Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: OstNGNHnjBYvouqAwQAmfF/n2CvSmzZheMFYwgvCHmQ=
Subject key identifier: 17:11:D6:AE:6F:1E:13:8F:84:C8:F2:29:86:4D:D6:A3:3A:AC:5B:34
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 019A4FD02644843E8428A97D80D19D99000F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 02F5
Signing time: Tue 04 Nov 2025 17:00:32 +0000
Manifest this update: Tue 04 Nov 2025 17:00:32 +0000
Manifest next update: Wed 05 Nov 2025 17:00:32 +0000
Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: IT4Q/OetjEzYiHNkX4nRBr3FBjUD0yWSSTYaYOBFnuk=)
2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:26:44:84:3e:84:28:a9:7d:80:d1:9d:99:00:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Nov 4 17:00:32 2025 GMT
Not After : Nov 5 17:00:32 2025 GMT
Subject: CN=1711d6ae6f1e138f84c8f229864dd6a33aac5b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:71:19:65:c0:ae:9a:dd:d6:05:8d:19:04:
69:90:da:c9:df:07:6b:7b:da:94:b6:8d:8c:be:91:
11:23:b7:49:fc:ce:ba:4a:71:c6:ca:d8:54:59:a3:
9f:61:41:65:d5:cf:fc:b2:de:be:7f:a7:6f:c3:1d:
4e:ae:e7:67:32:15:5d:d1:f2:5e:87:54:7f:1c:2b:
f9:f4:85:d9:c3:b8:1d:c0:08:bd:6e:82:c0:b6:1a:
2d:49:a3:ea:5d:7d:e9:1b:f2:30:22:d7:7d:ae:3e:
0d:19:ed:fe:ba:2f:27:8b:0a:3e:26:3f:d8:bd:09:
42:3c:02:b9:34:7d:ff:ba:38:57:e2:1c:b2:20:56:
0e:f5:5b:ae:e5:a7:da:c3:b9:00:56:a8:b4:1a:b2:
19:1e:20:32:94:49:9f:b6:53:2a:e0:15:e2:76:7a:
04:c5:21:99:88:b4:72:11:ef:79:22:22:1d:70:98:
73:8d:4b:0a:18:13:41:c0:da:5d:f9:f2:2b:70:b2:
4f:2a:b7:25:31:d6:1b:25:df:61:e2:42:74:3f:13:
74:84:41:46:ce:22:ce:89:0c:cc:d5:71:46:7f:f9:
ba:16:ca:02:f2:ae:0d:88:26:c3:36:1a:af:cb:3c:
94:db:4f:a4:52:3c:39:08:ec:41:69:c3:95:5d:54:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:11:D6:AE:6F:1E:13:8F:84:C8:F2:29:86:4D:D6:A3:3A:AC:5B:34
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5f:3a:83:60:7c:73:60:9a:82:0e:35:43:d0:17:05:da:69:
37:ad:4a:65:b2:69:2d:28:9e:e6:a0:25:5a:cc:43:70:04:83:
b8:bc:cf:dc:ce:90:b1:62:5b:63:55:ba:e0:12:31:56:f6:53:
ba:6b:3a:79:c6:97:02:f4:46:53:85:ae:89:c8:00:83:4d:e0:
43:f0:3b:cf:71:4c:0d:60:2f:67:92:80:fa:b8:0c:91:51:60:
a6:5f:53:21:1f:ab:f9:f6:a5:76:f3:39:70:09:3d:db:30:2e:
b2:4c:f6:35:95:b7:1b:f0:85:42:3d:92:f1:1e:e2:20:a6:0f:
c4:03:26:61:09:27:6e:70:f3:73:94:a2:e9:87:45:6d:db:66:
f0:27:8e:0d:ba:9f:a2:a2:12:3a:07:54:35:96:8f:86:9a:d6:
f5:47:e0:94:45:dc:f6:9b:71:51:4e:8d:95:be:d8:c4:92:49:
c1:76:ec:6d:7f:f1:b5:1c:29:ac:d8:1c:bd:4a:cf:1c:ab:27:
8f:86:a2:52:7d:3d:1a:ae:fd:45:69:5f:a7:85:ae:30:34:18:
fc:4c:f9:ef:53:3f:61:62:46:4e:6b:4a:fd:4a:c1:38:fd:33:
b2:ed:95:05:79:75:e9:7c:0f:dd:ad:4b:77:b5:e7:58:a5:9f:
a1:9c:e2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:27:41 2025 by rpki-client