Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: 3PsCQrEGWJebaLnYoxQE1/IGVvVEFdXFbhqKMTA0TmM=
Subject key identifier: 86:F4:01:1C:44:A5:BA:FC:B7:AE:BE:C7:DE:B0:15:B6:D4:1A:70:AB
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 019872CF528A2AAE29CA7B44DFFC4E505469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 01FE
Signing time: Mon 04 Aug 2025 02:00:46 +0000
Manifest this update: Mon 04 Aug 2025 02:00:46 +0000
Manifest next update: Tue 05 Aug 2025 02:00:46 +0000
Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: LuglDjZ4HdhBvIzfuMy+pPPrW0pRdGC2n3Kf4ZNWvAY=)
2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:52:8a:2a:ae:29:ca:7b:44:df:fc:4e:50:54:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Aug 4 02:00:46 2025 GMT
Not After : Aug 5 02:00:46 2025 GMT
Subject: CN=86f4011c44a5bafcb7aebec7deb015b6d41a70ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:70:0c:ea:dc:34:bd:08:c5:00:cc:99:4c:
e4:cd:bc:bf:62:7b:1e:ed:ea:c2:7d:9e:c9:e3:8a:
0f:8a:7e:90:a4:c2:10:e4:46:b6:34:a7:51:c3:42:
55:3c:49:08:97:6e:d9:3d:b3:09:26:f8:f1:47:ef:
aa:5a:80:3f:9e:d5:20:11:d2:97:9c:5e:62:9b:23:
2b:df:66:d4:f2:e8:3b:ec:c6:62:c4:64:38:0d:83:
53:47:04:76:00:ea:d0:fc:82:7d:13:fe:dd:6d:c8:
f1:20:88:3b:53:6c:fd:42:47:28:2c:52:da:fb:a0:
88:07:50:ee:1d:a7:82:7f:3b:83:0b:72:dc:b9:7c:
f0:76:af:f7:97:8e:80:f7:ca:fd:f4:50:56:63:b1:
41:69:65:07:1c:71:21:2e:91:b6:96:59:e0:0a:a2:
90:49:0b:0b:cf:13:10:4a:51:32:3f:5a:2e:32:bb:
c6:2a:43:2b:f1:b2:26:d0:a7:c4:fc:56:41:b3:0c:
83:23:14:a5:5a:bf:c8:f7:76:d4:a1:47:15:c0:a0:
59:59:49:c6:11:2d:57:9e:6b:8e:c3:1d:dc:b7:77:
51:68:de:73:f6:c9:42:96:ba:16:dc:a7:48:c0:b2:
5e:73:9c:ba:d3:93:3c:3d:0f:9e:c6:3e:d5:a7:50:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F4:01:1C:44:A5:BA:FC:B7:AE:BE:C7:DE:B0:15:B6:D4:1A:70:AB
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f4:b5:eb:b0:ca:19:38:91:b9:e6:43:a3:06:f6:55:1d:69:
09:2d:6f:37:a1:14:9b:90:1e:d7:86:b3:be:d4:29:81:cf:35:
3a:06:98:e7:3c:07:6e:eb:ce:44:9d:b8:d9:79:b5:0a:10:c4:
a9:2f:98:58:d1:27:b0:d8:9b:7e:a3:49:be:d2:fb:8e:e8:7f:
66:5f:6b:c5:f1:45:1f:48:9f:8a:72:15:a2:b2:55:1a:5d:27:
27:b0:fc:9c:98:cb:ef:c0:8c:1d:be:f6:20:bd:0f:ec:fc:5e:
42:be:07:12:5f:a7:9c:7d:2d:e4:60:04:e6:38:00:52:00:ff:
be:bf:fc:33:76:4c:37:15:8e:52:40:a2:79:a2:9c:b6:6a:9d:
f0:dc:0a:7a:09:e6:31:77:b0:ac:e0:35:3a:c6:59:d2:f2:76:
b2:dd:b1:8d:5f:36:c4:fd:8b:2c:da:3c:ba:26:90:96:2b:11:
d1:c1:f9:88:83:6e:d7:2b:fb:3a:bf:15:11:e8:1c:15:67:b4:
aa:8b:58:8b:c7:90:d4:9a:e4:dd:4f:c1:50:13:22:46:92:86:
cb:80:eb:9e:21:0b:f9:5a:31:b5:92:39:72:77:26:92:c9:c2:
e7:9c:7c:eb:ea:47:ca:5b:66:08:19:3b:a6:16:f8:4e:d6:e4:
8e:88:a0:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz1KKKq4pyntE3/xOUFRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MjUyOWE2MDkwMDU4MzRkYzEwYjViODAwZmU1MzEwYzU4
Y2M0N2UwHhcNMjUwODA0MDIwMDQ2WhcNMjUwODA1MDIwMDQ2WjAzMTEwLwYDVQQD
Eyg4NmY0MDExYzQ0YTViYWZjYjdhZWJlYzdkZWIwMTViNmQ0MWE3MGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zpwDOrcNL0IxQDMmUzkzby/Ynse
7erCfZ7J44oPin6QpMIQ5Ea2NKdRw0JVPEkIl27ZPbMJJvjxR++qWoA/ntUgEdKX
nF5imyMr32bU8ug77MZixGQ4DYNTRwR2AOrQ/IJ9E/7dbcjxIIg7U2z9QkcoLFLa
+6CIB1DuHaeCfzuDC3LcuXzwdq/3l46A98r99FBWY7FBaWUHHHEhLpG2llngCqKQ
SQsLzxMQSlEyP1ouMrvGKkMr8bIm0KfE/FZBswyDIxSlWr/I93bUoUcVwKBZWUnG
ES1XnmuOwx3ct3dRaN5z9slClroW3KdIwLJec5y605M8PQ+exj7Vp1D43wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb0ARxEpbr8t66+x96wFbbUGnCrMB8GA1UdIwQY
MBaAFDQlKaYJAFg03BC1uAD+UxDFjMR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jM2U2ZGYtMDgxNS00ZDMzLWIwOGMt
Y2FlYjFjMjgwOWE4LzEvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jM2U2ZGYtMDgxNS00ZDMzLWIwOGMtY2FlYjFjMjgwOWE4
LzEvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovS167DK
GTiRueZDowb2VR1pCS1vN6EUm5Ae14azvtQpgc81OgaY5zwHbuvORJ242Xm1ChDE
qS+YWNEnsNibfqNJvtL7juh/Zl9rxfFFH0ifinIVorJVGl0nJ7D8nJjL78CMHb72
IL0P7PxeQr4HEl+nnH0t5GAE5jgAUgD/vr/8M3ZMNxWOUkCieaKctmqd8NwKegnm
MXewrOA1OsZZ0vJ2st2xjV82xP2LLNo8uiaQlisR0cH5iINu1yv7Or8VEegcFWe0
qotYi8eQ1Jrk3U/BUBMiRpKGy4DrniEL+VoxtZI5cncmksnC55x86+pHyltmCBk7
phb4Ttbkjoig9w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:50 2025 by rpki-client