Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier: 9QTW4AHPADp4nJ0uNXYATsgjyK2BX5cqGQULvESRjzk=
Subject key identifier: 77:4E:B5:C2:EB:38:6A:1F:47:69:27:95:4C:82:B3:0D:7A:B3:F1:EA
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 019A500779CB690D2FDAA825B588FCFEA4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number: 0E85
Signing time: Tue 04 Nov 2025 18:00:58 +0000
Manifest this update: Tue 04 Nov 2025 18:00:58 +0000
Manifest next update: Wed 05 Nov 2025 18:00:58 +0000
Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: g32xSr+/BIHmrcYiTAAMphbOqFqjiUOtdVASRPUGfyc=)
2: XtfUxUGkjCJuklebiN54Yxg8R5M.roa (hash: 6ylTl3fnc+Bg9Pz92d7wJrvdCwc0XcQ4KZdtR4bRI4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:79:cb:69:0d:2f:da:a8:25:b5:88:fc:fe:a4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Nov 4 18:00:58 2025 GMT
Not After : Nov 5 18:00:58 2025 GMT
Subject: CN=774eb5c2eb386a1f476927954c82b30d7ab3f1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:f9:2d:d8:f8:9d:1b:75:c2:6f:f9:f3:94:
3d:9b:f4:3e:3d:4c:fe:cf:63:34:dd:97:c5:49:2f:
66:02:ed:e7:0d:af:fd:92:7d:6f:17:da:24:80:42:
ca:85:5c:3c:75:76:7a:75:50:a0:20:dc:13:e5:f5:
e5:3a:d8:32:15:3d:b5:37:d5:27:c2:b5:92:86:0e:
8c:68:2b:6f:38:8c:43:3a:d8:0a:00:c7:05:9d:e6:
31:16:05:a0:c5:70:fd:2a:a8:51:83:05:96:0f:5a:
3e:d5:7f:75:7f:a9:c4:6c:70:b3:4c:ec:01:36:f9:
db:aa:3e:5f:32:bf:44:47:a4:46:7f:ea:7a:0e:97:
23:17:d0:3e:08:59:4d:f9:96:17:3a:4c:92:56:3b:
94:5f:af:a5:ca:a0:95:7f:e7:1d:94:0d:8e:32:19:
bc:5b:71:19:2c:a0:15:4e:83:fc:67:33:32:0d:dd:
f9:eb:25:df:09:59:77:be:9f:c7:b2:c4:8d:62:d4:
d9:69:f9:fe:7c:ab:d9:80:ab:63:6f:02:5f:8b:28:
e4:9e:07:19:d9:e1:f3:c4:99:71:fb:d0:87:30:cc:
04:1c:56:d4:f2:40:6b:4c:5f:f1:6c:32:3c:8d:bf:
e6:eb:0e:eb:e0:d4:af:0e:86:63:04:28:fb:7d:3f:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4E:B5:C2:EB:38:6A:1F:47:69:27:95:4C:82:B3:0D:7A:B3:F1:EA
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9d:2c:b2:71:d1:7a:cb:23:7a:41:9b:45:86:b8:16:9a:97:
2f:97:c8:d7:45:0d:a7:65:06:7c:b9:ac:6b:6b:2d:82:f9:cd:
f9:c3:ae:bf:00:30:4c:aa:1f:f8:5c:1a:5d:ad:ca:16:9a:09:
59:bd:84:2d:8d:82:26:c0:9c:be:98:88:65:71:84:8d:b3:53:
2e:fa:bd:e3:00:44:a3:ff:36:04:98:80:77:56:72:7b:d5:b8:
52:7f:53:25:f1:95:99:76:b5:50:e6:da:31:7d:98:3d:f2:1d:
70:d3:37:f0:97:a7:1d:73:2c:4d:5b:fe:de:f3:07:0e:2e:e5:
13:26:8a:0d:bd:4a:95:99:7c:90:c2:bd:34:ac:3b:42:11:b0:
4b:c3:cd:8d:18:99:0d:fa:4b:5f:08:b8:cd:fc:ce:a7:83:26:
89:51:c6:32:b4:1b:58:99:3e:b7:22:41:97:7c:b2:1e:14:04:
56:a9:5e:3a:bd:d8:08:16:ec:db:a3:17:85:7b:c5:31:36:e2:
51:9d:87:67:d1:27:16:61:bf:53:f0:52:f4:95:21:c6:e1:18:
31:bb:cd:8c:2a:df:fb:f7:b3:9e:9e:81:3e:02:63:6b:d3:58:
67:8a:50:3c:d7:0e:7f:c0:c7:08:58:92:5d:09:e7:0a:1e:c8:
a8:f8:4a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:27:07 2025 by rpki-client