Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: XP4+bN1Hd2HDAe6sfDr7L8cJlCHVwIsJKqBHGym7jfA=
Subject key identifier: 40:A9:26:0A:AF:6C:5B:F1:8B:F5:71:0E:16:C4:9A:EF:7A:B5:AE:3A
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 019A53AD431F06729CE3EC4A1C30DC440655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 0269
Signing time: Wed 05 Nov 2025 11:00:54 +0000
Manifest this update: Wed 05 Nov 2025 11:00:54 +0000
Manifest next update: Thu 06 Nov 2025 11:00:54 +0000
Files and hashes: 1: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: f/SSVJY6rJo9pQQ7hYD3DDxYmDJfPf/I5z6ZtKfwrws=)
2: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (hash: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=)
3: xuTySrtO69FPOcG6SUnZEPsSQ9o.roa (hash: luyQlxdtnhbzwgU08jLpwvc2YYpUGSiEGEb8snEjI6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:43:1f:06:72:9c:e3:ec:4a:1c:30:dc:44:06:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Nov 5 11:00:54 2025 GMT
Not After : Nov 6 11:00:54 2025 GMT
Subject: CN=40a9260aaf6c5bf18bf5710e16c49aef7ab5ae3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:00:25:bc:20:1a:bd:32:20:bc:bc:53:8e:65:
f8:f3:88:01:2d:36:86:60:0b:42:57:1a:9d:56:ed:
3b:c5:13:be:f8:68:92:0b:21:ef:05:23:cc:26:29:
44:49:ff:8b:76:2a:2f:0f:c0:f1:ac:d7:f5:c3:48:
86:da:2f:c0:ff:f0:b3:e5:28:d3:92:fd:56:35:78:
75:30:87:8a:5f:f4:71:83:87:a5:e4:5e:d2:9f:97:
58:6c:0f:65:f4:62:c6:34:77:00:80:7d:e7:dd:30:
76:84:4b:8f:20:43:15:62:d8:9e:79:86:2d:5a:2a:
73:0f:cd:44:71:ea:ca:a2:06:1b:43:63:ab:dc:c6:
f8:43:f0:f1:37:66:19:79:95:35:5d:b1:21:3c:62:
3f:bd:4a:a4:7a:46:42:6d:2a:c5:19:eb:23:3f:2e:
39:4d:41:d2:03:78:cc:0f:e2:64:da:4e:50:fa:b0:
99:f9:48:f8:85:d6:aa:27:81:50:54:90:19:3d:61:
c5:92:b1:26:a5:30:00:13:af:1b:bc:10:fb:5b:76:
ec:2b:0a:03:ac:85:a2:59:25:e0:db:76:00:b0:9c:
72:cb:1c:d9:b4:a3:33:99:6c:aa:85:6f:d9:82:82:
21:9a:4d:24:7e:49:b1:c7:99:fa:09:c2:d2:20:70:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A9:26:0A:AF:6C:5B:F1:8B:F5:71:0E:16:C4:9A:EF:7A:B5:AE:3A
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b2:f1:0e:f7:03:cf:c0:48:42:e7:f0:f9:cb:8a:46:8e:09:
aa:44:9d:08:ff:67:eb:20:37:e3:39:45:3c:b7:1a:77:6a:f5:
f3:36:c2:37:55:fb:1b:01:6d:19:31:01:73:3f:44:f3:11:44:
51:88:f8:39:d6:d5:4f:ad:c4:c7:6e:f1:5e:50:46:fa:6f:02:
b7:ae:df:c9:b9:a1:3a:1b:79:5a:14:8e:0c:fa:94:de:b4:80:
ef:ee:5e:34:fe:02:f4:b8:ba:53:11:86:17:b4:a8:99:d6:f4:
84:9f:14:18:88:1a:54:97:06:80:d4:71:94:99:7e:25:3c:0d:
71:e0:b2:72:20:6e:22:6e:99:73:03:fa:7e:9c:51:5f:82:1b:
8d:78:bd:eb:a5:08:65:63:3b:ed:46:60:01:8b:89:2f:aa:87:
39:5a:67:8d:56:6e:87:8e:1a:76:75:00:fa:55:8b:8b:c4:e6:
3c:01:c7:72:7a:16:2b:84:d9:f4:92:84:e8:de:56:e5:47:a9:
0b:4c:1a:11:ad:0c:4e:36:5b:f3:cc:df:d3:fc:85:6e:f4:a3:
44:a1:2a:63:50:19:0a:f2:ad:24:92:56:8b:aa:f3:5a:64:16:
fc:59:32:a5:8a:05:c8:f9:85:60:18:02:85:46:12:28:47:a6:
42:cc:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:05 2025 by rpki-client