Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: dvybbaBd7FzYZrPasySkxkdZZM+6swmk4W47732NOMk=
Subject key identifier: 24:2A:C2:83:89:DD:4C:0F:F9:55:CB:90:EA:F0:60:AA:F2:F7:A2:B9
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 019A4FD050D12003C1B71E5D8AC8EFBCFB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 0AF7
Signing time: Tue 04 Nov 2025 17:00:43 +0000
Manifest this update: Tue 04 Nov 2025 17:00:43 +0000
Manifest next update: Wed 05 Nov 2025 17:00:43 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: iVmTPd38uWRY9u+kdDiZWBMGsLwEnJK7oX1A6MOFO8k=)
2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:50:d1:20:03:c1:b7:1e:5d:8a:c8:ef:bc:fb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Nov 4 17:00:43 2025 GMT
Not After : Nov 5 17:00:43 2025 GMT
Subject: CN=242ac28389dd4c0ff955cb90eaf060aaf2f7a2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:f3:0f:b8:7e:71:c0:2b:e7:f2:bf:f0:f4:
d0:ee:0f:fc:5a:45:71:ac:d1:ec:f7:77:0e:45:52:
7a:14:63:7a:22:a7:e7:b2:5d:5e:c3:2f:60:0a:2c:
00:b5:1c:18:dd:a2:0c:aa:7b:7f:b6:fe:48:1a:18:
7c:5c:57:dd:a4:42:3f:f7:8a:1b:85:e3:90:db:b1:
8b:f3:b7:4b:68:1c:c3:ed:1c:b1:cc:0f:a2:d8:25:
48:1b:82:03:fc:81:d2:cb:3e:c3:42:75:a3:e8:63:
40:8f:d7:34:4c:df:9f:6b:4c:7e:45:ee:87:f8:3e:
00:53:ba:ab:6e:51:fd:7f:83:06:37:9d:f0:07:41:
3a:13:a3:63:c7:3f:15:a5:eb:74:87:d3:ca:6d:4e:
89:a3:5d:f2:87:aa:87:06:89:2d:6d:06:e2:69:ee:
8b:df:dc:a3:22:a9:7e:26:db:c0:f6:a8:34:11:19:
5e:c0:96:18:18:63:3f:64:77:d8:fc:5e:b0:03:cb:
1a:ff:3c:9f:8a:e5:63:1a:57:9c:7e:b1:db:1a:af:
3a:00:25:c5:26:8d:3f:45:fc:a2:6d:c4:07:87:a8:
97:49:e4:63:bd:6d:b3:96:cc:77:9b:0e:46:93:e8:
82:e0:41:44:8d:f3:c0:71:81:f3:98:56:2e:ca:44:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:C2:83:89:DD:4C:0F:F9:55:CB:90:EA:F0:60:AA:F2:F7:A2:B9
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7a:ca:5f:fe:aa:96:49:03:d7:4f:10:40:d0:b0:3e:6f:6d:
a8:f1:bf:c6:84:dc:3e:0f:71:05:38:e2:dd:53:a7:80:1d:26:
53:b7:7c:25:f7:85:b8:6a:1b:a0:b1:f5:0e:18:a0:c7:54:6c:
68:f3:2c:ab:43:fc:36:05:5f:d9:3d:12:20:bc:d9:22:73:26:
f9:dc:6f:e2:6b:57:a3:85:5a:6c:0c:12:a0:8f:a5:8b:de:7b:
ef:52:94:a4:b6:0f:87:a3:82:43:bd:23:ae:3b:81:01:be:ca:
27:d7:56:1a:a9:bb:3f:b7:02:9e:a3:0e:26:1b:ee:b3:19:08:
a2:fa:ca:84:47:b2:e1:9d:b4:2f:00:17:60:d6:25:38:0b:01:
62:27:64:2a:a9:99:8f:63:36:e8:f8:1e:57:67:02:c4:b2:25:
40:d6:6b:a5:b1:42:7c:f5:35:a9:0e:92:69:39:03:14:2e:0a:
4f:d5:a5:6c:fb:a9:0d:eb:f0:3b:c9:f4:5c:6e:f7:29:69:4a:
04:3f:85:6b:c8:99:de:42:8a:56:eb:3a:96:65:9b:e2:cf:a2:
69:00:03:6b:73:d3:e8:1f:7b:a4:c4:65:e9:e9:41:7a:cc:c9:
0a:7e:c5:42:3f:2e:ee:4c:32:68:79:d5:2e:dd:0a:2c:37:1a:
a4:26:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:04:28 2025 by rpki-client