Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
File: 1-0NLMrn7496VvHcdbSs8eaoBS_U.mft (raw, json)
Hash identifier: 2V29gulWbIy8IdjwW52luvCCQH4vM8dQkFUeTybNgR8=
Subject key identifier: C0:A1:44:79:FA:9E:09:4A:1E:FF:86:CF:B4:02:9B:84:81:F3:E9:C8
Authority key identifier: FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
Certificate issuer: /CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Certificate serial: 019A71EEDE3DB514C709222963DAD190C5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
Manifest number: 11
Signing time: Tue 11 Nov 2025 08:01:11 +0000
Manifest this update: Tue 11 Nov 2025 08:01:11 +0000
Manifest next update: Wed 12 Nov 2025 08:01:11 +0000
Files and hashes: 1: 1-0NLMrn7496VvHcdbSs8eaoBS_U.crl (hash: pen4wVAqTXhagy/Taum+GFo36JXgADm0n7TGYhxdTWI=)
2: oszO5cRy_bT24vbGygYagfAt25M.roa (hash: jZ3tdldk6JjFlin4RDbE9w6pyZh5JE76rT/riu50Cpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:de:3d:b5:14:c7:09:22:29:63:da:d1:90:c5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Validity
Not Before: Nov 11 08:01:11 2025 GMT
Not After : Nov 12 08:01:11 2025 GMT
Subject: CN=c0a14479fa9e094a1eff86cfb4029b8481f3e9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:82:bb:bc:cd:0d:80:71:c0:c9:0d:cc:9a:
c8:be:70:13:23:cc:e5:e7:cd:97:e9:c8:a4:d7:d9:
d9:83:79:ce:07:42:59:ed:54:1b:62:47:0d:fa:eb:
e5:a4:be:76:34:98:50:a9:53:1f:93:77:00:8e:ea:
10:68:67:0c:2c:7f:11:74:4f:80:31:13:bc:7e:88:
89:58:7d:12:2f:1d:e9:1c:e1:89:26:9a:93:0e:8f:
1b:db:a2:9c:e7:d4:13:51:f3:99:3d:a7:55:ed:cc:
9a:9e:3d:f0:06:7a:5f:7c:da:c3:53:e5:ab:11:13:
46:51:38:4a:30:e9:9d:76:89:61:c6:90:ee:89:92:
a5:23:37:ef:ab:61:a6:c5:c9:52:e5:5f:6b:46:0e:
ca:5b:89:5d:c8:93:6a:f4:df:97:ea:6e:46:e2:f5:
bd:c1:77:c7:92:3a:f4:5b:1f:dc:ff:3a:89:97:8c:
36:92:ca:4f:90:9b:91:b0:0e:f1:43:ef:d7:0e:0e:
33:50:92:0a:bc:7f:59:ae:57:9f:68:7c:37:7f:7f:
35:3c:be:df:6a:c2:9f:85:92:1a:5a:e2:50:de:66:
ec:b9:e0:87:71:9b:7e:3b:09:5d:df:d6:db:6e:16:
05:06:b5:19:c3:2d:2c:cb:7a:73:50:f0:db:16:90:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:44:79:FA:9E:09:4A:1E:FF:86:CF:B4:02:9B:84:81:F3:E9:C8
X509v3 Authority Key Identifier:
keyid:FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:91:ca:16:50:9d:c7:37:7c:f3:b6:33:32:c5:7b:b9:d1:62:
85:17:9c:0c:8a:21:5a:86:50:fa:56:ec:41:07:a0:7c:cc:75:
56:8f:65:18:48:87:42:47:3a:c0:20:5d:5f:10:c8:62:7b:69:
2d:09:5f:33:c4:40:e5:92:37:30:7a:ef:09:76:7d:73:05:d4:
db:93:8e:0c:4c:da:83:02:6c:a6:96:61:db:7b:d9:30:78:67:
34:13:65:c9:0c:67:bd:53:3d:ab:c7:c6:03:a8:aa:fd:87:3d:
92:8c:f5:84:fa:31:25:dd:6a:47:27:3d:1a:e6:5a:8b:d7:61:
92:2d:01:16:34:35:81:b5:33:66:eb:a7:39:81:56:64:98:cd:
b7:a4:2e:97:7b:c4:27:a7:bb:95:1c:b0:7b:43:76:90:fb:16:
39:10:38:b5:54:ca:1b:63:57:30:89:e3:20:45:4d:ea:c3:e3:
27:2d:fb:01:b8:83:38:da:14:00:20:71:36:5c:8d:c7:4b:f2:
e2:af:f7:9f:55:fd:77:b9:73:bf:7e:28:e9:ad:10:02:12:d2:
c1:50:01:24:16:0a:d1:f4:d4:12:27:75:31:81:9a:ed:52:87:
5d:80:15:20:ab:44:d4:24:05:20:ab:f1:a4:5d:4b:c8:c1:5b:
15:09:87:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:21 2025 by rpki-client