2H6ZMtGt2lXbt0cbkT+zdcP5zPMh+KDeEBktDYWzLI=)
2: dy-p251zL98DN5HbKp4vPRlxutc.roa (hash: 4pwGuhrYIr/OJxEBN4t0YB3KYavBF0QhnyAv6oyh4DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:dc:53:40:dc:d3:57:ce:3e:91:b9:8f:f6:3d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Oct 26 22:00:51 2025 GMT
Not After : Oct 27 22:00:51 2025 GMT
Subject: CN=e1d78375be8fcc8137e90bd691ff01861f0a0a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:55:b5:79:7d:cc:6e:95:83:68:f7:cf:35:
6d:8a:cc:44:16:9a:6b:ce:e0:a9:bb:55:1a:39:c2:
03:46:ae:4e:89:24:a4:d8:f5:04:61:2e:65:7a:14:
93:ad:8d:9f:bb:df:c0:cc:90:c7:ce:05:ad:e6:b5:
9a:58:5a:bc:58:f8:ad:1a:00:e1:df:59:78:7e:1f:
77:ed:52:3f:14:c2:b9:ae:f9:a7:72:01:dd:44:d1:
4b:0b:08:3b:1b:55:e0:e8:29:d6:2e:d5:08:21:3a:
38:d4:7c:ef:b9:b4:49:16:3c:9f:41:b6:e4:53:70:
64:fb:f3:be:e0:10:b6:5b:42:df:76:84:07:fa:ca:
73:2b:3b:1a:14:e8:72:4f:79:13:12:e8:0f:87:60:
8c:93:9c:b2:4a:ac:95:61:e9:45:65:b6:1e:37:c9:
69:2d:33:fb:68:1e:0b:d7:e7:41:93:4d:ea:3c:22:
f0:bc:3e:ed:b3:3d:6e:fd:ae:28:b0:da:45:76:6c:
c6:91:80:27:d1:13:0b:87:b7:bd:a4:49:24:2c:2e:
00:69:7d:b7:88:68:e8:54:08:fa:16:89:0f:0d:3e:
6e:5a:c6:3e:ad:ff:a7:b6:56:a0:34:d1:32:24:37:
43:dc:8f:b7:0d:b3:87:a7:a8:f4:01:81:3e:82:76:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:83:75:BE:8F:CC:81:37:E9:0B:D6:91:FF:01:86:1F:0A:0A:94
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2a:01:b0:89:88:e0:ba:67:87:89:eb:e1:28:4b:04:c3:ea:
34:93:af:a3:33:45:65:b6:23:bb:c8:43:8e:a7:b7:18:fe:24:
fe:a3:55:64:f8:58:1a:a1:09:ec:58:7c:f7:94:62:b5:34:de:
f5:f3:ee:04:85:80:48:40:51:f1:b9:03:f2:32:c3:ac:41:24:
ee:68:01:c4:e4:4e:e0:95:14:c3:c9:18:d0:f6:27:4b:99:9e:
25:34:e0:55:86:bd:29:6c:7a:38:f6:9b:12:67:64:2d:98:5c:
f5:4e:ae:f4:8d:95:47:fd:b2:4e:4b:0f:84:0e:0b:fb:11:5a:
a3:ae:21:6a:0e:f2:48:2b:68:da:91:c4:48:a3:ac:7e:f0:37:
9d:bf:92:d4:02:59:94:41:fc:09:94:77:eb:6f:c2:85:94:58:
36:b5:c8:a2:ae:99:9f:a8:70:bf:62:8d:6b:48:04:6f:8f:35:
3b:88:7c:24:b6:7c:17:0b:f5:02:75:d2:17:7e:f9:32:c8:9d:
5c:18:36:27:b6:bb:1c:61:99:5a:3f:e7:bd:f0:22:9c:d3:da:
10:76:81:4c:aa:dc:88:dd:14:78:6f:20:f8:45:28:a2:3e:f9:
47:e9:f9:1a:e4:ca:e2:52:cd:f8:ef:3c:18:c9:bf:cf:74:a8:
b4:96:39:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:26:30 2025 by rpki-client