Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
File: NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json)
Hash identifier: ogNwFeqCNUqVnd9oLiHCHxPdkmrkj/yUYhQCWWSjV1E=
Subject key identifier: F1:9A:EB:36:41:A1:4D:DE:C8:F9:BD:26:56:FD:8E:6B:0E:78:A0:1C
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial: 019A4D3CAEE803BA143DA0C92AFCFA164FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 05:00:13 +0000
Manifest this update: Tue 04 Nov 2025 05:00:13 +0000
Manifest next update: Wed 05 Nov 2025 05:00:13 +0000
Files and hashes: 1: BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa (hash: 72PY3Qqmz1maPY+ZM8ykIYNT4ZWmcAK3NGiS506bQm0=)
2: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: C1fbPXWPxe5Cjt+FDMX5ondQl0y/kgWShPqNDhaRpBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:ae:e8:03:ba:14:3d:a0:c9:2a:fc:fa:16:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Validity
Not Before: Nov 4 05:00:13 2025 GMT
Not After : Nov 5 05:00:13 2025 GMT
Subject: CN=f19aeb3641a14ddec8f9bd2656fd8e6b0e78a01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:6a:46:ae:c8:12:6e:43:92:56:78:f4:b2:
4c:af:26:37:e8:a9:f1:67:d0:96:89:30:95:4c:f9:
fa:07:32:f6:79:05:88:7d:74:e9:ea:6e:62:94:cb:
67:f8:fb:48:12:6d:ac:b7:67:88:1c:56:b3:fd:2b:
58:c7:db:ed:4e:b4:1a:1f:9f:7c:e8:51:07:f7:02:
00:bb:06:60:cd:c4:b1:d6:d4:01:df:22:33:94:03:
f1:ca:ef:e3:2d:ac:f6:b7:aa:ad:4c:31:5a:6c:70:
1f:8f:83:98:c0:98:cc:2f:42:90:89:c8:3d:48:29:
8e:60:a2:aa:5f:45:1c:63:ed:68:b2:59:a7:d3:ca:
1b:84:a2:55:af:ea:6b:d8:e9:d2:a4:17:a2:cf:cc:
62:cb:ec:1f:d6:6d:22:c6:74:0b:b0:db:df:e7:18:
af:c1:1f:2b:0c:92:72:00:32:00:79:a1:4b:df:81:
37:fb:c8:ee:e2:19:da:d8:d5:ae:b4:fe:5a:7a:f2:
17:7c:cc:cd:5d:af:77:e9:a5:5d:f2:23:66:57:35:
17:17:bd:23:07:1a:b5:79:b6:b4:a2:72:d0:2c:77:
ce:4f:a4:2c:fd:cd:c4:b9:d3:ad:42:df:e6:17:1e:
4d:31:72:58:9e:ef:bd:ef:15:e0:6c:dd:6c:cd:16:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9A:EB:36:41:A1:4D:DE:C8:F9:BD:26:56:FD:8E:6B:0E:78:A0:1C
X509v3 Authority Key Identifier:
keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:91:d5:fb:09:5b:f7:5a:b8:c3:4e:d6:66:cc:ca:f2:00:c5:
6e:7a:dd:b4:bc:6d:9f:5a:ce:9a:68:b9:72:4b:be:76:a3:25:
f0:6f:05:af:20:eb:54:71:5b:c7:77:6e:9f:74:5e:aa:70:94:
af:7d:4c:5d:d6:be:01:0d:a6:e1:e8:2c:76:1d:03:c5:97:8d:
3f:1b:bd:e9:36:c2:90:1e:3b:2a:46:79:aa:57:e4:49:63:dd:
13:3b:7d:5a:55:2d:d3:dc:70:79:7d:98:3a:95:99:1a:41:63:
51:c5:d8:96:68:f0:bc:ad:7f:7e:50:43:c5:73:bb:5d:13:05:
95:c6:53:ee:0c:ae:70:ff:f8:a4:41:ef:46:27:ab:77:dd:42:
08:e9:8c:7a:aa:38:54:54:9f:20:7e:5e:bd:57:f6:33:10:e8:
eb:6e:4e:40:3b:e7:af:bf:57:1c:2e:b2:fb:57:9d:2b:ca:33:
87:e7:09:88:ec:d4:cb:8b:45:ff:bf:67:a2:58:25:b3:83:92:
79:92:36:02:c2:22:ad:4c:33:03:64:0d:0d:a2:2d:c6:ed:41:
7c:cb:22:08:69:40:38:fd:4f:7b:fe:b2:65:e0:30:c3:c6:b3:
ee:7b:14:c9:64:c4:93:98:d1:79:0b:4f:be:d7:37:b8:1a:27:
2b:2b:bf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:31 2025 by rpki-client