Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
File: NLypT2th4QEA3Dpxhv-j-bAMad0.mft (raw, json)
Hash identifier: d/e0Fw730IpdQEX3YCSdJ51pjw5znDjQze8uALtiAhk=
Subject key identifier: B2:E2:FF:E5:F6:A1:E8:76:98:D9:FA:D6:45:03:DB:C3:9E:BE:11:2E
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial: 019A4D73B72E2348D8DAFC792988587322CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
Manifest number: 139E
Signing time: Tue 04 Nov 2025 06:00:20 +0000
Manifest this update: Tue 04 Nov 2025 06:00:20 +0000
Manifest next update: Wed 05 Nov 2025 06:00:20 +0000
Files and hashes: 1: HIoC707cWv-kl8mp8yIuvONoh0w.roa (hash: EWzRp4vUO24ulN2ZRCrdnUVFpJrZ9XxymUQDpbogTtA=)
2: J2yd4O1iL2KCY7LAQ3uRto73WwQ.roa (hash: FnyzxFKFKQYZ99+AO0ucXUQHZHZrzRIvFySr51HyBug=)
3: NLypT2th4QEA3Dpxhv-j-bAMad0.crl (hash: 3/pny0fsB+Sb3tg7pnhOB9oW+I7YHOkDMufP4UtUOeQ=)
4: m01g-CBC5mmua20tUAtJoqGt3ww.roa (hash: AY/opL59pPgH00+bWPEKHAE0TYN5GbYk0s+CgO2aV3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b7:2e:23:48:d8:da:fc:79:29:88:58:73:22:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Validity
Not Before: Nov 4 06:00:20 2025 GMT
Not After : Nov 5 06:00:20 2025 GMT
Subject: CN=b2e2ffe5f6a1e87698d9fad64503dbc39ebe112e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:4f:0a:cf:df:e6:cf:92:00:95:28:1f:cd:
b4:7c:74:f2:50:45:d5:e3:71:43:2b:a1:53:6d:67:
26:e1:b2:1c:4a:42:35:54:0c:68:ff:87:4a:ce:4c:
6e:44:0c:67:ae:09:18:48:09:9e:0b:31:86:21:c7:
84:dc:bf:16:b8:2b:0d:e6:dd:04:fb:39:a6:4d:08:
cf:1f:70:37:b1:d3:71:2c:c8:00:77:51:d5:5e:a4:
61:e7:9e:39:a3:f1:6d:8d:01:37:98:fa:90:4f:b7:
a8:b9:03:5a:19:fa:da:be:d9:2f:de:64:34:48:49:
7b:ac:b4:6c:3e:98:bc:1a:5f:16:19:f6:fc:de:1a:
65:be:0b:ca:c1:99:ea:58:8e:9d:b4:7c:e0:76:c4:
22:73:5d:1b:3e:c0:3e:20:e0:67:4f:6a:79:2c:b1:
17:13:fc:c4:ec:b9:d1:b6:a3:04:34:12:74:49:86:
78:78:2d:3c:a9:d5:34:a1:e8:99:32:6f:86:ca:46:
db:ef:5e:58:65:4f:d2:18:dc:e4:93:b6:bd:18:3c:
9f:42:3c:7c:84:c4:fe:79:82:d8:f6:7e:e6:8c:4a:
57:21:a1:e4:74:e4:76:fd:d5:2e:6e:fd:23:06:ab:
38:e8:a9:f4:34:0f:d9:9b:d0:c8:ef:ad:58:33:b0:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E2:FF:E5:F6:A1:E8:76:98:D9:FA:D6:45:03:DB:C3:9E:BE:11:2E
X509v3 Authority Key Identifier:
keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e4:19:c6:02:e9:ee:4e:0a:72:40:62:eb:a2:33:44:b7:5a:
84:42:d9:e5:e1:99:b8:e7:5b:cf:92:93:a1:18:10:f5:88:ee:
fc:e2:0c:19:a2:23:61:52:54:5c:b3:d9:6a:ab:c7:cb:6b:fe:
75:79:0a:9c:7e:b3:5c:a3:23:87:f2:09:72:87:94:35:32:32:
39:3a:aa:b9:4a:eb:49:72:38:c2:b4:5c:1a:f8:d8:5f:e4:84:
32:9e:10:0a:98:72:20:9b:7e:50:74:c0:b7:99:08:9b:f6:f8:
a5:8a:6b:56:85:3b:b6:63:cd:6b:55:71:b6:11:9b:4e:18:41:
89:5f:49:34:c4:1e:40:49:5e:60:93:13:0e:73:cc:0f:0e:e6:
ff:a1:27:7a:39:36:eb:22:93:67:66:f6:1f:61:e5:7f:01:0f:
bc:9f:f0:36:57:ad:16:22:cd:9f:cc:8f:b4:84:4f:d9:b0:8e:
f5:09:3f:9c:83:60:f3:8e:bc:fa:13:9e:af:df:12:b2:68:a1:
d3:24:a2:e8:2c:cc:da:b5:e3:ff:2c:64:02:7d:04:1a:1c:9e:
ec:23:31:a3:bd:71:82:59:d9:ca:55:6d:f5:73:91:ec:6e:64:
53:27:79:84:82:61:e7:cc:2b:92:ac:62:75:9a:d7:fc:ae:15:
3a:80:ab:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:07 2025 by rpki-client